Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa
File:                     3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (raw, json)
Hash identifier:          DnN4DbVNjWnQCkjXwlNPMidCO0/mBYN6hm7/J4O2GDg=
Subject key identifier:   96:5B:FD:0C:8B:0B:23:3C:D0:3E:AE:54:92:E9:B1:44:7B:14:7B:1B
Certificate issuer:       /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
Certificate serial:       52C68D832D2580798465F156653028E020948F49
Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa
Signing time:             Wed 11 Feb 2026 10:00:03 +0000
ROA not before:           Wed 11 Feb 2026 09:55:03 +0000
ROA not after:            Wed 10 Feb 2027 10:00:03 +0000
asID:                     150262
IP address blocks:        103.27.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl
                          rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 06:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c6:8d:83:2d:25:80:79:84:65:f1:56:65:30:28:e0:20:94:8f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
        Validity
            Not Before: Feb 11 09:55:03 2026 GMT
            Not After : Feb 10 10:00:03 2027 GMT
        Subject: CN=965BFD0C8B0B233CD03EAE5492E9B1447B147B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b0:4d:cd:6f:78:8a:b6:0f:2a:0c:4e:71:83:
                    0e:ac:27:6e:41:56:da:80:2f:43:20:e9:0d:46:0c:
                    6d:0b:76:5c:47:5e:78:86:b7:7a:dd:b7:e2:d8:75:
                    1e:c4:2f:ed:9c:3d:24:96:59:15:5a:ba:f6:98:ce:
                    64:de:c6:90:39:5f:f7:0a:d4:db:ac:ba:75:92:22:
                    e1:0f:91:da:fa:83:a9:7b:06:6f:c8:1e:e3:44:80:
                    d0:34:af:50:f3:57:cd:42:0c:b2:99:dc:da:71:47:
                    ed:de:12:44:85:40:36:89:4c:a1:e2:83:fa:a6:f1:
                    23:88:39:aa:fb:bb:9f:b4:9a:46:14:c7:f8:93:40:
                    9f:2d:f4:e6:a8:74:8b:60:59:9b:e2:fe:56:43:19:
                    19:8c:98:b3:49:e2:8c:80:1d:fa:0c:9a:ca:2b:a0:
                    e5:08:c8:52:b4:c9:42:8a:0f:64:2a:98:63:e0:59:
                    db:09:e0:6e:ea:a8:33:cf:4a:0b:b2:d6:5f:4f:19:
                    52:9a:92:ea:23:3c:b9:27:39:67:e6:2e:a2:02:8b:
                    bc:0b:29:4d:90:70:67:23:12:88:6d:84:79:b0:4d:
                    60:08:00:37:55:00:25:22:7d:12:2f:16:f4:27:2f:
                    50:0c:92:a4:3c:76:dd:bb:b6:d5:89:b9:4d:9b:80:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5B:FD:0C:8B:0B:23:3C:D0:3E:AE:54:92:E9:B1:44:7B:14:7B:1B
            X509v3 Authority Key Identifier:
                keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:a2:3e:e2:db:1b:05:23:9c:d8:cf:24:be:22:9d:01:47:71:
         7b:26:95:d2:41:7c:01:d6:44:3a:88:f3:36:7b:78:ce:63:50:
         87:9a:fd:8a:46:36:de:18:54:1f:16:3d:82:04:ff:0d:c2:36:
         2f:01:09:2b:45:f6:93:27:19:31:75:18:e0:e2:12:d9:ba:24:
         16:68:aa:cd:26:26:a2:67:5e:69:2e:d1:1b:28:9b:4a:f5:3a:
         66:f2:8b:8b:84:74:fe:de:37:3b:dc:71:29:53:ed:aa:1f:b2:
         51:d8:9d:47:91:37:14:d0:dc:d7:8a:3d:6b:b1:c4:6c:f7:19:
         b7:3e:97:bc:19:8a:f3:ed:aa:24:fa:ff:1f:dc:2c:9e:78:e1:
         24:40:ed:08:84:a7:11:5d:63:11:3b:86:7e:f4:d5:55:ec:59:
         c9:77:53:82:bc:79:2d:7a:59:a2:2d:d5:31:b1:f8:05:72:b2:
         88:f9:7c:c9:c5:4a:24:3e:cc:cd:30:f6:12:1d:ed:4f:ef:56:
         45:0a:a3:56:a4:90:31:b5:3f:f7:d8:fb:76:73:69:d0:52:20:
         d5:62:a3:45:6a:4a:c1:46:72:3e:c5:5a:3f:fe:c2:8e:82:b4:
         a7:e1:60:c0:17:47:24:f5:a4:98:16:8d:d3:23:9e:27:5f:3d:
         84:6b:ae:6d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUsaNgy0lgHmEZfFWZTAo4CCUj0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG
NzBCRDg5NzAeFw0yNjAyMTEwOTU1MDNaFw0yNzAyMTAxMDAwMDNaMDMxMTAvBgNV
BAMTKDk2NUJGRDBDOEIwQjIzM0NEMDNFQUU1NDkyRTlCMTQ0N0IxNDdCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDosE3Nb3iKtg8qDE5xgw6sJ25B
VtqAL0Mg6Q1GDG0LdlxHXniGt3rdt+LYdR7EL+2cPSSWWRVauvaYzmTexpA5X/cK
1NusunWSIuEPkdr6g6l7Bm/IHuNEgNA0r1DzV81CDLKZ3NpxR+3eEkSFQDaJTKHi
g/qm8SOIOar7u5+0mkYUx/iTQJ8t9OaodItgWZvi/lZDGRmMmLNJ4oyAHfoMmsor
oOUIyFK0yUKKD2QqmGPgWdsJ4G7qqDPPSguy1l9PGVKakuojPLknOWfmLqICi7wL
KU2QcGcjEohthHmwTWAIADdVACUifRIvFvQnL1AMkqQ8dt27ttWJuU2bgCohAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUllv9DIsLIzzQPq5UkumxRHsUexswHwYDVR0j
BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5
MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC
RDg5Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyMjdiMTc2LTRjMTctNDI0NC1i
YWRmLWY0OTZiY2IxNWUyMC8wLzMxMzAzMzJlMzIzNzJlMzEzOTMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxvAMA0GCSqG
SIb3DQEBCwUAA4IBAQAToj7i2xsFI5zYzyS+Ip0BR3F7JpXSQXwB1kQ6iPM2e3jO
Y1CHmv2KRjbeGFQfFj2CBP8NwjYvAQkrRfaTJxkxdRjg4hLZuiQWaKrNJiaiZ15p
LtEbKJtK9Tpm8ouLhHT+3jc73HEpU+2qH7JR2J1HkTcU0NzXij1rscRs9xm3Ppe8
GYrz7aok+v8f3CyeeOEkQO0IhKcRXWMRO4Z+9NVV7FnJd1OCvHktelmiLdUxsfgF
crKI+XzJxUokPszNMPYSHe1P71ZFCqNWpJAxtT/32Pt2c2nQUiDVYqNFakrBRnI+
xVo//sKOgrSn4WDAF0ck9aSYFo3TI54nXz2Ea65t
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:23:14 2026 by rpki-client