Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/3130332e3138392e39342e302f32332d3234203d3e2034383030.roa
File:                     3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          wuBJwpKwOiGhlkXr5a00YrNTyDMK7HD3QVMHitGSpjk=
Subject key identifier:   19:B5:35:6B:C1:93:2E:65:06:18:E0:88:BC:DB:0E:DD:45:05:D9:02
Certificate issuer:       /CN=945AD192B10F71CE48362295A9C6281FE3395786
Certificate serial:       65940D84F4F023AAD1E3217BAA4E1A2F8B39A7F5
Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/3130332e3138392e39342e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 23 Feb 2026 09:00:02 +0000
ROA not before:           Mon 23 Feb 2026 08:55:02 +0000
ROA not after:            Mon 22 Feb 2027 09:00:02 +0000
asID:                     4800
IP address blocks:        103.189.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
                          rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:94:0d:84:f4:f0:23:aa:d1:e3:21:7b:aa:4e:1a:2f:8b:39:a7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786
        Validity
            Not Before: Feb 23 08:55:02 2026 GMT
            Not After : Feb 22 09:00:02 2027 GMT
        Subject: CN=19B5356BC1932E650618E088BCDB0EDD4505D902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:44:09:37:c7:a0:a1:ed:71:54:e8:95:11:
                    9b:30:07:fa:d9:e8:80:d8:99:37:cf:d2:6f:38:3c:
                    99:92:cc:88:d5:aa:15:ef:dd:e6:73:5d:c9:6b:37:
                    fd:91:76:9b:24:5d:20:f4:8b:13:64:32:3a:a0:f8:
                    87:87:a6:7c:da:4b:6b:ed:e9:da:11:4d:15:dc:ed:
                    f7:a3:19:7b:48:46:c9:95:ac:e8:f4:48:ec:d7:76:
                    cb:30:bf:4e:80:cb:d9:9a:3c:8f:fc:72:e3:85:f2:
                    28:a1:7a:71:ec:3a:08:95:42:71:6b:f0:7e:c7:85:
                    a5:87:b8:4e:83:ce:5b:dd:f4:cb:44:20:19:2f:59:
                    04:41:20:f7:dd:1f:c7:8c:c3:5d:e4:9f:91:76:51:
                    60:de:92:5c:c5:fa:76:2a:c7:b0:e6:c1:40:3e:ee:
                    02:9b:b8:82:0a:00:c0:b5:5d:8c:70:fd:6f:fe:29:
                    be:4e:76:f1:4c:27:43:43:4f:cd:34:dc:13:83:b4:
                    fc:1f:f2:a5:1a:72:9e:91:7d:fe:b0:76:68:98:83:
                    57:81:a4:7a:3b:58:17:5c:8a:30:5d:ff:16:f7:5d:
                    17:b4:f5:3f:3d:d4:04:73:0e:0f:6f:29:10:2f:48:
                    a5:21:bd:3b:52:5f:5c:b9:5c:28:4f:b5:cb:56:9a:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B5:35:6B:C1:93:2E:65:06:18:E0:88:BC:DB:0E:DD:45:05:D9:02
            X509v3 Authority Key Identifier:
                keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/3130332e3138392e39342e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:7e:d6:92:68:b5:7d:db:36:9d:36:51:19:5b:48:3f:f0:
         06:48:18:e7:de:83:99:98:1b:0c:ae:1c:0b:05:1c:15:59:6a:
         44:74:35:78:82:ef:4d:6a:90:47:89:bb:18:d3:cd:2e:98:42:
         a7:2f:44:84:dd:f3:05:1e:81:d2:63:07:8f:40:ee:d9:6d:97:
         5e:d7:af:ac:2c:57:45:d3:aa:b1:bc:05:a3:0c:36:f0:77:ca:
         e2:e6:71:f0:ee:91:e3:57:8b:f2:f9:4b:a5:47:bc:04:0b:c6:
         3f:0c:92:5a:8b:42:ab:98:58:43:82:bb:ba:99:4a:2d:8d:e2:
         eb:52:9f:7c:33:4e:d5:82:66:86:40:69:c1:b5:42:aa:bb:f2:
         90:66:ba:47:80:05:c4:76:ff:3f:e1:98:a3:b9:0e:70:6f:64:
         c9:29:aa:86:30:ad:1f:a0:3f:7c:42:98:b4:09:e3:aa:03:81:
         fb:ca:88:9e:7d:69:71:40:1a:5a:e5:f5:a5:1c:57:2a:ca:f0:
         03:c3:5c:4a:a2:f0:92:d8:41:3e:0a:32:d2:bf:fb:c7:5d:2f:
         e6:e5:c4:79:57:45:10:15:e2:11:4f:fd:28:2b:06:da:5c:82:
         e1:db:2b:79:1a:5f:72:4c:bc:fe:b6:af:1a:da:36:41:c8:2b:
         79:5c:6d:90
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZZQNhPTwI6rR4yF7qk4aL4s5p/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF
MzM5NTc4NjAeFw0yNjAyMjMwODU1MDJaFw0yNzAyMjIwOTAwMDJaMDMxMTAvBgNV
BAMTKDE5QjUzNTZCQzE5MzJFNjUwNjE4RTA4OEJDREIwRURENDUwNUQ5MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHEQJN8egoe1xVOiVEZswB/rZ
6IDYmTfP0m84PJmSzIjVqhXv3eZzXclrN/2RdpskXSD0ixNkMjqg+IeHpnzaS2vt
6doRTRXc7fejGXtIRsmVrOj0SOzXdsswv06Ay9maPI/8cuOF8iihenHsOgiVQnFr
8H7HhaWHuE6Dzlvd9MtEIBkvWQRBIPfdH8eMw13kn5F2UWDeklzF+nYqx7DmwUA+
7gKbuIIKAMC1XYxw/W/+Kb5OdvFMJ0NDT8003BODtPwf8qUacp6Rff6wdmiYg1eB
pHo7WBdcijBd/xb3XRe09T891ARzDg9vKRAvSKUhvTtSX1y5XChPtctWmpeJAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUGbU1a8GTLmUGGOCIvNsO3UUF2QIwHwYDVR0j
BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx
MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5
NTc4Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzYTUyMDQ1LWE2ZmMtNDViMS1i
ZTU5LTgyNTczNWM5NmY1NC8wLzMxMzAzMzJlMzEzODM5MmUzOTM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvV4wDQYJKoZIhvcN
AQELBQADggEBACqrftaSaLV92zadNlEZW0g/8AZIGOfeg5mYGwyuHAsFHBVZakR0
NXiC701qkEeJuxjTzS6YQqcvRITd8wUegdJjB49A7tltl17Xr6wsV0XTqrG8BaMM
NvB3yuLmcfDukeNXi/L5S6VHvAQLxj8MklqLQquYWEOCu7qZSi2N4utSn3wzTtWC
ZoZAacG1Qqq78pBmukeABcR2/z/hmKO5DnBvZMkpqoYwrR+gP3xCmLQJ46oDgfvK
iJ59aXFAGlrl9aUcVyrK8APDXEqi8JLYQT4KMtK/+8ddL+blxHlXRRAV4hFP/Sgr
BtpcguHbK3kaX3JMvP62rxraNkHIK3lcbZA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:09 2026 by rpki-client