Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa
File:                     3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (raw, json)
Hash identifier:          fVCDZiCbLlSsN1wDrJuSbtyY561uyLBMZpAxJSo9NRg=
Subject key identifier:   D7:AF:AD:A9:C0:B6:11:B6:BC:C7:09:67:56:D1:C1:EA:81:D0:71:60
Certificate issuer:       /CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C
Certificate serial:       1A9B9F58E244137607BB2FDF903423726D33CD04
Authority key identifier: 7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa
Signing time:             Thu 16 Apr 2026 07:03:26 +0000
ROA not before:           Thu 16 Apr 2026 06:58:26 +0000
ROA not after:            Thu 15 Apr 2027 07:03:26 +0000
asID:                     136063
IP address blocks:        103.83.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl
                          rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 09:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9b:9f:58:e2:44:13:76:07:bb:2f:df:90:34:23:72:6d:33:cd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C
        Validity
            Not Before: Apr 16 06:58:26 2026 GMT
            Not After : Apr 15 07:03:26 2027 GMT
        Subject: CN=D7AFADA9C0B611B6BCC7096756D1C1EA81D07160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:81:73:70:fc:01:10:f2:5d:60:d4:60:28:
                    4e:49:2f:2d:77:84:79:cb:5e:10:b4:f5:8c:ee:d9:
                    39:52:ea:c7:10:45:a5:26:1f:4e:f5:9c:0a:a2:1b:
                    4c:15:cd:c1:c9:c2:32:b6:36:bd:0b:a3:61:82:1c:
                    65:9a:36:ff:a0:d8:21:74:44:df:40:d1:3b:51:6f:
                    53:20:4a:04:1b:68:8e:64:07:8a:d3:8d:ec:cb:c1:
                    9a:cf:0a:6b:94:54:75:08:29:25:99:eb:b4:22:d2:
                    87:35:4e:f5:29:af:1f:91:74:8f:13:3a:78:57:27:
                    1c:c0:e1:63:a0:27:76:dc:17:c5:54:7b:9c:af:8d:
                    ce:37:cf:ed:8c:7e:0e:b1:e4:8b:38:dd:4a:90:9d:
                    b7:71:c2:9d:79:81:fe:88:7e:d7:9e:4f:ef:04:4d:
                    ac:6e:c2:bb:de:c3:c7:d4:68:8d:a3:8c:41:30:64:
                    8f:50:c0:2c:93:4c:0b:21:d7:1f:99:d1:d3:86:33:
                    db:21:5a:24:bf:2a:5b:c3:7b:b9:7d:b8:e6:e5:90:
                    b5:0f:72:00:29:74:5d:65:b1:ae:6f:c3:7e:ff:48:
                    0f:02:ba:5c:57:48:ac:61:75:3c:cf:b6:5b:9b:ee:
                    1e:12:da:4f:62:a7:e9:dc:28:0a:cb:72:0a:4f:0e:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AF:AD:A9:C0:B6:11:B6:BC:C7:09:67:56:D1:C1:EA:81:D0:71:60
            X509v3 Authority Key Identifier:
                keyid:7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:89:ad:5a:cf:47:e3:cf:40:bd:1c:bc:e5:44:7f:8c:0a:e1:
         f5:93:72:b6:b8:27:15:df:cb:99:3e:27:23:d2:ac:2b:9c:7e:
         1c:7a:9b:06:6c:03:1e:d5:7c:6f:9a:c2:fe:3f:0b:1d:d3:cc:
         60:a2:cc:e7:2c:56:50:a0:6a:aa:e4:b2:2a:98:ef:4d:97:6e:
         87:d6:15:50:8e:d1:1c:2d:37:ff:24:21:35:f9:70:a4:af:1d:
         78:48:3c:df:cf:48:00:da:61:d5:16:a3:88:f2:bc:0b:35:41:
         d5:17:c6:80:41:f4:4d:10:50:db:41:1c:66:83:16:1e:59:12:
         56:6a:be:a0:34:d2:b2:6f:2c:35:76:dd:3f:7b:ef:b9:a1:04:
         27:d0:6b:44:1d:90:be:9f:53:be:73:6b:83:0a:78:c4:ee:3d:
         78:06:7c:8a:ec:c9:e3:f7:16:5b:e4:a3:40:22:7d:89:b9:08:
         1b:a9:78:b0:73:e6:d3:9b:24:79:56:05:e6:17:a3:bd:6f:14:
         b0:b9:0c:44:c4:e9:c5:f7:1d:d2:b6:9c:ed:2f:88:23:8f:ff:
         34:9c:6e:00:62:16:e3:22:37:a0:a1:b2:05:5e:72:38:dc:d7:
         e9:4b:a3:c6:13:44:7a:17:55:4f:89:47:47:00:a8:46:de:05:
         d4:8b:39:37
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGpufWOJEE3YHuy/fkDQjcm0zzQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4
ODczQzMyQzAeFw0yNjA0MTYwNjU4MjZaFw0yNzA0MTUwNzAzMjZaMDMxMTAvBgNV
BAMTKEQ3QUZBREE5QzBCNjExQjZCQ0M3MDk2NzU2RDFDMUVBODFEMDcxNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpIFzcPwBEPJdYNRgKE5JLy13
hHnLXhC09Yzu2TlS6scQRaUmH071nAqiG0wVzcHJwjK2Nr0Lo2GCHGWaNv+g2CF0
RN9A0TtRb1MgSgQbaI5kB4rTjezLwZrPCmuUVHUIKSWZ67Qi0oc1TvUprx+RdI8T
OnhXJxzA4WOgJ3bcF8VUe5yvjc43z+2Mfg6x5Is43UqQnbdxwp15gf6IfteeT+8E
Taxuwrvew8fUaI2jjEEwZI9QwCyTTAsh1x+Z0dOGM9shWiS/KlvDe7l9uOblkLUP
cgApdF1lsa5vw37/SA8CulxXSKxhdTzPtlub7h4S2k9ip+ncKArLcgpPDgQhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU16+tqcC2Eba8xwlnVtHB6oHQcWAwHwYDVR0j
BBgwFoAUfOivuoG5pOCxZ0SbSpymm4hzwywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NmMwNjQ1NS0xNWMwLTRmM2QtODEzYi1jMDdiZWY3OGYwMjUvMC83Q0U4QUZCQTgx
QjlBNEUwQjE2NzQ0OUI0QTlDQTY5Qjg4NzNDMzJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4ODcz
QzMyQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2YzA2NDU1LTE1YzAtNGYzZC04
MTNiLWMwN2JlZjc4ZjAyNS8wLzMxMzAzMzJlMzgzMzJlMzEzMDMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1NkMA0GCSqG
SIb3DQEBCwUAA4IBAQARia1az0fjz0C9HLzlRH+MCuH1k3K2uCcV38uZPicj0qwr
nH4cepsGbAMe1XxvmsL+Pwsd08xgosznLFZQoGqq5LIqmO9Nl26H1hVQjtEcLTf/
JCE1+XCkrx14SDzfz0gA2mHVFqOI8rwLNUHVF8aAQfRNEFDbQRxmgxYeWRJWar6g
NNKybyw1dt0/e++5oQQn0GtEHZC+n1O+c2uDCnjE7j14BnyK7Mnj9xZb5KNAIn2J
uQgbqXiwc+bTmyR5VgXmF6O9bxSwuQxExOnF9x3StpztL4gjj/80nG4AYhbjIjeg
obIFXnI43NfpS6PGE0R6F1VPiUdHAKhG3gXUizk3
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:04:43 2026 by rpki-client