Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
File:                     3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (raw, json)
Hash identifier:          ZIzUt+4j3ybpxiWs7Q5/MtmcKRN4EENpYpP86/UWwr0=
Subject key identifier:   11:EC:43:D3:2D:D7:D3:0F:BC:C7:56:10:BC:46:39:07:7F:65:62:3F
Certificate issuer:       /CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Certificate serial:       6415753E8DE43409A90C3C44A0842613AB354093
Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
Signing time:             Wed 04 Feb 2026 04:00:00 +0000
ROA not before:           Wed 04 Feb 2026 03:55:00 +0000
ROA not after:            Wed 03 Feb 2027 04:00:00 +0000
asID:                     147119
IP address blocks:        103.175.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
                          rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:15:75:3e:8d:e4:34:09:a9:0c:3c:44:a0:84:26:13:ab:35:40:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
        Validity
            Not Before: Feb  4 03:55:00 2026 GMT
            Not After : Feb  3 04:00:00 2027 GMT
        Subject: CN=11EC43D32DD7D30FBCC75610BC4639077F65623F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:16:24:03:46:08:6d:01:ec:4b:9c:8f:1e:
                    49:c4:c3:50:05:a0:f1:67:d7:e6:aa:b6:fd:de:e5:
                    b0:a8:8f:fe:d2:b2:98:c8:12:9a:9a:41:2e:e4:a0:
                    7b:e8:4b:87:cb:97:e4:81:b4:b4:c0:42:7e:64:4f:
                    94:a7:23:cb:f2:ca:21:96:6e:6b:3c:a2:5c:0d:14:
                    bb:d0:4a:16:9f:37:75:17:06:f9:73:ed:b5:7b:7f:
                    cb:f7:07:7c:71:21:76:60:ed:b4:47:19:f3:2e:b1:
                    1f:d6:ac:bc:0c:44:d5:f0:3e:f7:5d:96:cf:89:e5:
                    fc:df:f9:60:ca:2a:f8:31:66:3d:7d:56:9e:63:84:
                    77:eb:39:12:72:14:e1:de:0d:d4:22:2b:b1:b3:87:
                    38:b4:1e:10:a2:3c:81:f9:a6:76:31:91:f6:b6:fb:
                    39:7b:0a:71:94:4f:43:ed:ac:df:d6:50:59:7a:6c:
                    28:f3:63:13:29:67:3c:79:c6:4d:b9:9b:69:c6:f2:
                    bc:37:ac:27:d4:fc:5e:dd:ca:00:85:6e:3c:a0:76:
                    25:79:23:bc:dc:cb:d8:24:48:67:9a:dc:dd:ba:92:
                    7e:25:08:aa:dd:fd:1e:5f:e2:cf:c7:29:be:4f:56:
                    89:e5:d7:d3:47:fe:ba:1c:9a:6f:98:89:b1:1e:a1:
                    79:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EC:43:D3:2D:D7:D3:0F:BC:C7:56:10:BC:46:39:07:7F:65:62:3F
            X509v3 Authority Key Identifier:
                keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:5b:10:ca:11:45:29:6b:f6:01:a3:ee:68:d6:49:d9:56:0d:
         07:36:88:5d:ce:43:c3:76:5d:13:77:7e:2d:05:86:8c:7e:f9:
         9a:2e:55:df:82:5c:04:ac:04:8f:90:6f:d5:9e:b7:28:47:fe:
         b1:2e:1c:85:07:7c:bf:cf:12:4d:e2:cb:ba:37:c4:cf:6a:04:
         99:b8:00:83:99:7d:6a:d3:d3:93:a2:13:f8:9c:de:69:45:c0:
         4c:1c:87:16:1c:ec:93:3a:58:13:0e:88:81:53:1b:d3:5b:ac:
         4e:bf:45:fd:8c:b7:2b:e7:47:fb:43:25:79:87:36:87:e6:f8:
         54:d8:4b:73:44:a3:12:a4:0b:33:d7:c6:13:43:35:2a:db:cf:
         01:62:09:25:67:61:30:45:c8:b1:42:c3:52:27:4a:91:fb:a6:
         b8:8e:a4:bc:01:1f:81:81:86:6c:c5:82:4c:c1:a1:51:4f:4f:
         10:20:74:ad:5d:17:d5:af:a4:b1:ab:1a:e3:25:4f:c5:20:bb:
         b8:b7:5f:0f:66:7f:9d:21:4a:d7:e1:00:1b:19:1d:81:b3:bb:
         38:a4:3d:c4:c4:d5:f9:05:e2:a0:37:65:73:21:ef:71:f6:a7:
         f9:c6:10:f4:b4:c9:3d:d1:df:5e:6f:a1:95:98:d2:d4:bd:7f:
         6a:73:17:00
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZBV1Po3kNAmpDDxEoIQmE6s1QJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy
NTY2NTRDNjAeFw0yNjAyMDQwMzU1MDBaFw0yNzAyMDMwNDAwMDBaMDMxMTAvBgNV
BAMTKDExRUM0M0QzMkREN0QzMEZCQ0M3NTYxMEJDNDYzOTA3N0Y2NTYyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLRYkA0YIbQHsS5yPHknEw1AF
oPFn1+aqtv3e5bCoj/7SspjIEpqaQS7koHvoS4fLl+SBtLTAQn5kT5SnI8vyyiGW
bms8olwNFLvQShafN3UXBvlz7bV7f8v3B3xxIXZg7bRHGfMusR/WrLwMRNXwPvdd
ls+J5fzf+WDKKvgxZj19Vp5jhHfrORJyFOHeDdQiK7Gzhzi0HhCiPIH5pnYxkfa2
+zl7CnGUT0PtrN/WUFl6bCjzYxMpZzx5xk25m2nG8rw3rCfU/F7dygCFbjygdiV5
I7zcy9gkSGea3N26kn4lCKrd/R5f4s/HKb5PVonl19NH/rocmm+YibEeoXkdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUEexD0y3X0w+8x1YQvEY5B39lYj8wHwYDVR0j
BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC
RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2
NTRDNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NjljM2UzLTdiNTktNDQ5MC04
NGNmLWZlZjE1ODVhYzc1Yi8wLzMxMzAzMzJlMzEzNzM1MmUzMjMwMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnr8wwDQYJ
KoZIhvcNAQELBQADggEBADtbEMoRRSlr9gGj7mjWSdlWDQc2iF3OQ8N2XRN3fi0F
hox++ZouVd+CXASsBI+Qb9WetyhH/rEuHIUHfL/PEk3iy7o3xM9qBJm4AIOZfWrT
05OiE/ic3mlFwEwchxYc7JM6WBMOiIFTG9NbrE6/Rf2MtyvnR/tDJXmHNofm+FTY
S3NEoxKkCzPXxhNDNSrbzwFiCSVnYTBFyLFCw1InSpH7priOpLwBH4GBhmzFgkzB
oVFPTxAgdK1dF9WvpLGrGuMlT8Ugu7i3Xw9mf50hStfhABsZHYGzuzikPcTE1fkF
4qA3ZXMh73H2p/nGEPS0yT3R315voZWY0tS9f2pzFwA=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:43:32 2026 by rpki-client