Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32342d3234203d3e20313331373831.roa
File:                     3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (raw, json)
Hash identifier:          015aA8T+8ETys0VPJF7SaN/NGUY5b/DbWClhBrzMd1I=
Subject key identifier:   6A:18:30:E8:50:0C:CA:E4:F0:7E:56:5E:DE:EB:62:93:AC:62:BD:05
Certificate issuer:       /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
Certificate serial:       3302DE95DA8E60143C03F0C07D1173107F1F3399
Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32342d3234203d3e20313331373831.roa
Signing time:             Thu 26 Feb 2026 17:00:01 +0000
ROA not before:           Thu 26 Feb 2026 16:55:01 +0000
ROA not after:            Thu 25 Feb 2027 17:00:01 +0000
asID:                     131781
IP address blocks:        103.17.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl
                          rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 06:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:02:de:95:da:8e:60:14:3c:03:f0:c0:7d:11:73:10:7f:1f:33:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
        Validity
            Not Before: Feb 26 16:55:01 2026 GMT
            Not After : Feb 25 17:00:01 2027 GMT
        Subject: CN=6A1830E8500CCAE4F07E565EDEEB6293AC62BD05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:f1:59:3d:ae:a0:e9:b7:4d:66:d0:d7:a2:
                    dd:37:b0:53:4e:b6:66:05:66:c2:2b:1f:ce:c6:30:
                    53:c4:1c:a1:ab:3f:59:c4:9c:9a:85:0a:99:10:74:
                    59:5f:1e:92:c1:69:e4:cf:80:f7:88:22:95:64:d1:
                    6a:d4:8c:cf:23:22:a1:99:c8:01:48:9e:75:63:8c:
                    ce:24:14:e6:64:c4:89:fc:5b:d3:83:0e:9c:98:20:
                    e8:44:57:9d:7b:75:73:f9:c5:57:b3:63:19:62:c1:
                    be:dc:ef:3d:24:dc:fc:5d:83:d6:85:cc:7a:45:f1:
                    53:99:27:7e:34:f6:6b:53:60:a1:8e:5b:76:dc:b7:
                    7e:f9:f7:0d:79:20:9c:d4:f0:f9:3b:6f:8f:72:e7:
                    fa:37:1f:d3:27:26:ad:2e:3a:15:e5:63:9c:37:f0:
                    2d:b8:76:06:1f:59:12:75:bc:4b:ce:52:83:88:df:
                    e3:dc:23:4f:4d:34:40:3c:c0:80:ba:63:2e:b1:48:
                    8c:c6:f5:ba:0c:30:63:47:a4:b7:a4:2b:be:1b:df:
                    9d:4c:f1:7a:d4:27:42:e7:ec:c6:d0:5d:ec:a1:05:
                    b9:6b:23:4e:db:db:65:c9:69:3f:e6:61:7f:53:35:
                    65:f3:b7:f5:e1:60:10:17:58:69:f2:5f:4b:27:80:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:30:E8:50:0C:CA:E4:F0:7E:56:5E:DE:EB:62:93:AC:62:BD:05
            X509v3 Authority Key Identifier:
                keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32342d3234203d3e20313331373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:ac:73:8a:85:f2:84:81:c6:a3:42:e9:5b:27:83:b2:60:
         b2:9d:e8:ae:84:cb:d0:c3:e8:b3:83:7d:87:27:dc:d7:8a:8d:
         4a:62:43:50:a4:2f:a5:e0:43:fb:19:1d:96:15:c7:76:64:d3:
         d0:3a:52:18:c3:c8:49:8e:54:24:c7:de:24:fc:5e:bb:81:16:
         5b:b0:79:63:2b:c4:52:96:49:ee:ad:5f:d1:27:d3:1c:f6:63:
         c7:11:49:2d:0c:d1:5a:34:9a:b8:9b:c1:61:8f:41:95:28:54:
         9a:e6:6e:ee:b3:3a:eb:df:9b:22:a4:2d:1b:ad:2b:6e:b4:65:
         7b:88:53:82:4d:68:52:9d:00:22:92:32:cc:56:b8:e5:ea:81:
         5d:58:54:ea:4d:d2:2f:ab:18:ad:6a:3a:59:09:87:6f:fc:c6:
         ad:e0:0c:3b:b1:fb:55:54:0d:f9:94:1a:60:91:47:92:71:12:
         33:19:6e:3c:39:e5:c2:9c:26:2a:85:6f:87:b5:86:6d:98:1d:
         02:e3:a5:30:f3:74:e4:2e:0c:d4:c1:1d:5b:e9:e4:67:fd:64:
         49:d4:1c:9f:43:df:a4:cf:c9:a1:d4:7d:e5:6c:99:ae:ee:14:
         92:fb:2b:81:77:3f:b6:4e:10:82:be:c1:fa:1c:e0:a5:46:63:
         98:bd:a1:46
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMwLeldqOYBQ8A/DAfRFzEH8fM5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC
MTk1QThFRDAeFw0yNjAyMjYxNjU1MDFaFw0yNzAyMjUxNzAwMDFaMDMxMTAvBgNV
BAMTKDZBMTgzMEU4NTAwQ0NBRTRGMDdFNTY1RURFRUI2MjkzQUM2MkJEMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY5fFZPa6g6bdNZtDXot03sFNO
tmYFZsIrH87GMFPEHKGrP1nEnJqFCpkQdFlfHpLBaeTPgPeIIpVk0WrUjM8jIqGZ
yAFInnVjjM4kFOZkxIn8W9ODDpyYIOhEV517dXP5xVezYxliwb7c7z0k3Pxdg9aF
zHpF8VOZJ3409mtTYKGOW3bct3759w15IJzU8Pk7b49y5/o3H9MnJq0uOhXlY5w3
8C24dgYfWRJ1vEvOUoOI3+PcI09NNEA8wIC6Yy6xSIzG9boMMGNHpLekK74b351M
8XrUJ0Ln7MbQXeyhBblrI07b22XJaT/mYX9TNWXzt/XhYBAXWGnyX0sngMt9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUahgw6FAMyuTwflZe3utik6xivQUwHwYDVR0j
BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD
NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1
QThFRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhMDcxNTE0LWU0ZGUtNGFjZS1h
MGRmLWY3YzRhYjgwNzRhNS8wLzMxMzAzMzJlMzEzNzJlMzczNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcRTDANBgkqhkiG
9w0BAQsFAAOCAQEAlU6sc4qF8oSBxqNC6Vsng7Jgsp3oroTL0MPos4N9hyfc14qN
SmJDUKQvpeBD+xkdlhXHdmTT0DpSGMPISY5UJMfeJPxeu4EWW7B5YyvEUpZJ7q1f
0SfTHPZjxxFJLQzRWjSauJvBYY9BlShUmuZu7rM669+bIqQtG60rbrRle4hTgk1o
Up0AIpIyzFa45eqBXVhU6k3SL6sYrWo6WQmHb/zGreAMO7H7VVQN+ZQaYJFHknES
MxluPDnlwpwmKoVvh7WGbZgdAuOlMPN05C4M1MEdW+nkZ/1kSdQcn0PfpM/JodR9
5WyZru4UkvsrgXc/tk4Qgr7B+hzgpUZjmL2hRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:36:21 2026 by rpki-client