Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa
File:                     3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (raw, json)
Hash identifier:          gsdXX/duHLIGBlXHNlDaHKiWX/urg+G15cVtwivSaZc=
Subject key identifier:   EF:5B:37:E8:69:8E:51:96:8C:88:D1:E9:88:6B:8D:EB:22:A6:94:90
Certificate issuer:       /CN=DE4325727D17555F6DABCC72788E361C741D47CF
Certificate serial:       7A3D283C79B5709B907CB201F1381CFE897360DD
Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa
Signing time:             Thu 05 Feb 2026 06:00:01 +0000
ROA not before:           Thu 05 Feb 2026 05:55:01 +0000
ROA not after:            Thu 04 Feb 2027 06:00:01 +0000
asID:                     141074
IP address blocks:        103.155.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl
                          rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3d:28:3c:79:b5:70:9b:90:7c:b2:01:f1:38:1c:fe:89:73:60:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF
        Validity
            Not Before: Feb  5 05:55:01 2026 GMT
            Not After : Feb  4 06:00:01 2027 GMT
        Subject: CN=EF5B37E8698E51968C88D1E9886B8DEB22A69490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:b6:3d:5e:1e:3d:0b:91:8e:64:2e:9b:e0:
                    e6:41:f5:20:01:cb:61:b8:43:6c:61:08:08:be:2c:
                    ea:4c:c1:62:af:0b:de:2b:75:0e:1c:75:01:44:9f:
                    a2:2f:81:e7:df:0f:44:f1:48:73:3d:fc:a1:18:dc:
                    38:c9:34:f5:6d:26:68:3d:39:e3:a6:58:66:3b:ba:
                    6a:67:87:d1:df:88:20:aa:71:b2:c3:7e:58:4b:e7:
                    7b:46:e2:5c:7d:a7:4b:77:a0:1c:20:a9:8f:8d:6f:
                    a7:2d:52:da:f2:41:fe:bb:66:2f:28:b4:01:d9:e2:
                    be:7c:df:22:f5:34:e7:1d:6b:73:02:1e:fd:5e:fe:
                    60:c5:26:35:5b:6d:ca:b3:89:76:82:00:68:ae:a7:
                    f8:de:b0:98:34:cd:23:cb:29:6f:31:51:df:7d:2e:
                    64:9e:16:fd:9a:17:90:f1:2f:c2:7d:9d:70:0b:6a:
                    48:f3:cc:2f:09:77:6b:81:d8:68:3e:ab:e2:cd:20:
                    e1:66:1c:dd:e0:0c:9e:3d:91:42:9a:29:46:ef:56:
                    f4:ec:ab:2c:5f:26:00:65:85:f8:0e:97:b2:fe:f0:
                    ee:fb:9c:73:d1:34:3b:a2:44:fa:ca:ec:95:13:27:
                    5a:21:80:1f:17:7d:3a:5e:3b:da:4d:f1:cd:87:9e:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:37:E8:69:8E:51:96:8C:88:D1:E9:88:6B:8D:EB:22:A6:94:90
            X509v3 Authority Key Identifier:
                keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:33:3d:98:9d:37:64:69:7c:6a:a6:cc:cc:bf:87:86:95:
         a6:e2:ad:f6:28:4b:34:8f:54:a2:33:cd:4c:1b:60:9f:29:86:
         32:f2:00:8b:31:38:06:f1:d2:b4:fc:f4:c8:e5:64:af:f7:31:
         b8:54:dc:5f:01:ab:e2:fa:cd:db:9d:9d:2f:9c:e8:c4:db:6d:
         a6:67:cd:02:b1:7b:20:a6:c9:52:54:b0:33:0e:54:7f:ee:42:
         dd:c5:c3:4d:e0:ec:bc:f2:9d:81:39:e1:b6:89:66:41:c2:85:
         b1:bc:26:b0:08:dd:f5:a7:49:71:31:b8:0d:27:ad:6e:cf:77:
         05:31:28:9c:d5:22:46:05:54:c3:30:ba:a0:27:ae:5c:a3:42:
         78:00:43:3b:c6:25:47:80:97:99:e6:12:1f:59:ce:9a:90:29:
         a8:9d:9b:7f:fa:10:18:3e:50:7f:af:54:bb:8e:cb:e4:5b:40:
         82:47:28:ce:5b:57:9b:b6:45:c8:88:8b:a0:f8:c2:c9:33:33:
         8e:e6:a6:be:3e:fd:98:31:8b:66:39:3c:dd:bf:b0:75:f7:64:
         5e:97:3f:a6:21:d4:3e:1e:1c:ee:4f:b9:8e:65:50:11:5c:10:
         a6:59:54:e4:db:c9:01:70:d9:a0:80:a6:63:cd:c3:a5:b2:34:
         f0:5f:d9:45
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUej0oPHm1cJuQfLIB8Tgc/olzYN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3
NDFENDdDRjAeFw0yNjAyMDUwNTU1MDFaFw0yNzAyMDQwNjAwMDFaMDMxMTAvBgNV
BAMTKEVGNUIzN0U4Njk4RTUxOTY4Qzg4RDFFOTg4NkI4REVCMjJBNjk0OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPrY9Xh49C5GOZC6b4OZB9SAB
y2G4Q2xhCAi+LOpMwWKvC94rdQ4cdQFEn6IvgeffD0TxSHM9/KEY3DjJNPVtJmg9
OeOmWGY7umpnh9HfiCCqcbLDflhL53tG4lx9p0t3oBwgqY+Nb6ctUtryQf67Zi8o
tAHZ4r583yL1NOcda3MCHv1e/mDFJjVbbcqziXaCAGiup/jesJg0zSPLKW8xUd99
LmSeFv2aF5DxL8J9nXALakjzzC8Jd2uB2Gg+q+LNIOFmHN3gDJ49kUKaKUbvVvTs
qyxfJgBlhfgOl7L+8O77nHPRNDuiRPrK7JUTJ1ohgB8XfTpeO9pN8c2HnkjfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU71s36GmOUZaMiNHpiGuN6yKmlJAwHwYDVR0j
BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE
MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE
NDdDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwNzYwOGNlLWMzZjgtNDRlYi1h
ZWU3LWI3ODRhZTIwYzljNy8wLzMxMzAzMzJlMzEzNTM1MmUzMjM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzAzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5sYMA0GCSqG
SIb3DQEBCwUAA4IBAQAqnDM9mJ03ZGl8aqbMzL+HhpWm4q32KEs0j1SiM81MG2Cf
KYYy8gCLMTgG8dK0/PTI5WSv9zG4VNxfAavi+s3bnZ0vnOjE222mZ80CsXsgpslS
VLAzDlR/7kLdxcNN4Oy88p2BOeG2iWZBwoWxvCawCN31p0lxMbgNJ61uz3cFMSic
1SJGBVTDMLqgJ65co0J4AEM7xiVHgJeZ5hIfWc6akCmonZt/+hAYPlB/r1S7jsvk
W0CCRyjOW1ebtkXIiIug+MLJMzOO5qa+Pv2YMYtmOTzdv7B192Relz+mIdQ+Hhzu
T7mOZVARXBCmWVTk28kBcNmggKZjzcOlsjTwX9lF
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:37 2026 by rpki-client