Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa
File:                     3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (raw, json)
Hash identifier:          dHsvYJlAkWLZ+9oRBKQmKMQW97rJ2/h7gXe20m1YARk=
Subject key identifier:   7C:CC:13:B6:DD:32:F7:9D:FD:D1:2D:DD:E2:3F:E3:7A:EF:E9:66:91
Certificate issuer:       /CN=DE4325727D17555F6DABCC72788E361C741D47CF
Certificate serial:       45D28C768A61402EB6840B29C50D7A192B7C31A5
Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa
Signing time:             Thu 05 Feb 2026 06:00:01 +0000
ROA not before:           Thu 05 Feb 2026 05:55:01 +0000
ROA not after:            Thu 04 Feb 2027 06:00:01 +0000
asID:                     141074
IP address blocks:        103.155.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl
                          rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d2:8c:76:8a:61:40:2e:b6:84:0b:29:c5:0d:7a:19:2b:7c:31:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF
        Validity
            Not Before: Feb  5 05:55:01 2026 GMT
            Not After : Feb  4 06:00:01 2027 GMT
        Subject: CN=7CCC13B6DD32F79DFDD12DDDE23FE37AEFE96691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:33:c1:50:e9:5e:86:13:53:4f:13:61:26:30:
                    a8:25:3c:71:47:2e:40:e7:5c:b2:bc:13:42:b3:e5:
                    37:38:69:94:af:1c:a5:c2:df:82:b4:47:92:17:15:
                    f3:6a:b2:46:d7:b3:de:08:5c:e3:ae:3e:42:c3:67:
                    61:13:9e:8d:e3:37:b7:b1:3b:8a:dd:35:49:72:a7:
                    88:3f:95:3d:79:90:ce:91:c5:54:e3:a4:df:0c:81:
                    dc:a4:b1:84:d3:77:74:6f:e0:1a:d9:25:89:4b:7a:
                    47:18:50:75:f7:00:96:46:9c:a7:4f:53:07:51:6d:
                    02:c4:6e:60:24:75:d2:fb:56:ef:94:5f:32:70:18:
                    69:46:87:60:f2:37:3d:fb:b8:a8:9b:c3:45:64:8f:
                    c8:c2:0e:ad:99:6e:16:71:05:84:29:46:74:2c:0e:
                    1b:37:ef:eb:47:3f:1b:58:da:a4:81:c1:38:01:0b:
                    de:3e:c2:be:2c:37:a0:e8:e4:8d:8f:a2:e5:80:97:
                    33:98:0d:35:d3:1a:28:32:b7:2a:bd:dd:4c:aa:69:
                    70:b9:85:5a:0a:31:3c:98:f2:c1:b7:79:6b:ca:70:
                    fa:50:57:69:20:ea:37:32:2b:5c:e2:db:6d:f5:3d:
                    d8:31:65:a0:50:91:aa:80:b6:2b:97:4f:48:38:80:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CC:13:B6:DD:32:F7:9D:FD:D1:2D:DD:E2:3F:E3:7A:EF:E9:66:91
            X509v3 Authority Key Identifier:
                keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:bf:ec:62:51:fc:b5:79:49:9e:89:88:11:29:10:8f:56:35:
         1b:d0:7b:9a:f2:7d:dc:ba:60:24:97:da:80:e1:1b:99:76:ab:
         06:63:4e:c3:c9:e4:5c:c3:d4:2f:3f:7d:0f:c8:79:48:5d:29:
         e8:33:9e:1d:ac:78:43:e4:f4:b8:bb:b2:b8:45:8f:e7:a4:1e:
         13:7e:c6:b2:b8:90:68:df:fd:b1:d2:4a:9c:20:2e:a3:c5:3f:
         d3:e8:a4:5b:26:08:88:e2:d6:1d:de:8c:ad:67:ab:3b:dd:b7:
         cd:95:5d:d2:8a:c3:8d:e2:fd:2b:da:74:ca:e8:d3:82:ae:02:
         cf:b4:bb:93:43:92:38:00:04:71:32:3e:70:90:a4:53:10:b7:
         9b:5c:81:a8:3a:c5:6e:77:37:ab:e6:de:af:f9:a8:a6:2c:c7:
         c5:f6:6b:0a:73:00:52:68:d9:d9:8c:a9:44:b1:e8:b0:65:da:
         d4:9b:68:39:56:4e:0d:ca:1c:2c:fd:f2:bf:fa:c3:50:b9:45:
         ea:01:7c:7e:91:90:38:2f:ea:4f:4c:4f:c0:67:20:ee:fc:dc:
         de:f8:b4:67:b9:2a:c1:78:08:ca:7f:e8:a5:70:9f:cb:a5:aa:
         53:d1:6d:3a:96:96:1e:69:db:da:7d:95:35:b1:ac:81:30:26:
         a0:5f:1e:2f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURdKMdophQC62hAspxQ16GSt8MaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3
NDFENDdDRjAeFw0yNjAyMDUwNTU1MDFaFw0yNzAyMDQwNjAwMDFaMDMxMTAvBgNV
BAMTKDdDQ0MxM0I2REQzMkY3OURGREQxMkREREUyM0ZFMzdBRUZFOTY2OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSM8FQ6V6GE1NPE2EmMKglPHFH
LkDnXLK8E0Kz5Tc4aZSvHKXC34K0R5IXFfNqskbXs94IXOOuPkLDZ2ETno3jN7ex
O4rdNUlyp4g/lT15kM6RxVTjpN8MgdyksYTTd3Rv4BrZJYlLekcYUHX3AJZGnKdP
UwdRbQLEbmAkddL7Vu+UXzJwGGlGh2DyNz37uKibw0Vkj8jCDq2ZbhZxBYQpRnQs
Dhs37+tHPxtY2qSBwTgBC94+wr4sN6Do5I2PouWAlzOYDTXTGigytyq93UyqaXC5
hVoKMTyY8sG3eWvKcPpQV2kg6jcyK1zi2231PdgxZaBQkaqAtiuXT0g4gEiTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfMwTtt0y95390S3d4j/jeu/pZpEwHwYDVR0j
BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE
MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE
NDdDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwNzYwOGNlLWMzZjgtNDRlYi1h
ZWU3LWI3ODRhZTIwYzljNy8wLzMxMzAzMzJlMzEzNTM1MmUzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5sYMA0GCSqG
SIb3DQEBCwUAA4IBAQCdv+xiUfy1eUmeiYgRKRCPVjUb0Hua8n3cumAkl9qA4RuZ
dqsGY07DyeRcw9QvP30PyHlIXSnoM54drHhD5PS4u7K4RY/npB4TfsayuJBo3/2x
0kqcIC6jxT/T6KRbJgiI4tYd3oytZ6s73bfNlV3SisON4v0r2nTK6NOCrgLPtLuT
Q5I4AARxMj5wkKRTELebXIGoOsVudzer5t6v+aimLMfF9msKcwBSaNnZjKlEseiw
ZdrUm2g5Vk4Nyhws/fK/+sNQuUXqAXx+kZA4L+pPTE/AZyDu/Nze+LRnuSrBeAjK
f+ilcJ/LpapT0W06lpYeadvafZU1sayBMCagXx4v
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:13 2026 by rpki-client