Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32332d3233203d3e203633383237.roa
File:                     3130332e33392e31342e302f32332d3233203d3e203633383237.roa (raw, json)
Hash identifier:          /MRMfiUThW9lIqFQqwoyGRpjuxEJIvMy57nFzNfDNLg=
Subject key identifier:   F8:C2:A2:79:F5:23:16:9B:99:DA:F7:14:06:A8:B4:40:FB:55:A4:19
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       5A85D7CB923DE03E11D353500BC49281C9DEDF15
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32332d3233203d3e203633383237.roa
Signing time:             Wed 08 Apr 2026 13:25:12 +0000
ROA not before:           Wed 08 Apr 2026 13:20:12 +0000
ROA not after:            Wed 07 Apr 2027 13:25:12 +0000
asID:                     63827
IP address blocks:        103.39.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 09:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:85:d7:cb:92:3d:e0:3e:11:d3:53:50:0b:c4:92:81:c9:de:df:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Apr  8 13:20:12 2026 GMT
            Not After : Apr  7 13:25:12 2027 GMT
        Subject: CN=F8C2A279F523169B99DAF71406A8B440FB55A419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:fe:76:9f:0e:e1:e9:4e:52:f8:31:06:64:0d:
                    19:7b:1a:34:15:ab:45:4a:c4:f7:e3:15:08:74:15:
                    c1:1f:d3:d6:a9:be:38:6b:a4:a6:b4:d0:27:80:5a:
                    d5:87:16:5e:32:92:4e:6e:7c:f2:bb:fb:87:fe:a1:
                    b8:bd:e0:c5:7a:46:05:e1:6b:a2:3d:6d:e2:9b:a3:
                    e1:cb:17:61:b2:a0:e3:49:9d:35:d7:64:46:3c:de:
                    ee:2e:0e:8f:2e:97:32:10:af:fe:25:ab:46:36:f2:
                    66:f7:f7:53:f7:49:0b:6a:1f:1e:20:d7:89:05:d5:
                    40:b6:92:4c:90:cf:f8:73:ad:d2:42:6c:3a:de:18:
                    c1:86:df:32:43:29:e9:f1:08:53:09:80:65:eb:6f:
                    4c:be:d9:d2:df:da:bb:71:7e:96:f7:43:cc:5c:34:
                    c1:a0:4e:f9:c0:8b:c2:ac:06:55:cd:53:78:ab:48:
                    5e:6a:35:07:41:a5:14:70:7d:2a:e8:93:ef:89:c9:
                    dc:3a:fa:d9:17:0a:84:26:af:d2:dc:9a:fd:68:01:
                    1e:f1:97:80:a6:ef:a8:80:19:b2:ba:10:e8:79:ff:
                    46:57:2c:54:7d:4f:d1:82:e1:84:64:51:cf:0b:27:
                    bd:2f:05:00:11:47:6a:f3:a3:ec:b8:0a:c9:cb:8b:
                    10:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C2:A2:79:F5:23:16:9B:99:DA:F7:14:06:A8:B4:40:FB:55:A4:19
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31342e302f32332d3233203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:52:d1:36:a5:76:14:8b:b7:f6:bb:9f:5d:e9:d0:35:3c:ba:
         94:0e:af:69:4c:7a:1e:e3:db:74:a4:47:f7:48:51:5e:4a:a7:
         bf:ee:2d:4c:98:12:fb:70:ac:2c:92:3a:f9:23:51:89:49:63:
         29:f5:94:9b:98:eb:52:55:25:38:bf:e8:03:31:0a:fe:ee:d0:
         26:67:c6:af:2c:d4:dc:85:23:f5:96:72:4d:4b:17:bd:b5:43:
         94:46:49:ab:8d:fb:be:b5:fa:f5:e3:ee:6d:5c:5e:d1:43:63:
         e9:6e:80:27:26:4e:77:56:13:3d:7e:dc:ca:76:e2:18:4a:f7:
         2b:71:20:46:17:83:8a:71:8f:39:90:ff:d8:d1:fc:54:33:35:
         da:91:de:98:22:cd:ad:21:9b:0d:f5:ae:8a:17:4e:21:56:7e:
         37:9d:22:5d:e8:aa:a4:c1:60:1e:ca:06:38:88:49:6f:21:90:
         90:d5:f7:c7:e9:b4:7f:43:58:9c:7c:ea:3c:24:ab:d0:f9:07:
         5f:31:00:e8:f3:31:05:34:03:65:e8:c3:cc:80:1c:e9:33:96:
         e9:46:e2:fa:7a:1e:a2:e5:cc:e3:29:8d:18:c0:01:53:2a:8d:
         c0:5b:f8:86:22:4b:0f:d7:2b:31:c9:54:b8:f9:d2:c7:f0:9b:
         07:54:99:d6
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUWoXXy5I94D4R01NQC8SSgcne3xUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNB
MDMzNzg0QjAeFw0yNjA0MDgxMzIwMTJaFw0yNzA0MDcxMzI1MTJaMDMxMTAvBgNV
BAMTKEY4QzJBMjc5RjUyMzE2OUI5OURBRjcxNDA2QThCNDQwRkI1NUE0MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9/nafDuHpTlL4MQZkDRl7GjQV
q0VKxPfjFQh0FcEf09apvjhrpKa00CeAWtWHFl4ykk5ufPK7+4f+obi94MV6RgXh
a6I9beKbo+HLF2GyoONJnTXXZEY83u4uDo8ulzIQr/4lq0Y28mb391P3SQtqHx4g
14kF1UC2kkyQz/hzrdJCbDreGMGG3zJDKenxCFMJgGXrb0y+2dLf2rtxfpb3Q8xc
NMGgTvnAi8KsBlXNU3irSF5qNQdBpRRwfSrok++Jydw6+tkXCoQmr9Lcmv1oAR7x
l4Cm76iAGbK6EOh5/0ZXLFR9T9GC4YRkUc8LJ70vBQARR2rzo+y4CsnLixDBAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU+MKiefUjFpuZ2vcUBqi0QPtVpBkwHwYDVR0j
BBgwFoAU9ptjfqlN5MyRUL39Uye+A6AzeEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MWE2ODcxMi0xZDlhLTQxNDMtODJmMS0xYzgyYzMzMTY1ZWEvMC9GNjlCNjM3RUE5
NERFNENDOTE1MEJERkQ1MzI3QkUwM0EwMzM3ODRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNBMDMz
Nzg0Qi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04
MmYxLTFjODJjMzMxNjVlYS8wLzMxMzAzMzJlMzMzOTJlMzEzNDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM2MzMzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnJw4wDQYJKoZIhvcN
AQELBQADggEBAFNS0TaldhSLt/a7n13p0DU8upQOr2lMeh7j23SkR/dIUV5Kp7/u
LUyYEvtwrCySOvkjUYlJYyn1lJuY61JVJTi/6AMxCv7u0CZnxq8s1NyFI/WWck1L
F721Q5RGSauN+761+vXj7m1cXtFDY+lugCcmTndWEz1+3Mp24hhK9ytxIEYXg4px
jzmQ/9jR/FQzNdqR3pgiza0hmw31rooXTiFWfjedIl3oqqTBYB7KBjiISW8hkJDV
98fptH9DWJx86jwkq9D5B18xAOjzMQU0A2Xow8yAHOkzlulG4vp6HqLlzOMpjRjA
AVMqjcBb+IYiSw/XKzHJVLj50sfwmwdUmdY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:35 2026 by rpki-client