Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa
File:                     3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (raw, json)
Hash identifier:          UVuZpXFyrqhiOKN105Da6oazN9yog27beBkdQnj5+yc=
Subject key identifier:   F3:CF:08:1C:BA:15:24:CF:37:AA:0C:AB:89:FF:69:41:7F:F6:65:25
Certificate issuer:       /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Certificate serial:       30E0890EEC427D2F5BC2242E9E98F32BDDF43883
Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa
Signing time:             Mon 02 Feb 2026 10:00:44 +0000
ROA not before:           Mon 02 Feb 2026 09:55:44 +0000
ROA not after:            Mon 01 Feb 2027 10:00:44 +0000
asID:                     138129
IP address blocks:        103.132.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl
                          rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 17:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e0:89:0e:ec:42:7d:2f:5b:c2:24:2e:9e:98:f3:2b:dd:f4:38:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
        Validity
            Not Before: Feb  2 09:55:44 2026 GMT
            Not After : Feb  1 10:00:44 2027 GMT
        Subject: CN=F3CF081CBA1524CF37AA0CAB89FF69417FF66525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c7:e2:bf:65:c1:ee:bb:5e:40:7d:02:da:a4:
                    21:a9:5b:7f:0a:14:18:6c:d3:f5:77:da:8a:59:0e:
                    d4:80:90:c4:f0:d1:f3:8d:05:97:4e:e1:c7:60:1c:
                    0e:54:fe:11:f5:60:c1:c8:49:29:58:3c:c0:3e:2a:
                    2e:dc:ff:de:4c:f0:dd:11:f2:73:74:4b:d3:2b:74:
                    de:df:9d:18:95:3b:b4:72:f7:dd:47:d5:ea:a8:b7:
                    90:2b:5b:4d:6c:60:42:38:95:00:f8:22:a8:c7:23:
                    55:51:c5:c6:44:a8:b0:fb:03:f1:65:4e:d3:bb:96:
                    5a:54:13:d7:39:1a:10:41:52:1f:f5:0b:8e:8c:8e:
                    3d:e2:90:72:f0:2b:fe:65:80:ea:0d:59:50:4c:bc:
                    ca:9d:73:3e:df:96:94:72:83:6a:dd:6c:05:7f:21:
                    96:e6:69:7f:1c:9e:25:45:06:f6:01:77:68:2a:c2:
                    e1:f9:23:c1:22:14:5c:73:5c:73:f6:86:51:10:c5:
                    4d:35:47:29:5a:99:0f:bd:92:a7:3b:5e:da:66:1f:
                    c4:47:2e:3b:39:22:a6:79:24:f1:34:f6:44:e3:3a:
                    23:7b:f2:eb:5b:05:6a:e9:c4:b2:04:58:5f:cc:b0:
                    f0:7e:57:bd:d5:1e:72:a4:ee:cc:2a:c4:f9:86:d9:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CF:08:1C:BA:15:24:CF:37:AA:0C:AB:89:FF:69:41:7F:F6:65:25
            X509v3 Authority Key Identifier:
                keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:de:17:9b:00:5e:3e:cd:05:ce:0b:79:6a:7d:f9:5f:29:da:
         60:84:3e:2a:0b:85:33:2d:2b:5a:46:5f:e3:4f:6e:3f:ce:ba:
         50:1f:0c:85:83:98:7c:ba:53:d4:7e:b5:fd:9e:d4:cc:9f:ba:
         03:a8:99:20:fd:54:dc:d3:1a:07:18:e8:c4:da:d7:4c:94:2e:
         95:89:ea:9a:6d:62:3b:be:4c:bb:ee:95:54:b9:a5:a6:37:3e:
         56:eb:96:d0:38:bf:1a:a0:ee:1f:d7:5a:22:6b:35:72:5f:67:
         1f:5e:f4:8e:05:54:57:aa:d4:eb:c8:bb:3c:64:e9:f1:54:d9:
         b2:5d:67:86:d2:b2:35:7b:70:ae:b7:1d:92:a8:e1:a7:a9:13:
         c2:f8:06:bd:7b:2a:36:b1:4d:97:f1:e0:55:09:2d:ae:53:4e:
         52:10:28:21:70:70:d9:23:1b:cf:1f:53:34:85:bc:d6:cc:7a:
         6e:fa:2d:e6:58:85:a9:fb:3a:0d:64:9c:64:ee:bd:ee:78:18:
         70:74:45:db:69:72:33:bc:48:a0:2c:f0:23:db:4e:23:a3:39:
         f8:0d:91:a5:99:9f:b7:31:8d:a1:50:e3:37:bc:f6:f1:1b:70:
         49:ea:50:69:8d:0b:f3:38:69:39:90:5a:fd:6e:6f:07:4e:05:
         cf:3f:8d:4f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMOCJDuxCfS9bwiQunpjzK930OIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF
RDZDRDc2NjAeFw0yNjAyMDIwOTU1NDRaFw0yNzAyMDExMDAwNDRaMDMxMTAvBgNV
BAMTKEYzQ0YwODFDQkExNTI0Q0YzN0FBMENBQjg5RkY2OTQxN0ZGNjY1MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvx+K/ZcHuu15AfQLapCGpW38K
FBhs0/V32opZDtSAkMTw0fONBZdO4cdgHA5U/hH1YMHISSlYPMA+Ki7c/95M8N0R
8nN0S9MrdN7fnRiVO7Ry991H1eqot5ArW01sYEI4lQD4IqjHI1VRxcZEqLD7A/Fl
TtO7llpUE9c5GhBBUh/1C46Mjj3ikHLwK/5lgOoNWVBMvMqdcz7flpRyg2rdbAV/
IZbmaX8cniVFBvYBd2gqwuH5I8EiFFxzXHP2hlEQxU01RylamQ+9kqc7XtpmH8RH
Ljs5IqZ5JPE09kTjOiN78utbBWrpxLIEWF/MsPB+V73VHnKk7swqxPmG2fhpAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU888IHLoVJM83qgyrif9pQX/2ZSUwHwYDVR0j
BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF
NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD
RDc2Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0OWM4NjgwLWJkMGYtNGE0Zi05
OTZkLTIxMDJhMDUzNTM3NC8wLzMxMzAzMzJlMzEzMzMyMmUzMjMzMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnhOwwDQYJ
KoZIhvcNAQELBQADggEBAHjeF5sAXj7NBc4LeWp9+V8p2mCEPioLhTMtK1pGX+NP
bj/OulAfDIWDmHy6U9R+tf2e1MyfugOomSD9VNzTGgcY6MTa10yULpWJ6pptYju+
TLvulVS5paY3PlbrltA4vxqg7h/XWiJrNXJfZx9e9I4FVFeq1OvIuzxk6fFU2bJd
Z4bSsjV7cK63HZKo4aepE8L4Br17KjaxTZfx4FUJLa5TTlIQKCFwcNkjG88fUzSF
vNbMem76LeZYhan7Og1knGTuve54GHB0RdtpcjO8SKAs8CPbTiOjOfgNkaWZn7cx
jaFQ4ze89vEbcEnqUGmNC/M4aTmQWv1ubwdOBc8/jU8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:42:03 2026 by rpki-client