Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa
File:                     3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (raw, json)
Hash identifier:          v00vtP0bWL7Buk01yo84+tSjfHLcJv0ez1bijApcHM8=
Subject key identifier:   E0:D8:61:53:F8:E3:2B:58:83:93:19:09:39:7D:57:63:B9:2B:D0:96
Certificate issuer:       /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA
Certificate serial:       177A109F47037B7403575D11C6B5711AF358D071
Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa
Signing time:             Sat 21 Feb 2026 06:14:21 +0000
ROA not before:           Sat 21 Feb 2026 06:09:21 +0000
ROA not after:            Sat 20 Feb 2027 06:14:21 +0000
asID:                     149728
IP address blocks:        103.187.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl
                          rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7a:10:9f:47:03:7b:74:03:57:5d:11:c6:b5:71:1a:f3:58:d0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA
        Validity
            Not Before: Feb 21 06:09:21 2026 GMT
            Not After : Feb 20 06:14:21 2027 GMT
        Subject: CN=E0D86153F8E32B5883931909397D5763B92BD096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:e9:59:0e:f3:8c:b1:8e:37:c8:d1:80:a3:
                    86:ff:fc:cc:1f:18:1d:26:a5:4c:4d:26:7d:ee:30:
                    38:92:e6:7f:9d:42:83:ce:04:90:48:3b:d0:42:d8:
                    c2:c2:13:b7:82:a1:77:a9:e6:0b:e0:23:9c:2e:79:
                    c0:11:fa:23:84:00:58:0e:9a:35:40:a9:0e:93:14:
                    ec:98:ae:ea:bf:9c:49:84:75:d9:6c:aa:83:30:12:
                    2e:d2:5d:b9:83:16:e5:eb:fa:e3:7f:46:03:b9:de:
                    cd:86:5e:89:14:12:31:9c:9f:23:c0:24:27:0f:50:
                    64:08:24:13:d9:00:0a:cd:18:da:72:71:71:31:b3:
                    a7:1f:f9:68:8f:2a:06:d9:51:2c:c3:bc:cc:3a:90:
                    4d:a2:ef:ce:51:c8:81:bb:db:50:83:09:c8:4b:18:
                    a7:53:37:c2:57:e9:e2:47:4c:13:5c:59:0c:14:a7:
                    9e:6a:4f:94:58:7e:77:68:a8:98:65:44:00:d4:51:
                    2c:1a:1d:a7:9a:dc:a2:42:db:51:1f:cc:4d:cf:f6:
                    f8:e1:10:cd:77:46:02:e6:50:81:af:96:e2:0e:64:
                    99:05:5d:95:15:d5:99:aa:ee:50:83:2d:e0:4e:7b:
                    cf:1b:94:f7:fa:f8:bc:cd:e7:d8:64:d4:5b:62:c6:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D8:61:53:F8:E3:2B:58:83:93:19:09:39:7D:57:63:B9:2B:D0:96
            X509v3 Authority Key Identifier:
                keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:4d:22:a3:14:27:01:57:78:67:76:ef:1d:a7:a7:c9:31:ae:
         dc:2f:d0:59:1a:c4:be:0c:64:02:f2:69:40:a7:a0:6d:f1:71:
         82:68:66:b1:b6:02:36:35:e0:3f:4b:9b:7b:5d:ef:2a:88:7c:
         a0:71:33:6d:bc:fd:68:2e:4b:65:e0:05:73:48:d0:17:00:71:
         49:dd:51:d7:ce:e5:5d:ac:53:98:f8:c6:ed:9f:ab:91:ee:e9:
         be:03:b1:41:40:ee:e0:f1:44:c4:61:e6:ba:45:fb:f2:7e:c2:
         18:7e:f2:26:0b:4c:8c:57:15:75:82:5c:15:59:bb:a2:ed:2d:
         13:53:cf:18:84:a8:44:7f:bc:5d:ec:25:33:30:23:b4:e9:7c:
         ae:c4:4d:f9:82:ce:9f:5b:19:b0:9f:8f:0c:37:e7:9d:cf:7f:
         ec:f9:14:44:84:f2:79:56:76:df:c3:cd:37:62:db:90:ae:3b:
         44:c7:19:0a:75:b1:dd:23:55:c5:d0:ba:97:23:32:ca:b7:23:
         06:33:fa:b1:2f:98:79:33:f9:7a:1c:23:d9:af:5a:23:7a:53:
         9b:7b:ac:b7:15:72:64:01:b0:0d:38:ae:49:53:59:cc:1d:ba:
         d8:3f:a3:fa:8e:15:02:d2:36:b2:e9:e5:05:9d:4c:aa:ec:de:
         d8:e7:20:a6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUF3oQn0cDe3QDV10RxrVxGvNY0HEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx
NTA0MTFDQTAeFw0yNjAyMjEwNjA5MjFaFw0yNzAyMjAwNjE0MjFaMDMxMTAvBgNV
BAMTKEUwRDg2MTUzRjhFMzJCNTg4MzkzMTkwOTM5N0Q1NzYzQjkyQkQwOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDOlZDvOMsY43yNGAo4b//Mwf
GB0mpUxNJn3uMDiS5n+dQoPOBJBIO9BC2MLCE7eCoXep5gvgI5wuecAR+iOEAFgO
mjVAqQ6TFOyYruq/nEmEddlsqoMwEi7SXbmDFuXr+uN/RgO53s2GXokUEjGcnyPA
JCcPUGQIJBPZAArNGNpycXExs6cf+WiPKgbZUSzDvMw6kE2i785RyIG721CDCchL
GKdTN8JX6eJHTBNcWQwUp55qT5RYfndoqJhlRADUUSwaHaea3KJC21EfzE3P9vjh
EM13RgLmUIGvluIOZJkFXZUV1Zmq7lCDLeBOe88blPf6+LzN59hk1Ftixs5VAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU4NhhU/jjK1iDkxkJOX1XY7kr0JYwHwYDVR0j
BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx
M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0
MTFDQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2MzA5N2YwLTM5NzgtNDljZS1i
NjljLTRiMjBiNGRjZmI3ZS8wLzMxMzAzMzJlMzEzODM3MmUzMjMyMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnu+IwDQYJ
KoZIhvcNAQELBQADggEBAIxNIqMUJwFXeGd27x2np8kxrtwv0FkaxL4MZALyaUCn
oG3xcYJoZrG2AjY14D9Lm3td7yqIfKBxM228/WguS2XgBXNI0BcAcUndUdfO5V2s
U5j4xu2fq5Hu6b4DsUFA7uDxRMRh5rpF+/J+whh+8iYLTIxXFXWCXBVZu6LtLRNT
zxiEqER/vF3sJTMwI7TpfK7ETfmCzp9bGbCfjww3553Pf+z5FESE8nlWdt/DzTdi
25CuO0THGQp1sd0jVcXQupcjMsq3IwYz+rEvmHkz+XocI9mvWiN6U5t7rLcVcmQB
sA04rklTWcwdutg/o/qOFQLSNrLp5QWdTKrs3tjnIKY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:12 2026 by rpki-client