Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
File:                     3130332e39312e33322e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier:          O8PP6D6wmr7e0F1qDmEuOt8cWwhh2JN1M8vUdwZ+Gnc=
Subject key identifier:   E5:15:FE:6C:AA:5E:44:F6:73:4A:1C:CC:72:4F:92:64:E4:B0:0D:E0
Certificate issuer:       /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Certificate serial:       5FDEDE7F1D24A17C05852FE34A48138E6FC8E512
Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
Signing time:             Tue 03 Feb 2026 06:02:33 +0000
ROA not before:           Tue 03 Feb 2026 05:57:33 +0000
ROA not after:            Tue 02 Feb 2027 06:02:33 +0000
asID:                     38496
IP address blocks:        103.91.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl
                          rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:de:de:7f:1d:24:a1:7c:05:85:2f:e3:4a:48:13:8e:6f:c8:e5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
        Validity
            Not Before: Feb  3 05:57:33 2026 GMT
            Not After : Feb  2 06:02:33 2027 GMT
        Subject: CN=E515FE6CAA5E44F6734A1CCC724F9264E4B00DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:8c:28:43:1c:4c:b5:53:91:96:98:98:d8:
                    48:12:91:58:65:a0:a5:5c:21:e9:54:d2:27:4a:01:
                    4d:8d:3a:4b:31:26:fe:95:74:52:02:5e:22:e2:fe:
                    25:1c:24:88:4d:e3:db:68:76:68:31:6a:35:a8:66:
                    ef:a3:f4:96:37:d2:a8:4f:3a:ed:bb:10:7d:1d:9b:
                    40:ef:c8:8c:cd:cf:6d:e5:6b:3e:b9:75:7e:74:d7:
                    9d:5f:f2:2e:5e:aa:44:85:0e:e3:28:9d:f2:73:fe:
                    db:cf:75:7d:78:ba:47:81:c4:a2:7c:4d:96:9c:0a:
                    c8:0c:14:5b:23:eb:17:53:51:71:4d:c6:67:80:96:
                    97:27:79:6f:bb:2e:77:43:7d:f0:dd:66:8d:b1:fb:
                    10:be:21:bb:19:bc:e1:54:29:01:ea:3b:fa:94:ae:
                    b8:be:af:03:8c:ef:f9:f0:df:27:fd:14:c8:c2:64:
                    d3:ba:c7:52:2a:83:1c:ea:12:80:46:80:f9:33:85:
                    af:4d:3c:dc:19:a0:dd:92:7c:d7:e5:d9:41:bd:2b:
                    6a:d7:89:b8:1d:58:5d:45:f1:1c:f8:32:9e:f1:9b:
                    fb:03:ca:98:36:a9:17:b5:da:a9:da:b5:e2:05:16:
                    c0:7e:a2:70:16:f1:a0:f7:2d:f8:41:0c:06:59:f1:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:15:FE:6C:AA:5E:44:F6:73:4A:1C:CC:72:4F:92:64:E4:B0:0D:E0
            X509v3 Authority Key Identifier:
                keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:9d:93:00:2e:3f:d2:30:ba:4e:ad:c9:77:07:83:e2:aa:8b:
         f5:9b:a3:ac:9d:a7:f0:5d:7d:c1:e7:fc:8b:10:9f:97:fd:2c:
         29:19:2f:52:46:db:da:26:76:e4:0e:a1:e2:7d:59:b0:6e:51:
         06:11:ca:72:37:84:b3:92:3a:d5:1a:5c:c4:66:87:39:f9:56:
         9d:9b:65:8d:1b:17:47:dc:8a:20:5e:8e:5f:f6:44:a8:f9:63:
         98:ed:ef:9d:a0:e4:bf:48:d8:e8:36:e1:85:45:eb:b1:87:76:
         fb:b8:b3:98:37:01:f0:7c:e4:ba:af:aa:a8:79:25:5d:24:78:
         aa:2a:43:2c:eb:58:69:33:69:f3:7b:c5:ca:cf:fa:cc:24:db:
         a4:3a:54:ea:d0:b0:28:45:34:44:2f:92:4e:28:04:74:ce:36:
         f8:25:76:24:88:97:db:ae:f6:c3:20:df:e0:e2:62:63:8c:a9:
         cf:56:cd:a6:34:75:46:6f:4a:7b:dc:e7:e3:7d:f3:8e:dd:a2:
         d5:14:83:b8:9c:3c:99:5c:af:d1:f0:94:7b:51:c9:42:84:02:
         e5:59:06:75:c2:3d:1b:73:63:98:e2:7d:3e:7f:91:97:bd:c0:
         88:ed:08:6f:9d:37:61:ea:d3:e9:07:0e:96:51:d6:e4:18:71:
         16:64:2b:b4
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUX97efx0koXwFhS/jSkgTjm/I5RIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE
QUJENDVGMDAeFw0yNjAyMDMwNTU3MzNaFw0yNzAyMDIwNjAyMzNaMDMxMTAvBgNV
BAMTKEU1MTVGRTZDQUE1RTQ0RjY3MzRBMUNDQzcyNEY5MjY0RTRCMDBERTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2A4woQxxMtVORlpiY2EgSkVhl
oKVcIelU0idKAU2NOksxJv6VdFICXiLi/iUcJIhN49todmgxajWoZu+j9JY30qhP
Ou27EH0dm0DvyIzNz23laz65dX50151f8i5eqkSFDuMonfJz/tvPdX14ukeBxKJ8
TZacCsgMFFsj6xdTUXFNxmeAlpcneW+7LndDffDdZo2x+xC+IbsZvOFUKQHqO/qU
rri+rwOM7/nw3yf9FMjCZNO6x1IqgxzqEoBGgPkzha9NPNwZoN2SfNfl2UG9K2rX
ibgdWF1F8Rz4Mp7xm/sDypg2qRe12qnateIFFsB+onAW8aD3LfhBDAZZ8czrAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU5RX+bKpeRPZzShzMck+SZOSwDeAwHwYDVR0j
BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG
QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE
NDVGMC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZWNiMDAyLTI0YTQtNDk1NS1h
MzMzLTAwMmZkYjc0NTUzZi8wLzMxMzAzMzJlMzkzMTJlMzMzMjJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDMzMzgzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnWyAwDQYJKoZIhvcN
AQELBQADggEBAHSdkwAuP9Iwuk6tyXcHg+Kqi/Wbo6ydp/BdfcHn/IsQn5f9LCkZ
L1JG29omduQOoeJ9WbBuUQYRynI3hLOSOtUaXMRmhzn5Vp2bZY0bF0fciiBejl/2
RKj5Y5jt752g5L9I2Og24YVF67GHdvu4s5g3AfB85Lqvqqh5JV0keKoqQyzrWGkz
afN7xcrP+swk26Q6VOrQsChFNEQvkk4oBHTONvgldiSIl9uu9sMg3+DiYmOMqc9W
zaY0dUZvSnvc5+N9847dotUUg7icPJlcr9HwlHtRyUKEAuVZBnXCPRtzY5jifT5/
kZe9wIjtCG+dN2Hq0+kHDpZR1uQYcRZkK7Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:09 2026 by rpki-client