Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa
File:                     3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          /WQuIyQe2hBE4o3WD7lZeAFpfQ3rJfR8BLPHc2EuQf8=
Subject key identifier:   D0:97:1B:77:7B:FA:E6:67:A3:2A:EC:C5:80:13:5E:97:F4:20:99:A6
Certificate issuer:       /CN=A777F080277567701C7EF464D9A7351ADB0B538E
Certificate serial:       0196C5EB80192A5C7D7382A4D101D6614C338D9D
Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa
Signing time:             Thu 16 Apr 2026 04:00:01 +0000
ROA not before:           Thu 16 Apr 2026 03:55:01 +0000
ROA not after:            Thu 15 Apr 2027 04:00:01 +0000
asID:                     135477
IP address blocks:        103.15.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl
                          rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 09:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:eb:80:19:2a:5c:7d:73:82:a4:d1:01:d6:61:4c:33:8d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E
        Validity
            Not Before: Apr 16 03:55:01 2026 GMT
            Not After : Apr 15 04:00:01 2027 GMT
        Subject: CN=D0971B777BFAE667A32AECC580135E97F42099A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:83:9e:e2:a9:a1:4d:69:29:0b:3d:98:f3:
                    97:c6:b7:4e:ac:83:0b:40:b7:4b:f9:c9:f4:76:f3:
                    5d:20:1d:b9:ad:5a:8a:ec:59:53:31:46:d4:e6:c6:
                    99:0f:5a:d5:84:e1:8f:29:6b:05:1a:dd:f0:5e:87:
                    a6:da:fe:9d:73:60:a1:ac:94:8f:e5:01:55:2f:88:
                    18:48:78:ca:56:de:2e:41:b6:66:64:56:3c:7b:8a:
                    53:fd:55:f8:af:89:c1:1d:a9:13:86:b4:cd:1e:51:
                    83:5c:c0:87:9f:de:07:00:45:77:8e:94:c1:81:22:
                    98:c8:41:7a:d6:60:a8:61:46:8a:de:28:e6:ba:a3:
                    5c:61:24:be:5d:6f:02:47:57:97:53:8c:e8:0d:29:
                    b6:32:61:90:e2:e6:0d:b8:9a:5b:df:e2:50:07:c7:
                    5d:b6:40:fa:c6:15:aa:aa:0a:f5:ca:4b:b8:7f:4c:
                    df:1c:a9:32:e0:fb:d2:46:e6:bb:f6:22:82:0d:ee:
                    cf:db:df:dd:e6:2c:52:b4:91:03:ee:6f:49:31:ae:
                    36:97:9b:39:4d:49:99:91:b5:65:61:0a:9c:37:ee:
                    44:3c:d7:fe:ac:69:32:08:b6:89:45:c0:73:00:3d:
                    ec:20:b3:98:cd:e5:46:f2:08:aa:64:e4:38:ff:60:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:1B:77:7B:FA:E6:67:A3:2A:EC:C5:80:13:5E:97:F4:20:99:A6
            X509v3 Authority Key Identifier:
                keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:c6:b5:b9:5f:2b:35:f2:37:07:ca:32:0d:c2:3a:3a:c8:
         49:6c:f5:a8:51:31:4d:4b:4b:c4:5e:d1:84:dc:ff:c0:a5:1b:
         14:f8:7a:9e:5e:be:34:d9:d9:74:c7:9a:95:e2:c6:a3:67:3b:
         d0:8a:0b:a3:62:2a:ea:c7:39:b5:1c:25:25:13:61:73:bf:11:
         19:c8:00:20:5c:56:ea:8a:49:16:36:fd:a1:69:db:68:8c:72:
         31:e6:9b:37:67:dd:26:2b:6a:38:cf:a8:73:01:39:a2:6f:f6:
         75:2f:79:bb:2a:94:c2:45:b3:9d:b0:19:da:a1:a6:4c:8e:17:
         9b:1f:45:15:ad:ed:7c:bd:b8:a3:3c:f3:57:72:e4:72:44:1f:
         db:6e:c6:ef:69:0e:c9:a1:a2:bc:1b:13:4a:5b:df:3e:f6:d8:
         e8:aa:c8:a7:71:5e:a2:eb:eb:57:26:5d:48:31:1e:e3:88:95:
         65:1d:a7:0b:d1:8b:90:04:83:1c:8c:aa:2f:3d:3a:a7:0e:21:
         a1:9f:b5:ec:58:90:07:d9:43:0b:f5:19:08:1f:56:44:fd:16:
         b6:d5:3e:0f:95:e9:ca:43:aa:43:49:6d:bd:8b:e3:85:b6:6a:
         54:70:1d:04:56:92:e7:c2:04:63:b6:db:9b:ef:c3:09:e4:d9:
         f0:0e:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:42 2026 by rpki-client