Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa
File:                     3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          O6hpSXzXr2pN8pJRJOSEByzKv4qsakSG6Ecp+TLlLTk=
Subject key identifier:   B5:CC:AD:44:B5:D3:CC:76:AA:A4:88:46:33:08:6C:4C:31:12:C5:AA
Certificate issuer:       /CN=A777F080277567701C7EF464D9A7351ADB0B538E
Certificate serial:       47397BA4F3045DF9B40FFB0D1D4DCEC80376CBE8
Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa
Signing time:             Thu 16 Apr 2026 04:00:01 +0000
ROA not before:           Thu 16 Apr 2026 03:55:01 +0000
ROA not after:            Thu 15 Apr 2027 04:00:01 +0000
asID:                     135477
IP address blocks:        103.15.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl
                          rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 09:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:39:7b:a4:f3:04:5d:f9:b4:0f:fb:0d:1d:4d:ce:c8:03:76:cb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E
        Validity
            Not Before: Apr 16 03:55:01 2026 GMT
            Not After : Apr 15 04:00:01 2027 GMT
        Subject: CN=B5CCAD44B5D3CC76AAA4884633086C4C3112C5AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:3f:db:24:cf:ff:ce:35:db:a7:8c:29:fd:
                    52:fe:c6:1d:d5:a2:a0:d8:ea:8c:c3:f9:53:c0:2c:
                    39:40:f3:9c:63:0a:e7:32:a7:54:ea:43:49:d6:11:
                    3d:15:d2:10:fe:46:36:d3:4f:86:eb:b9:b0:b2:be:
                    d1:ea:44:12:46:33:6f:99:1c:64:3f:b7:d6:17:c1:
                    2b:c9:73:e0:6b:d2:53:0e:75:cd:d0:0b:27:86:13:
                    c2:3d:c3:51:62:a1:55:8c:d3:ab:a4:2f:5c:5c:79:
                    b0:b2:96:2b:f2:23:eb:21:b5:bd:0d:7c:d6:9d:24:
                    64:3e:ba:58:9b:6b:f8:a3:cd:b4:d2:d6:20:7f:ec:
                    93:be:16:7e:58:e1:8b:92:fd:a0:2e:e4:b3:42:e2:
                    60:2b:cb:bc:38:34:a6:7d:73:ae:66:67:b9:05:72:
                    29:41:2f:ab:8c:75:3a:3a:3e:6f:6b:78:64:a6:fa:
                    31:53:5a:23:11:da:3f:9c:e1:b8:80:5e:41:d3:d2:
                    60:f8:1c:bd:32:e2:81:13:a1:81:dc:81:d5:10:d2:
                    53:14:58:a0:2b:33:f3:c8:7c:1a:09:ce:e7:ab:54:
                    62:b2:f1:42:e9:4a:6e:42:3c:fa:a8:69:ed:45:37:
                    74:a1:db:f1:1e:3c:c1:90:87:14:68:ba:2f:fe:90:
                    f5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CC:AD:44:B5:D3:CC:76:AA:A4:88:46:33:08:6C:4C:31:12:C5:AA
            X509v3 Authority Key Identifier:
                keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:61:7b:28:f6:8a:c3:05:ac:91:84:07:bc:91:a9:0d:af:be:
         ce:71:d7:22:8f:3f:0e:7e:16:2c:88:98:72:74:e1:30:88:11:
         e5:df:cf:8a:f7:a0:d5:4b:f0:61:f8:cc:dc:ea:a6:61:0f:3b:
         e2:7c:82:08:c3:0e:01:e0:1d:64:f6:7d:b1:b1:1c:4e:f3:64:
         b6:ed:8f:42:94:eb:bd:c4:02:3c:8a:38:89:56:80:ae:b4:2d:
         42:37:b8:1e:ba:b1:c9:62:1b:a2:f5:77:01:19:fb:99:e3:b1:
         62:45:7e:96:db:e3:38:f8:5d:84:ec:0d:85:b5:a7:1d:32:0f:
         d9:cd:99:5b:56:38:42:80:d4:8b:4a:b6:76:f5:b2:84:2f:ea:
         f8:42:57:87:1a:71:1c:c0:26:85:87:20:45:d1:0f:5f:56:ad:
         b1:0b:38:e5:32:05:2b:2e:75:87:99:1a:ea:90:8c:17:50:1e:
         4c:65:28:ab:fe:58:9d:62:5b:f6:ae:75:91:27:5e:e9:eb:b0:
         78:54:8c:2a:da:8b:7e:a8:e0:a3:d6:05:4c:60:85:06:43:f8:
         ac:9b:c9:98:61:58:c1:65:00:65:5b:93:a0:7c:c2:fd:b1:8f:
         a1:1d:59:17:d0:75:bf:db:a4:ca:87:7a:be:1f:38:6c:91:14:
         a0:af:66:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:41 2026 by rpki-client