Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
File:                     3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (raw, json)
Hash identifier:          mDBoh7Ce+rz1vFKJdsswUC7slg0ptlULoEemgyD1IY4=
Subject key identifier:   B5:9B:A8:63:A5:23:71:1B:FA:63:F7:20:87:63:34:DF:C1:69:7F:1A
Certificate issuer:       /CN=46A7C8702C547FC42210027DD254571031AE05DC
Certificate serial:       6F7E339D2A5213EE881B86FDE80D90DA509E6748
Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
Signing time:             Sat 07 Feb 2026 07:00:00 +0000
ROA not before:           Sat 07 Feb 2026 06:55:00 +0000
ROA not after:            Sat 06 Feb 2027 07:00:00 +0000
asID:                     141595
IP address blocks:        103.160.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl
                          rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 03:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7e:33:9d:2a:52:13:ee:88:1b:86:fd:e8:0d:90:da:50:9e:67:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC
        Validity
            Not Before: Feb  7 06:55:00 2026 GMT
            Not After : Feb  6 07:00:00 2027 GMT
        Subject: CN=B59BA863A523711BFA63F720876334DFC1697F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:4d:06:59:6c:99:2b:02:d3:f7:f1:81:62:
                    11:2e:8e:22:f7:2e:b0:e2:f8:5d:43:51:45:6c:89:
                    a0:5d:3c:46:60:c1:88:9d:69:2e:d1:db:af:28:97:
                    fc:d8:a8:68:1d:86:94:f4:d8:78:e3:f7:4f:bf:1a:
                    38:5b:77:fb:f6:4c:bb:53:c1:75:1f:4a:14:fe:63:
                    4d:c8:e4:1f:0b:e3:46:40:ae:ca:63:93:a5:38:f8:
                    fa:15:f0:77:95:39:18:39:19:17:26:0f:7e:c0:41:
                    24:20:f1:04:cc:36:9a:2e:78:f0:aa:a2:55:3c:64:
                    34:54:f6:f2:5d:2d:6c:a9:e2:fa:67:dd:e9:0e:85:
                    98:1f:6a:06:c2:29:7d:55:2c:15:f9:99:24:82:cc:
                    0a:d9:f4:70:65:7f:8f:94:14:23:ab:dc:89:05:46:
                    e6:48:11:51:b9:66:3f:e3:5f:af:d5:2c:17:da:ae:
                    53:fa:a4:17:7c:4c:1d:bc:32:ee:db:74:22:6c:f9:
                    d4:c2:56:8f:3d:46:3a:2a:4c:d5:5e:1e:d6:64:dd:
                    8e:12:4b:98:2c:39:8d:93:ad:b7:08:bf:b6:99:90:
                    91:ba:eb:e9:ae:45:a2:5f:54:62:64:ce:c1:78:b8:
                    ab:12:1d:05:99:b2:84:03:b1:0f:e4:00:eb:38:da:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9B:A8:63:A5:23:71:1B:FA:63:F7:20:87:63:34:DF:C1:69:7F:1A
            X509v3 Authority Key Identifier:
                keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:e9:ce:c4:78:e9:59:7b:d0:4a:db:9f:3f:52:fe:5c:6b:
         3b:a0:01:45:29:3e:20:b6:65:8e:93:e8:2e:82:8e:c0:a8:42:
         f2:dd:e9:57:82:55:86:e0:3a:b2:3a:37:db:fc:40:f5:d1:50:
         e8:b5:7f:9f:55:e7:59:25:a2:6e:3b:74:91:ab:88:54:00:b7:
         b5:5a:fd:dd:2c:3d:f0:61:58:95:9f:94:37:c0:40:e0:05:5a:
         85:de:91:9b:49:63:b0:3d:67:50:ea:24:98:9c:18:e5:d6:04:
         3d:b0:19:05:28:41:94:54:b0:f0:c0:56:32:95:44:4b:d2:ea:
         dc:e7:79:ab:4e:8b:7f:d3:26:8f:e1:1a:42:36:b7:80:85:03:
         6d:44:52:7e:db:29:29:9f:c5:3a:d0:0b:8b:4f:49:b4:b9:33:
         6c:64:0f:bd:c8:ba:43:ef:23:0b:5d:e2:a3:d8:e8:22:39:b3:
         d4:89:be:63:73:8b:5e:67:d1:09:18:5a:95:9e:cc:d3:96:26:
         52:82:a3:78:d5:c4:07:1f:30:f3:44:c1:b1:4f:75:4c:5c:33:
         45:f0:7e:4b:89:20:d4:ff:ae:42:be:51:56:41:99:bd:31:7f:
         b1:36:49:b0:37:8f:3b:88:68:8a:17:6d:c5:ea:43:67:c7:21:
         8c:a2:bc:64
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUb34znSpSE+6IG4b96A2Q2lCeZ0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz
MUFFMDVEQzAeFw0yNjAyMDcwNjU1MDBaFw0yNzAyMDYwNzAwMDBaMDMxMTAvBgNV
BAMTKEI1OUJBODYzQTUyMzcxMUJGQTYzRjcyMDg3NjMzNERGQzE2OTdGMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwt00GWWyZKwLT9/GBYhEujiL3
LrDi+F1DUUVsiaBdPEZgwYidaS7R268ol/zYqGgdhpT02Hjj90+/Gjhbd/v2TLtT
wXUfShT+Y03I5B8L40ZArspjk6U4+PoV8HeVORg5GRcmD37AQSQg8QTMNpouePCq
olU8ZDRU9vJdLWyp4vpn3ekOhZgfagbCKX1VLBX5mSSCzArZ9HBlf4+UFCOr3IkF
RuZIEVG5Zj/jX6/VLBfarlP6pBd8TB28Mu7bdCJs+dTCVo89RjoqTNVeHtZk3Y4S
S5gsOY2TrbcIv7aZkJG66+muRaJfVGJkzsF4uKsSHQWZsoQDsQ/kAOs42m3FAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUtZuoY6UjcRv6Y/cgh2M038FpfxowHwYDVR0j
BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD
NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF
MDVEQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNjAwNDg2LTk3ODAtNDNlZS1i
YjJkLWI4MTEwOTRhMTQ0NS8wLzMxMzAzMzJlMzEzNjMwMmUzMjMwMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoM0wDQYJ
KoZIhvcNAQELBQADggEBADPq6c7EeOlZe9BK258/Uv5cazugAUUpPiC2ZY6T6C6C
jsCoQvLd6VeCVYbgOrI6N9v8QPXRUOi1f59V51klom47dJGriFQAt7Va/d0sPfBh
WJWflDfAQOAFWoXekZtJY7A9Z1DqJJicGOXWBD2wGQUoQZRUsPDAVjKVREvS6tzn
eatOi3/TJo/hGkI2t4CFA21EUn7bKSmfxTrQC4tPSbS5M2xkD73IukPvIwtd4qPY
6CI5s9SJvmNzi15n0QkYWpWezNOWJlKCo3jVxAcfMPNEwbFPdUxcM0XwfkuJINT/
rkK+UVZBmb0xf7E2SbA3jzuIaIoXbcXqQ2fHIYyivGQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:34 2026 by rpki-client