Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa
File:                     3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (raw, json)
Hash identifier:          tp+g3lhWxue+crc61uUYjl8vTsOopWPdTssgr6zIDMI=
Subject key identifier:   53:A7:E8:DD:EB:C9:DD:C0:41:A7:24:87:85:D6:32:D6:90:E5:5E:F2
Certificate issuer:       /CN=46A7C8702C547FC42210027DD254571031AE05DC
Certificate serial:       6A22B926E44069B6CBDBD6BA274612A9F17CA3C1
Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa
Signing time:             Sun 08 Feb 2026 03:00:00 +0000
ROA not before:           Sun 08 Feb 2026 02:55:00 +0000
ROA not after:            Sun 07 Feb 2027 03:00:00 +0000
asID:                     141595
IP address blocks:        103.172.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl
                          rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 03:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:22:b9:26:e4:40:69:b6:cb:db:d6:ba:27:46:12:a9:f1:7c:a3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC
        Validity
            Not Before: Feb  8 02:55:00 2026 GMT
            Not After : Feb  7 03:00:00 2027 GMT
        Subject: CN=53A7E8DDEBC9DDC041A7248785D632D690E55EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:b9:83:b6:e0:cb:1c:46:71:53:6b:25:08:
                    6a:d9:a8:9b:a7:d1:71:fa:6f:de:0d:9b:72:dc:a1:
                    47:44:6d:f2:1f:bd:86:68:22:7b:d9:c9:5a:12:f1:
                    e5:f8:22:c6:ca:9c:08:7c:5c:30:da:da:07:18:d7:
                    d3:e7:b4:7b:ef:5a:ce:1a:99:84:4f:26:76:2a:0a:
                    d8:c8:37:28:52:70:f5:49:b6:26:10:f7:d4:15:65:
                    03:bd:41:c0:54:b3:21:94:2f:59:82:9a:a3:cc:a4:
                    f6:58:6c:7a:ba:fa:35:fa:9c:7f:36:2b:46:1f:16:
                    49:a2:94:d4:9a:57:e4:a4:82:b4:8c:d8:31:50:c9:
                    91:23:e5:6f:05:92:d0:85:c1:48:8e:41:fe:a0:c0:
                    c0:c5:64:f5:88:d5:c3:17:92:7a:24:e4:f2:88:16:
                    7e:c2:0c:34:be:71:27:2d:f5:05:db:d9:2f:df:24:
                    24:fc:b6:96:52:ae:fe:10:4e:74:cf:5a:5f:c5:d3:
                    8d:3d:da:9c:64:11:05:e4:5b:a7:b5:59:61:42:46:
                    db:47:f2:9b:81:56:67:6d:cd:95:2e:b7:91:0f:a1:
                    bf:69:8e:25:cf:24:6f:52:57:ed:d2:98:6a:67:33:
                    db:62:75:0d:86:bf:c0:d9:6c:4d:10:75:15:05:4b:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A7:E8:DD:EB:C9:DD:C0:41:A7:24:87:85:D6:32:D6:90:E5:5E:F2
            X509v3 Authority Key Identifier:
                keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:bc:8c:1a:e0:8b:6d:8f:fe:fa:73:08:b5:7f:69:0f:27:43:
         53:89:7b:d4:46:70:a0:f1:37:0a:51:8f:8b:dc:9f:c3:be:0d:
         a6:28:96:85:3e:88:4b:ec:b9:68:e7:be:c2:fe:f2:80:b2:6c:
         f7:f4:e4:11:cd:7f:3c:93:6d:81:42:52:6d:d7:06:c2:d0:a2:
         3a:3f:51:6d:a0:9a:e6:6c:b2:86:bd:de:46:a7:d2:d4:de:34:
         ee:c3:6c:3e:55:9d:d0:bc:18:c8:8c:c1:b2:82:5f:86:b9:14:
         cc:cc:26:6b:b4:40:55:fc:66:2c:a2:95:9e:aa:3a:78:13:d5:
         a0:91:61:cf:b2:eb:97:fc:c7:e0:d8:93:1a:f7:68:96:32:24:
         17:39:f8:ec:b9:13:3d:08:5a:f0:c2:09:04:9c:8c:14:57:3b:
         e6:90:f7:f6:7d:5a:17:84:bc:5f:49:e9:5e:69:97:d6:24:5a:
         9b:b9:c9:bc:1d:81:f7:37:ad:f3:41:f3:f4:d7:de:ec:db:94:
         a4:0b:36:36:6a:7b:46:cb:21:9f:0c:14:1e:6a:bb:0a:3a:5c:
         0c:42:40:58:20:01:c5:ac:9e:ff:34:08:9a:ed:f9:cd:41:12:
         2c:35:b0:e9:9d:84:2d:13:1a:fe:95:b9:01:f0:71:7c:9f:7b:
         63:ae:69:67
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUaiK5JuRAabbL29a6J0YSqfF8o8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz
MUFFMDVEQzAeFw0yNjAyMDgwMjU1MDBaFw0yNzAyMDcwMzAwMDBaMDMxMTAvBgNV
BAMTKDUzQTdFOERERUJDOUREQzA0MUE3MjQ4Nzg1RDYzMkQ2OTBFNTVFRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtLmDtuDLHEZxU2slCGrZqJun
0XH6b94Nm3LcoUdEbfIfvYZoInvZyVoS8eX4IsbKnAh8XDDa2gcY19PntHvvWs4a
mYRPJnYqCtjINyhScPVJtiYQ99QVZQO9QcBUsyGUL1mCmqPMpPZYbHq6+jX6nH82
K0YfFkmilNSaV+SkgrSM2DFQyZEj5W8FktCFwUiOQf6gwMDFZPWI1cMXknok5PKI
Fn7CDDS+cSct9QXb2S/fJCT8tpZSrv4QTnTPWl/F04092pxkEQXkW6e1WWFCRttH
8puBVmdtzZUut5EPob9pjiXPJG9SV+3SmGpnM9tidQ2Gv8DZbE0QdRUFS6qjAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUU6fo3evJ3cBBpySHhdYy1pDlXvIwHwYDVR0j
BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD
NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF
MDVEQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNjAwNDg2LTk3ODAtNDNlZS1i
YjJkLWI4MTEwOTRhMTQ0NS8wLzMxMzAzMzJlMzEzNzMyMmUzMTMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrHowDQYJ
KoZIhvcNAQELBQADggEBAGG8jBrgi22P/vpzCLV/aQ8nQ1OJe9RGcKDxNwpRj4vc
n8O+DaYoloU+iEvsuWjnvsL+8oCybPf05BHNfzyTbYFCUm3XBsLQojo/UW2gmuZs
soa93kan0tTeNO7DbD5VndC8GMiMwbKCX4a5FMzMJmu0QFX8ZiyilZ6qOngT1aCR
Yc+y65f8x+DYkxr3aJYyJBc5+Oy5Ez0IWvDCCQScjBRXO+aQ9/Z9WheEvF9J6V5p
l9YkWpu5ybwdgfc3rfNB8/TX3uzblKQLNjZqe0bLIZ8MFB5quwo6XAxCQFggAcWs
nv80CJrt+c1BEiw1sOmdhC0TGv6VuQHwcXyfe2OuaWc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:16:01 2026 by rpki-client