Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa
File:                     3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (raw, json)
Hash identifier:          vyyRX5ZN0c71huLL8k24+recuGAo/H2zFLb8iVt/MFQ=
Subject key identifier:   6A:F4:9C:EF:55:C0:D0:BF:E5:53:DD:EC:DC:0E:32:70:0E:FC:20:BC
Certificate issuer:       /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
Certificate serial:       06D014B9839BF8FB448517632A593DDF27F14F29
Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa
Signing time:             Sat 28 Feb 2026 12:00:01 +0000
ROA not before:           Sat 28 Feb 2026 11:55:01 +0000
ROA not after:            Sat 27 Feb 2027 12:00:01 +0000
asID:                     149671
IP address blocks:        103.185.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl
                          rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d0:14:b9:83:9b:f8:fb:44:85:17:63:2a:59:3d:df:27:f1:4f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A
        Validity
            Not Before: Feb 28 11:55:01 2026 GMT
            Not After : Feb 27 12:00:01 2027 GMT
        Subject: CN=6AF49CEF55C0D0BFE553DDECDC0E32700EFC20BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:dc:f0:7c:17:b5:d8:ea:5d:ae:2b:5d:0f:
                    3f:ab:ef:9a:1b:b0:11:d9:ec:b7:27:62:89:31:66:
                    c2:f2:8b:ca:9b:f0:9b:77:c9:47:28:11:a3:d9:d0:
                    c4:9e:ee:ce:b6:9a:7c:43:4d:2c:f9:b7:8b:c0:38:
                    a6:c4:32:0b:e2:97:ea:49:84:b1:73:ec:71:94:b4:
                    94:a1:03:a8:74:c4:ba:a8:84:35:cd:28:63:d0:24:
                    06:73:67:b3:41:01:92:65:18:e3:bd:ca:29:09:dd:
                    e8:cb:61:1f:73:83:ce:79:c8:e5:15:56:d5:53:d1:
                    ae:6b:fd:1b:2c:be:29:40:c3:b3:07:8e:21:a5:a9:
                    84:ff:63:d0:ba:17:cc:82:d3:45:0a:b9:7a:86:ea:
                    66:bd:e5:11:21:0d:db:2d:e0:b0:1e:dd:ba:44:3a:
                    03:7c:3c:2b:05:83:bf:96:0c:b4:ee:ed:0a:a1:43:
                    d8:5f:d7:37:cc:b8:3b:ba:84:28:dd:b5:af:46:0e:
                    ef:b5:60:c4:e5:1e:6f:8b:c3:79:d5:38:62:7c:64:
                    51:2d:fe:ad:da:f5:3d:d4:b5:e5:79:e7:59:e5:72:
                    fa:cb:1e:32:5e:39:b6:2f:9f:ad:e5:66:d2:76:15:
                    d6:59:e8:b2:a3:ef:c0:a1:93:64:2e:1f:5a:27:51:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:9C:EF:55:C0:D0:BF:E5:53:DD:EC:DC:0E:32:70:0E:FC:20:BC
            X509v3 Authority Key Identifier:
                keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:d3:82:39:fa:2d:97:88:a3:4a:8f:0b:9a:8f:03:24:84:5a:
         83:94:60:56:35:3a:0e:b6:3a:1d:1b:71:34:ec:7f:e6:29:29:
         5a:73:4b:f9:1e:29:5b:ba:05:90:eb:f4:62:f5:fa:ad:2d:b3:
         b8:d2:e9:08:8f:aa:43:e0:92:af:e0:7c:58:da:6d:46:fa:90:
         e4:00:71:88:79:76:ed:f5:46:7d:77:b8:22:7a:2a:d5:4f:5b:
         9f:65:de:a5:0c:11:76:61:be:d8:4c:b9:5e:24:f1:76:99:92:
         52:56:a5:25:f6:39:cc:de:8a:4c:9f:05:5f:bc:68:2e:ea:7c:
         1d:bd:4b:2d:8b:7f:eb:48:da:c3:8c:a6:0c:0f:71:49:98:7e:
         65:29:3f:ca:1c:27:0e:20:43:08:1f:e1:43:f6:14:0c:32:0c:
         1a:90:72:4b:08:3e:a7:3b:52:63:d8:79:eb:42:2f:60:a2:af:
         4e:6e:55:05:3f:08:2a:8b:0d:76:73:f3:30:88:17:2c:cd:04:
         38:38:80:0c:21:f6:f2:14:9d:a4:d1:fb:9b:4c:cc:af:f4:18:
         7b:1c:2e:9f:cb:e8:3d:62:4a:7d:1e:94:eb:1d:66:88:ba:41:
         be:5d:4a:c9:26:80:e6:f6:26:34:b8:5a:14:1c:33:d3:76:43:
         16:0a:a1:a0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBtAUuYOb+PtEhRdjKlk93yfxTykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF
MzVEOTM3QTAeFw0yNjAyMjgxMTU1MDFaFw0yNzAyMjcxMjAwMDFaMDMxMTAvBgNV
BAMTKDZBRjQ5Q0VGNTVDMEQwQkZFNTUzRERFQ0RDMEUzMjcwMEVGQzIwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+dzwfBe12OpdritdDz+r75ob
sBHZ7LcnYokxZsLyi8qb8Jt3yUcoEaPZ0MSe7s62mnxDTSz5t4vAOKbEMgvil+pJ
hLFz7HGUtJShA6h0xLqohDXNKGPQJAZzZ7NBAZJlGOO9yikJ3ejLYR9zg855yOUV
VtVT0a5r/RssvilAw7MHjiGlqYT/Y9C6F8yC00UKuXqG6ma95REhDdst4LAe3bpE
OgN8PCsFg7+WDLTu7QqhQ9hf1zfMuDu6hCjdta9GDu+1YMTlHm+Lw3nVOGJ8ZFEt
/q3a9T3UteV551nlcvrLHjJeObYvn63lZtJ2FdZZ6LKj78Chk2QuH1onUQfDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUavSc71XA0L/lU93s3A4ycA78ILwwHwYDVR0j
BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB
NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE
OTM3QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjN2YzNTMzLTIyNzgtNDBlMS1h
MjYyLTdlN2U0MzFlYjIzNS8wLzMxMzAzMzJlMzEzODM1MmUzNDM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzYzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7kuMA0GCSqG
SIb3DQEBCwUAA4IBAQAF04I5+i2XiKNKjwuajwMkhFqDlGBWNToOtjodG3E07H/m
KSlac0v5HilbugWQ6/Ri9fqtLbO40ukIj6pD4JKv4HxY2m1G+pDkAHGIeXbt9UZ9
d7gieirVT1ufZd6lDBF2Yb7YTLleJPF2mZJSVqUl9jnM3opMnwVfvGgu6nwdvUst
i3/rSNrDjKYMD3FJmH5lKT/KHCcOIEMIH+FD9hQMMgwakHJLCD6nO1Jj2HnrQi9g
oq9OblUFPwgqiw12c/MwiBcszQQ4OIAMIfbyFJ2k0fubTMyv9Bh7HC6fy+g9Ykp9
HpTrHWaIukG+XUrJJoDm9iY0uFoUHDPTdkMWCqGg
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:17 2026 by rpki-client