Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/3130332e36372e38342e302f32332d3234203d3e20313532303034.roa
File:                     3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (raw, json)
Hash identifier:          //9lWx4cBEsK8GvhY07w0NWWTilIihQkc5cHdXmaYJs=
Subject key identifier:   54:22:04:E7:E3:2C:91:54:54:48:3B:44:3F:D0:88:0C:2C:89:53:E9
Certificate issuer:       /CN=35603F2919BB405970CB4BAB181C2B63764E0771
Certificate serial:       749FF0D3BA02C8FB6DED900CD40B2C931DC6AB88
Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/3130332e36372e38342e302f32332d3234203d3e20313532303034.roa
Signing time:             Fri 06 Mar 2026 02:00:01 +0000
ROA not before:           Fri 06 Mar 2026 01:55:01 +0000
ROA not after:            Fri 05 Mar 2027 02:00:01 +0000
asID:                     152004
IP address blocks:        103.67.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl
                          rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 09:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9f:f0:d3:ba:02:c8:fb:6d:ed:90:0c:d4:0b:2c:93:1d:c6:ab:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771
        Validity
            Not Before: Mar  6 01:55:01 2026 GMT
            Not After : Mar  5 02:00:01 2027 GMT
        Subject: CN=542204E7E32C915454483B443FD0880C2C8953E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:5e:8a:a9:d5:db:4d:d2:ef:c3:1d:04:fb:
                    66:1f:13:ca:6a:f5:23:a5:81:8c:81:ee:03:cb:51:
                    0d:6b:90:75:9f:1c:1f:13:5d:89:77:f2:c1:df:fd:
                    26:b5:a4:b6:e0:7e:b8:5b:ba:45:75:b2:ab:10:b2:
                    5e:66:4d:8e:f5:97:0a:3e:39:18:36:e2:43:81:3e:
                    e0:1f:a7:1f:ad:cd:c4:fb:97:ab:32:44:c7:5c:8b:
                    44:42:77:a3:63:82:f0:e7:3a:db:d6:62:54:7b:fa:
                    48:c2:91:4c:ba:f6:9c:a1:0a:99:ac:4f:25:55:13:
                    c5:51:dc:45:99:9e:56:a7:c2:6a:16:8a:03:a1:39:
                    8d:58:3f:b1:6d:3b:5a:ad:61:f0:7c:61:8f:20:ad:
                    0d:e7:e1:ac:8d:4f:ea:47:78:88:4f:7c:32:1b:85:
                    03:95:89:19:46:58:24:f9:40:e9:3a:ec:16:22:a9:
                    e8:6e:59:26:a3:18:c3:bb:de:87:c7:ac:ea:4c:75:
                    f0:69:65:15:8a:0f:f8:16:eb:b6:76:90:4d:3f:92:
                    cd:56:07:63:79:c1:b6:02:bf:87:cd:ae:a2:e1:74:
                    28:38:0a:d0:10:92:2b:b0:9b:1e:e5:53:00:bc:37:
                    ca:56:be:d8:bc:ec:69:e9:d9:48:f4:3d:d6:36:7d:
                    b3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:22:04:E7:E3:2C:91:54:54:48:3B:44:3F:D0:88:0C:2C:89:53:E9
            X509v3 Authority Key Identifier:
                keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/3130332e36372e38342e302f32332d3234203d3e20313532303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:0d:50:ac:a7:b8:f9:41:82:94:a3:ad:5f:71:43:ab:29:38:
         b0:46:d3:21:a9:27:41:a3:6f:e2:85:06:7f:74:9d:32:1f:e5:
         27:45:af:79:24:ee:00:fb:c6:b6:22:88:e1:46:e4:d5:22:ef:
         c9:6d:6a:3a:40:20:cf:8b:9a:a8:c6:d3:b8:f4:d4:e5:23:2a:
         e4:14:fd:b8:74:b0:1a:8b:b8:80:8c:00:53:74:42:94:6e:ba:
         01:c2:f3:39:2f:65:a0:51:e4:a3:f8:ef:be:e0:7e:05:c3:77:
         fa:27:90:a4:16:0f:27:4a:9e:53:8f:0e:d4:b3:7f:fb:c2:f2:
         18:20:db:6a:37:3b:15:4f:ba:3e:d2:f8:f2:bb:6d:48:fc:cf:
         c5:28:49:5b:da:0f:95:22:ac:9b:c9:5e:c4:54:9a:e0:dc:eb:
         65:30:a9:02:96:32:d3:18:6a:91:13:00:57:43:4e:51:4d:cc:
         90:e2:ff:a2:4f:a4:9f:66:e7:b1:f2:31:63:53:a9:a2:ac:1a:
         79:9c:10:a2:4e:9f:ce:df:f6:72:f1:65:41:9d:60:32:94:04:
         8b:da:e7:9d:0a:3d:d0:1e:2b:e2:5a:5c:1f:db:2b:2b:00:53:
         f7:f0:a4:bd:8c:d4:7f:6f:ad:c2:95:3a:8c:6b:4d:44:3f:ba:
         93:0b:2a:62
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdJ/w07oCyPtt7ZAM1Asskx3Gq4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3
NjRFMDc3MTAeFw0yNjAzMDYwMTU1MDFaFw0yNzAzMDUwMjAwMDFaMDMxMTAvBgNV
BAMTKDU0MjIwNEU3RTMyQzkxNTQ1NDQ4M0I0NDNGRDA4ODBDMkM4OTUzRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4F6KqdXbTdLvwx0E+2YfE8pq
9SOlgYyB7gPLUQ1rkHWfHB8TXYl38sHf/Sa1pLbgfrhbukV1sqsQsl5mTY71lwo+
ORg24kOBPuAfpx+tzcT7l6syRMdci0RCd6NjgvDnOtvWYlR7+kjCkUy69pyhCpms
TyVVE8VR3EWZnlanwmoWigOhOY1YP7FtO1qtYfB8YY8grQ3n4ayNT+pHeIhPfDIb
hQOViRlGWCT5QOk67BYiqehuWSajGMO73ofHrOpMdfBpZRWKD/gW67Z2kE0/ks1W
B2N5wbYCv4fNrqLhdCg4CtAQkiuwmx7lUwC8N8pWvti87Gnp2Uj0PdY2fbPdAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVCIE5+MskVRUSDtEP9CIDCyJU+kwHwYDVR0j
BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5
QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF
MDc3MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFhZDM5NDUwLTQ1ODQtNDg4Mi1i
NWE3LTJjYmMwZTU3NzQ3NC8wLzMxMzAzMzJlMzYzNzJlMzgzNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdDVDANBgkqhkiG
9w0BAQsFAAOCAQEAWw1QrKe4+UGClKOtX3FDqyk4sEbTIaknQaNv4oUGf3SdMh/l
J0WveSTuAPvGtiKI4Ubk1SLvyW1qOkAgz4uaqMbTuPTU5SMq5BT9uHSwGou4gIwA
U3RClG66AcLzOS9loFHko/jvvuB+BcN3+ieQpBYPJ0qeU48O1LN/+8LyGCDbajc7
FU+6PtL48rttSPzPxShJW9oPlSKsm8lexFSa4NzrZTCpApYy0xhqkRMAV0NOUU3M
kOL/ok+kn2bnsfIxY1OpoqwaeZwQok6fzt/2cvFlQZ1gMpQEi9rnnQo90B4r4lpc
H9srKwBT9/CkvYzUf2+twpU6jGtNRD+6kwsqYg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:14:41 2026 by rpki-client