Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
File:                     3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          PXxNlgw2OfA/wRFGRdyIWGrXN37hg4U811iQwNKlUIk=
Subject key identifier:   E4:06:95:16:CE:60:9E:1A:28:77:61:06:86:DB:58:AA:BD:61:E0:B9
Certificate issuer:       /CN=A5D12164B9484E51D4BE4B03823526989B147558
Certificate serial:       159899B76922DE8B36EE8EC976C66837BB74AC54
Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 16 Mar 2026 09:01:26 +0000
ROA not before:           Mon 16 Mar 2026 08:56:26 +0000
ROA not after:            Mon 15 Mar 2027 09:01:26 +0000
asID:                     4800
IP address blocks:        103.190.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl
                          rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 23:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:98:99:b7:69:22:de:8b:36:ee:8e:c9:76:c6:68:37:bb:74:ac:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558
        Validity
            Not Before: Mar 16 08:56:26 2026 GMT
            Not After : Mar 15 09:01:26 2027 GMT
        Subject: CN=E4069516CE609E1A2877610686DB58AABD61E0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:77:d6:b9:27:3b:aa:d0:ae:7a:cf:d6:e3:
                    08:0e:39:4a:70:3d:a9:a0:e4:6b:fe:40:c2:f1:d9:
                    f7:2a:c7:0e:e4:7a:fb:a5:42:06:a4:52:25:c3:76:
                    36:56:56:8d:6f:8c:56:02:d1:98:05:06:81:6b:a0:
                    f3:b6:96:e9:c6:8f:28:9b:56:ed:e4:4c:54:eb:63:
                    fc:b0:3a:96:c2:7c:08:fa:88:0f:89:0c:66:23:57:
                    8a:a5:d0:75:b9:fa:0b:49:bb:61:b2:39:17:ad:87:
                    da:bd:ce:02:28:37:fe:bd:ca:07:e1:ed:f4:07:6e:
                    36:da:7b:90:ef:92:51:1f:25:e6:a2:be:6b:1b:77:
                    96:2d:06:a2:d9:71:2a:de:bc:59:a4:a0:7d:07:29:
                    d1:cb:a2:ef:5d:d4:ee:bb:0a:37:04:f5:54:91:a0:
                    57:db:60:33:2f:07:bd:9a:aa:93:52:be:49:5d:c1:
                    9e:4b:c7:3c:5b:9e:af:57:d3:cf:58:64:38:5b:3c:
                    84:0a:c4:52:e4:28:8c:d2:63:a0:e0:5d:d3:68:0a:
                    07:1e:69:d6:26:93:46:4e:a0:50:57:31:64:ca:1c:
                    55:08:9b:cd:12:0b:8b:44:17:a2:ef:84:0e:56:5d:
                    51:17:10:bb:4e:0d:87:ec:f4:a6:7a:0b:56:9b:c7:
                    6a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:06:95:16:CE:60:9E:1A:28:77:61:06:86:DB:58:AA:BD:61:E0:B9
            X509v3 Authority Key Identifier:
                keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:76:a1:c8:e8:20:e0:b7:e4:1f:15:38:cf:e4:ec:07:67:
         f9:f9:e3:a7:40:2e:c1:53:03:03:a2:d5:2e:fc:22:2f:e8:4b:
         ea:9e:47:97:ec:4c:a5:19:b3:26:94:32:a9:55:1c:2f:c7:8d:
         41:fa:9f:f3:1b:a3:fb:44:b8:a4:e8:5a:3b:b3:05:55:4a:49:
         c6:06:49:29:29:c1:19:0f:2a:ce:e6:f8:68:7b:90:78:21:a9:
         51:f9:ec:c8:e2:d2:16:23:80:fe:ca:a3:b4:7a:27:92:62:89:
         ba:ce:c7:8b:e7:25:fe:c2:02:f5:d7:e1:c9:98:d5:a5:af:bb:
         b2:e8:6f:c1:7b:29:71:53:3e:a8:35:4e:d3:54:35:a7:79:1b:
         fb:22:00:ab:23:e7:5f:76:33:82:f5:ab:a9:33:e6:de:77:17:
         f2:39:02:a7:3b:fd:22:13:3d:30:2e:59:61:e0:c4:f9:30:40:
         ea:fc:cd:24:ff:1f:2b:7c:58:9b:bc:c3:36:22:c2:a5:2a:e3:
         bf:a6:45:e4:ba:d9:85:81:8c:97:ff:93:4a:40:55:93:87:e4:
         8d:cf:17:19:51:26:b5:28:11:2e:0d:55:ac:ba:0c:8d:88:ab:
         d1:54:9b:b3:9b:98:a5:10:e9:a7:8a:a5:6b:b3:26:0f:43:f0:
         23:ed:67:d2
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUFZiZt2ki3os27o7JdsZoN7t0rFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5
QjE0NzU1ODAeFw0yNjAzMTYwODU2MjZaFw0yNzAzMTUwOTAxMjZaMDMxMTAvBgNV
BAMTKEU0MDY5NTE2Q0U2MDlFMUEyODc3NjEwNjg2REI1OEFBQkQ2MUUwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ynfWuSc7qtCues/W4wgOOUpw
Pamg5Gv+QMLx2fcqxw7kevulQgakUiXDdjZWVo1vjFYC0ZgFBoFroPO2lunGjyib
Vu3kTFTrY/ywOpbCfAj6iA+JDGYjV4ql0HW5+gtJu2GyOReth9q9zgIoN/69ygfh
7fQHbjbae5DvklEfJeaivmsbd5YtBqLZcSrevFmkoH0HKdHLou9d1O67CjcE9VSR
oFfbYDMvB72aqpNSvkldwZ5Lxzxbnq9X089YZDhbPIQKxFLkKIzSY6DgXdNoCgce
adYmk0ZOoFBXMWTKHFUIm80SC4tEF6LvhA5WXVEXELtODYfs9KZ6C1abx2r5AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU5AaVFs5gnhood2EGhttYqr1h4LkwHwYDVR0j
BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5
NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0
NzU1OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMmNhY2NmLTMyN2UtNDJiZC05
YjMxLTBhODczZDJlNjY5Mi8wLzMxMzAzMzJlMzEzOTMwMmUzNzM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvkwwDQYJKoZIhvcN
AQELBQADggEBAER9dqHI6CDgt+QfFTjP5OwHZ/n546dALsFTAwOi1S78Ii/oS+qe
R5fsTKUZsyaUMqlVHC/HjUH6n/Mbo/tEuKToWjuzBVVKScYGSSkpwRkPKs7m+Gh7
kHghqVH57Mji0hYjgP7Ko7R6J5JiibrOx4vnJf7CAvXX4cmY1aWvu7Lob8F7KXFT
Pqg1TtNUNad5G/siAKsj5192M4L1q6kz5t53F/I5Aqc7/SITPTAuWWHgxPkwQOr8
zST/Hyt8WJu8wzYiwqUq47+mReS62YWBjJf/k0pAVZOH5I3PFxlRJrUoES4NVay6
DI2Iq9FUm7ObmKUQ6aeKpWuzJg9D8CPtZ9I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:05 2026 by rpki-client