Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          qXl6Y01U+k/Ra/QYHsyqr3b9BVCalPhgbHMkcfSQuTM=
Subject key identifier:   F8:32:CC:79:B5:42:FF:B1:53:FD:44:38:AF:92:B7:2C:11:D3:E9:1E
Certificate issuer:       /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Certificate serial:       156C6B9FD7066CCEDFF9C69C88540884CB073C9C
Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa
Signing time:             Wed 18 Mar 2026 09:02:51 +0000
ROA not before:           Wed 18 Mar 2026 08:57:51 +0000
ROA not after:            Wed 17 Mar 2027 09:02:51 +0000
asID:                     9341
IP address blocks:        103.189.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
                          rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 13:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:6b:9f:d7:06:6c:ce:df:f9:c6:9c:88:54:08:84:cb:07:3c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
        Validity
            Not Before: Mar 18 08:57:51 2026 GMT
            Not After : Mar 17 09:02:51 2027 GMT
        Subject: CN=F832CC79B542FFB153FD4438AF92B72C11D3E91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:30:a2:ae:39:23:be:c1:ed:81:a8:6f:08:
                    f6:b7:f9:4c:97:d7:76:a9:33:e5:9c:8a:f5:17:65:
                    b7:a0:fb:22:11:f8:fe:16:dc:d3:42:48:26:7c:95:
                    f2:ca:e8:55:78:e0:8c:3c:14:df:0d:48:f5:75:61:
                    29:fc:8b:5d:f2:c6:dd:75:ce:3a:b1:36:49:46:62:
                    f1:76:56:35:e3:c3:0f:72:9b:98:57:6a:56:4a:a6:
                    a9:60:af:e0:68:40:cc:b7:7f:94:bb:27:c4:7b:e5:
                    f3:8f:0e:1b:1a:2f:dd:f9:a0:6a:31:f6:8d:46:cb:
                    92:1b:96:cb:48:ed:6d:61:3d:df:86:b1:59:7e:12:
                    27:8b:1c:73:0b:26:ec:00:06:9e:20:76:ff:4a:0d:
                    18:2a:f3:50:01:a9:94:cf:c4:18:6b:47:a2:9a:2e:
                    0d:c2:d8:fa:2c:80:c1:80:e9:e6:3e:54:d0:e2:d1:
                    f3:9c:86:c4:56:bf:1a:52:c5:1a:8f:de:84:66:ba:
                    a9:fa:aa:e1:ea:3e:43:bc:89:6e:e0:c2:64:72:80:
                    4c:9e:c6:81:48:25:02:89:e3:a4:47:01:35:21:b6:
                    b3:db:ee:ff:fe:ce:18:68:82:1f:c6:85:e9:06:11:
                    ee:41:80:9c:7c:88:65:32:c2:3a:6b:ce:a7:46:17:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:32:CC:79:B5:42:FF:B1:53:FD:44:38:AF:92:B7:2C:11:D3:E9:1E
            X509v3 Authority Key Identifier:
                keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:41:64:02:aa:ae:08:a7:9f:91:db:42:ac:97:d2:a8:ef:11:
         00:48:8b:96:02:da:cf:bc:6e:43:10:67:ce:eb:12:90:d2:48:
         c9:1d:c8:f1:13:fc:b3:06:97:ac:d7:9e:63:8a:ad:9f:5d:a3:
         3b:c9:2e:60:c7:d6:e1:b3:16:29:9c:70:43:71:2f:c4:5c:47:
         0a:eb:fb:a0:c1:1b:3d:98:3e:0c:e1:59:f1:eb:73:09:36:80:
         18:69:db:92:2a:fc:5b:27:eb:1f:f8:a1:6d:9b:38:b6:aa:5f:
         e3:b5:6e:de:07:92:5b:35:9e:2e:99:ca:56:6e:2e:43:e4:29:
         a1:4c:3f:57:d4:48:06:5b:17:24:83:25:cc:9e:11:19:2c:aa:
         18:68:82:82:fc:15:ed:5a:12:bf:83:6f:12:fb:9b:53:e4:2c:
         fe:6f:d7:c1:07:2d:89:5d:88:44:69:eb:13:1f:1e:b0:b4:99:
         27:73:02:6d:86:47:e6:81:22:16:42:93:96:ad:59:8a:77:46:
         bd:8a:c0:39:72:75:e5:9f:1b:25:c8:65:0b:45:6e:f4:83:18:
         17:d1:a4:5d:81:b1:75:be:45:03:54:51:16:eb:89:4e:8d:10:
         74:a0:76:f3:6f:d9:29:56:da:8f:32:bd:8b:59:08:15:e7:db:
         83:6b:9d:fb
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFWxrn9cGbM7f+caciFQIhMsHPJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx
REIwOEZEQTAeFw0yNjAzMTgwODU3NTFaFw0yNzAzMTcwOTAyNTFaMDMxMTAvBgNV
BAMTKEY4MzJDQzc5QjU0MkZGQjE1M0ZENDQzOEFGOTJCNzJDMTFEM0U5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NjCirjkjvsHtgahvCPa3+UyX
13apM+WcivUXZbeg+yIR+P4W3NNCSCZ8lfLK6FV44Iw8FN8NSPV1YSn8i13yxt11
zjqxNklGYvF2VjXjww9ym5hXalZKpqlgr+BoQMy3f5S7J8R75fOPDhsaL935oGox
9o1Gy5IblstI7W1hPd+GsVl+EieLHHMLJuwABp4gdv9KDRgq81ABqZTPxBhrR6Ka
Lg3C2PosgMGA6eY+VNDi0fOchsRWvxpSxRqP3oRmuqn6quHqPkO8iW7gwmRygEye
xoFIJQKJ46RHATUhtrPb7v/+zhhogh/GhekGEe5BgJx8iGUywjprzqdGF5IVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU+DLMebVC/7FT/UQ4r5K3LBHT6R4wHwYDVR0j
BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw
RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw
OEZEQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmNjU5OTA0LTM3MDItNDc5Ny1i
ZDFiLTQ0N2FiOGM5NGUwYy8wLzMxMzAzMzJlMzEzODM5MmUzMTM2MzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe9qDANBgkqhkiG
9w0BAQsFAAOCAQEAkEFkAqquCKefkdtCrJfSqO8RAEiLlgLaz7xuQxBnzusSkNJI
yR3I8RP8swaXrNeeY4qtn12jO8kuYMfW4bMWKZxwQ3EvxFxHCuv7oMEbPZg+DOFZ
8etzCTaAGGnbkir8WyfrH/ihbZs4tqpf47Vu3geSWzWeLpnKVm4uQ+QpoUw/V9RI
BlsXJIMlzJ4RGSyqGGiCgvwV7VoSv4NvEvubU+Qs/m/XwQctiV2IRGnrEx8esLSZ
J3MCbYZH5oEiFkKTlq1ZindGvYrAOXJ15Z8bJchlC0Vu9IMYF9GkXYGxdb5FA1RR
FuuJTo0QdKB282/ZKVbajzK9i1kIFefbg2ud+w==
-----END CERTIFICATE-----
Generated at Fri Mar 20 10:58:44 2026 by rpki-client