Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa
File:                     3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (raw, json)
Hash identifier:          Ol+8mj4uz+YDl+K02s8/nnKwbaKHiw9jdN56tzENmfg=
Subject key identifier:   41:A7:64:D1:97:30:D7:F2:A4:B3:08:C7:6C:B4:98:80:EF:24:C5:58
Certificate issuer:       /CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Certificate serial:       27961961C5028C0E77BF80E563AF82FA8FB47BCD
Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa
Signing time:             Fri 13 Mar 2026 08:00:00 +0000
ROA not before:           Fri 13 Mar 2026 07:55:00 +0000
ROA not after:            Fri 12 Mar 2027 08:00:00 +0000
asID:                     149890
IP address blocks:        103.190.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl
                          rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 04:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:96:19:61:c5:02:8c:0e:77:bf:80:e5:63:af:82:fa:8f:b4:7b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15
        Validity
            Not Before: Mar 13 07:55:00 2026 GMT
            Not After : Mar 12 08:00:00 2027 GMT
        Subject: CN=41A764D19730D7F2A4B308C76CB49880EF24C558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:f9:22:9f:c7:9a:f4:89:01:c3:df:53:87:
                    b3:3b:49:1d:68:12:0e:31:a3:3e:2b:11:be:be:a1:
                    1b:c8:99:01:40:b0:26:5a:91:41:94:a8:71:93:01:
                    28:55:e0:33:a1:32:42:49:ac:fe:4e:08:f3:7f:9a:
                    18:c1:b3:93:ee:2e:c6:74:3e:76:e0:d6:f9:0b:9f:
                    d3:ea:2d:14:af:d1:97:41:ec:b1:26:4e:3c:82:3b:
                    83:16:5a:90:83:8f:f1:21:8b:2c:72:9e:44:ae:90:
                    4c:ad:00:61:66:ab:c4:a9:f2:2c:6d:d2:a0:11:79:
                    fa:88:c7:7b:b8:8c:da:4f:35:41:30:41:9f:30:f6:
                    de:bd:2a:2d:82:96:14:0b:6f:5c:62:18:8f:0d:56:
                    45:b5:82:90:bb:41:4d:d2:0c:59:c8:af:62:08:2f:
                    4c:be:5f:34:c6:85:d4:c7:6b:6c:08:50:c6:85:1d:
                    c5:89:fc:d9:db:ef:13:94:33:08:4f:b4:23:f8:e0:
                    ca:56:8d:29:7e:d0:e5:8d:12:16:ca:f1:ef:89:51:
                    e5:e0:dc:88:a8:ae:d0:c7:17:2d:30:80:81:94:9b:
                    f0:09:28:96:c5:16:31:b7:d4:b3:b1:b1:52:10:a7:
                    fd:52:47:3f:95:d0:76:de:af:56:32:e4:ea:51:30:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A7:64:D1:97:30:D7:F2:A4:B3:08:C7:6C:B4:98:80:EF:24:C5:58
            X509v3 Authority Key Identifier:
                keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f7:48:1e:7d:d3:0e:78:ad:28:9b:aa:28:3f:08:74:69:a4:
         b5:66:5b:ac:fd:ac:13:ee:55:f6:bb:3e:ce:9d:65:ab:b2:5a:
         54:a0:19:97:55:3d:22:b4:9b:26:3b:9f:9c:43:31:bf:25:a1:
         b0:a6:8c:46:12:d8:f2:70:8a:4b:61:5a:87:45:71:ef:92:23:
         62:e5:d6:40:49:53:7e:03:8c:ae:b4:41:4a:2e:9a:23:ed:39:
         dd:83:8c:14:59:34:c9:d6:63:3c:fc:e2:26:69:d2:61:c8:59:
         2a:b5:7a:68:0c:6d:d4:82:74:95:f6:7f:17:a2:76:5b:2b:e9:
         ea:2c:b4:49:68:49:09:0b:3b:13:a4:3f:1c:a3:1b:7e:c9:3d:
         16:c5:3c:00:57:d1:d3:bc:5b:eb:b0:37:17:a5:df:f7:8d:d8:
         7c:2a:62:99:ce:cd:5e:45:e6:ee:40:e2:2e:be:e9:fd:be:0d:
         48:20:24:f8:4f:a2:ca:6d:79:85:2c:12:c7:b6:c7:cf:41:7d:
         cd:2e:ac:40:67:c9:99:61:bb:dc:59:8c:43:9b:b4:ff:b4:d3:
         31:d6:bf:74:4a:62:5a:f5:fe:f6:f6:d7:68:f0:26:09:5f:f1:
         4b:fb:f4:8f:b9:a4:84:3d:d0:3b:dc:bb:de:e1:4c:26:67:db:
         82:8e:69:aa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJ5YZYcUCjA53v4DlY6+C+o+0e80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD
QTMzNEMxNTAeFw0yNjAzMTMwNzU1MDBaFw0yNzAzMTIwODAwMDBaMDMxMTAvBgNV
BAMTKDQxQTc2NEQxOTczMEQ3RjJBNEIzMDhDNzZDQjQ5ODgwRUYyNEM1NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49fkin8ea9IkBw99Th7M7SR1o
Eg4xoz4rEb6+oRvImQFAsCZakUGUqHGTAShV4DOhMkJJrP5OCPN/mhjBs5PuLsZ0
Pnbg1vkLn9PqLRSv0ZdB7LEmTjyCO4MWWpCDj/EhiyxynkSukEytAGFmq8Sp8ixt
0qARefqIx3u4jNpPNUEwQZ8w9t69Ki2ClhQLb1xiGI8NVkW1gpC7QU3SDFnIr2II
L0y+XzTGhdTHa2wIUMaFHcWJ/Nnb7xOUMwhPtCP44MpWjSl+0OWNEhbK8e+JUeXg
3IiortDHFy0wgIGUm/AJKJbFFjG31LOxsVIQp/1SRz+V0Hber1Yy5OpRMHJDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQadk0Zcw1/KkswjHbLSYgO8kxVgwHwYDVR0j
BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF
MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz
NEMxNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZGFkOGNiLWE1MzctNGM1MC1h
ZjZhLWFhYmE1ZjFlNzY0NC8wLzMxMzAzMzJlMzEzOTMwMmUzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzOTM4MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe+ADANBgkqhkiG
9w0BAQsFAAOCAQEAZPdIHn3TDnitKJuqKD8IdGmktWZbrP2sE+5V9rs+zp1lq7Ja
VKAZl1U9IrSbJjufnEMxvyWhsKaMRhLY8nCKS2Fah0Vx75IjYuXWQElTfgOMrrRB
Si6aI+053YOMFFk0ydZjPPziJmnSYchZKrV6aAxt1IJ0lfZ/F6J2Wyvp6iy0SWhJ
CQs7E6Q/HKMbfsk9FsU8AFfR07xb67A3F6Xf943YfCpimc7NXkXm7kDiLr7p/b4N
SCAk+E+iym15hSwSx7bHz0F9zS6sQGfJmWG73FmMQ5u0/7TTMda/dEpiWvX+9vbX
aPAmCV/xS/v0j7mkhD3QO9y73uFMJmfbgo5pqg==
-----END CERTIFICATE-----
Generated at Thu Mar 19 10:37:22 2026 by rpki-client