Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa
File:                     3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (raw, json)
Hash identifier:          L61Dq+JOgTVZ8Zg4QhtuTyVZiqTe5CzyDJzKqTh0In0=
Subject key identifier:   47:1C:C9:DD:FB:3D:C0:A9:7F:17:A6:10:1C:8B:4E:54:4D:CD:8A:65
Certificate issuer:       /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Certificate serial:       0FF78941AFD95EE0D6A863C4B306C47A815B4F9B
Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa
Signing time:             Sun 03 May 2026 02:12:29 +0000
ROA not before:           Sun 03 May 2026 02:07:29 +0000
ROA not after:            Sun 02 May 2027 02:12:29 +0000
asID:                     131111
IP address blocks:        103.158.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
                          rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f7:89:41:af:d9:5e:e0:d6:a8:63:c4:b3:06:c4:7a:81:5b:4f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
        Validity
            Not Before: May  3 02:07:29 2026 GMT
            Not After : May  2 02:12:29 2027 GMT
        Subject: CN=471CC9DDFB3DC0A97F17A6101C8B4E544DCD8A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:ab:12:69:a7:dc:f6:a9:4a:7e:37:ef:bb:
                    6e:43:77:06:fa:be:d5:3c:73:b0:b9:2b:3a:74:90:
                    7f:94:b9:58:a5:03:51:b4:82:76:56:38:f1:38:4b:
                    3f:c2:ae:47:2e:30:0d:7e:f6:fd:dc:46:e8:6d:63:
                    cc:89:b6:00:a3:51:d9:ee:0f:47:e7:a1:54:1d:0a:
                    9c:2a:47:d5:3e:71:ff:c1:14:1f:e7:bd:4c:5b:72:
                    2c:ab:f5:fd:a0:1c:c8:c2:47:4a:37:d2:68:be:e5:
                    ad:6f:41:6e:ca:6d:2b:aa:ad:4b:67:97:55:80:08:
                    7b:c4:e2:22:cc:77:58:6d:09:e2:df:a3:bb:f8:da:
                    18:fb:4f:4a:71:cf:5e:56:08:d6:ae:08:f6:89:27:
                    72:39:02:e9:13:2d:0d:62:26:b0:28:02:b6:66:35:
                    0d:a2:5d:83:06:db:b5:39:63:2c:93:f3:10:dc:13:
                    32:ff:b6:01:71:7b:87:d7:67:bc:e1:18:52:81:f9:
                    66:94:e1:8a:c2:f8:ec:8c:5b:0c:82:7f:fc:aa:62:
                    05:d5:1c:b5:b4:80:68:c2:58:85:7c:42:73:74:54:
                    95:5e:33:e1:2a:c1:49:50:33:4c:f7:63:55:e7:6c:
                    00:fe:61:72:a4:47:d5:33:3d:67:5d:7f:7b:eb:d9:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1C:C9:DD:FB:3D:C0:A9:7F:17:A6:10:1C:8B:4E:54:4D:CD:8A:65
            X509v3 Authority Key Identifier:
                keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:26:22:b0:06:06:b5:1f:f3:3e:2a:4f:82:0a:bd:19:9a:21:
         10:bc:df:19:58:d9:82:24:56:ca:41:0c:b6:72:d7:d8:9b:e2:
         d7:c6:39:21:08:cb:0b:d7:02:5c:f3:aa:87:2e:27:0b:13:39:
         4e:a9:d4:ec:5c:c8:a7:bf:fd:90:8e:18:e0:02:ed:64:05:67:
         e7:8e:08:42:05:84:b4:56:9a:e5:c2:a2:98:11:c6:80:ef:ab:
         75:51:1d:53:86:be:54:fb:59:db:83:52:c4:7e:00:d1:a5:bb:
         18:2d:8e:10:82:28:b0:c5:84:26:d1:a5:6f:d0:cd:7a:fe:09:
         e0:47:43:88:12:34:17:3b:7b:97:1c:96:90:fa:50:f6:41:84:
         ee:86:a4:73:ba:9d:7a:b4:46:67:e2:90:99:99:68:cf:35:d2:
         bb:ef:62:6c:08:ad:e0:02:3b:8a:ec:d2:ec:76:ac:63:44:36:
         42:6d:20:bc:a5:0e:b0:ef:96:6e:82:f1:54:d1:31:51:29:88:
         4f:c1:26:4d:4e:92:d8:8a:55:84:6a:f4:3c:7f:89:e1:d0:5d:
         07:cf:01:27:d1:31:8d:c8:98:b6:6e:91:06:0d:c9:6a:f7:b6:
         75:9b:4d:f0:c5:ab:28:3d:cb:aa:73:68:2b:3b:12:d4:e4:47:
         67:32:49:f8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUD/eJQa/ZXuDWqGPEswbEeoFbT5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4MTVFOUFBMTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1
OTIwQjdDQjAeFw0yNjA1MDMwMjA3MjlaFw0yNzA1MDIwMjEyMjlaMDMxMTAvBgNV
BAMTKDQ3MUNDOURERkIzREMwQTk3RjE3QTYxMDFDOEI0RTU0NERDRDhBNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiasSaafc9qlKfjfvu25Ddwb6
vtU8c7C5Kzp0kH+UuVilA1G0gnZWOPE4Sz/CrkcuMA1+9v3cRuhtY8yJtgCjUdnu
D0fnoVQdCpwqR9U+cf/BFB/nvUxbciyr9f2gHMjCR0o30mi+5a1vQW7KbSuqrUtn
l1WACHvE4iLMd1htCeLfo7v42hj7T0pxz15WCNauCPaJJ3I5AukTLQ1iJrAoArZm
NQ2iXYMG27U5YyyT8xDcEzL/tgFxe4fXZ7zhGFKB+WaU4YrC+OyMWwyCf/yqYgXV
HLW0gGjCWIV8QnN0VJVeM+EqwUlQM0z3Y1XnbAD+YXKkR9UzPWddf3vr2a7FAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURxzJ3fs9wKl/F6YQHItOVE3NimUwHwYDVR0j
BBgwFoAUaYFemqFLsCqmIID/aM7tUlkgt8swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGE0NmJkYWQtZjEzMC00OGE5LTg1MzQtNTRiYTNlOGVkNjFmLzAvNjk4MTVFOUFB
MTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1OTIwQjdDQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OTgxNUU5QUExNEJCMDJBQTYyMDgwRkY2OENFRUQ1MjU5MjBC
N0NCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBhNDZiZGFkLWYxMzAtNDhhOS04
NTM0LTU0YmEzZThlZDYxZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM5MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnsIwDQYJ
KoZIhvcNAQELBQADggEBAGQmIrAGBrUf8z4qT4IKvRmaIRC83xlY2YIkVspBDLZy
19ib4tfGOSEIywvXAlzzqocuJwsTOU6p1OxcyKe//ZCOGOAC7WQFZ+eOCEIFhLRW
muXCopgRxoDvq3VRHVOGvlT7WduDUsR+ANGluxgtjhCCKLDFhCbRpW/QzXr+CeBH
Q4gSNBc7e5cclpD6UPZBhO6GpHO6nXq0RmfikJmZaM810rvvYmwIreACO4rs0ux2
rGNENkJtILylDrDvlm6C8VTRMVEpiE/BJk1OktiKVYRq9Dx/ieHQXQfPASfRMY3I
mLZukQYNyWr3tnWbTfDFqyg9y6pzaCs7EtTkR2cySfg=
-----END CERTIFICATE-----
Generated at Wed May 13 13:48:35 2026 by rpki-client