Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa
File:                     3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (raw, json)
Hash identifier:          /1UO8tVQ+wLCWDJC+/9ddMEbFB3CgcFjCBFNxuu9120=
Subject key identifier:   97:96:A5:2F:C8:AF:45:83:92:22:89:51:2A:92:EA:E1:59:FA:F4:F8
Certificate issuer:       /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5
Certificate serial:       408233BFEA6EBD373F4E618985EB363D1CC77C7B
Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa
Signing time:             Sun 03 May 2026 02:13:03 +0000
ROA not before:           Sun 03 May 2026 02:08:03 +0000
ROA not after:            Sun 02 May 2027 02:13:03 +0000
asID:                     140479
IP address blocks:        103.154.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl
                          rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:82:33:bf:ea:6e:bd:37:3f:4e:61:89:85:eb:36:3d:1c:c7:7c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5
        Validity
            Not Before: May  3 02:08:03 2026 GMT
            Not After : May  2 02:13:03 2027 GMT
        Subject: CN=9796A52FC8AF4583922289512A92EAE159FAF4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:a4:77:14:8a:fa:9c:c6:ed:bd:1c:2a:9f:
                    7b:6e:c4:48:a5:9e:2b:09:75:79:2b:64:34:50:db:
                    90:c7:14:8b:4a:aa:97:90:10:9d:3b:99:b9:13:9c:
                    ca:b2:63:3c:fa:97:d8:a9:cd:fa:01:c9:99:cc:b0:
                    18:eb:9c:9e:ff:90:e9:03:c9:cb:30:3f:a4:3b:3a:
                    c7:9d:dd:99:f7:f3:e7:fd:32:66:76:75:94:62:78:
                    c2:1b:c8:7e:7e:8a:36:ae:1f:2a:4a:e4:95:5d:ef:
                    bc:b0:4f:d8:40:ae:f7:ab:93:9a:84:3f:60:cc:8f:
                    4d:57:27:b1:87:92:33:04:c0:16:0b:62:0f:b5:1b:
                    50:6d:58:bd:a2:40:44:18:2b:e2:de:bd:8b:56:1d:
                    53:3b:9c:d5:6f:01:3b:f6:2a:63:8d:30:67:a2:48:
                    b5:f0:a0:6c:d7:d0:2e:7e:76:05:40:5e:79:c3:47:
                    f3:78:0f:41:d0:ca:ac:d9:59:b3:f0:b4:0b:4f:27:
                    fc:59:5e:6c:24:54:2c:3c:62:9d:47:21:ec:90:b6:
                    5a:77:61:ca:61:9e:c7:52:a2:b2:bc:70:f8:e5:ca:
                    05:18:43:5f:8b:b9:ad:e4:ea:c6:99:f0:de:4b:8d:
                    c0:d6:b8:ab:0d:95:de:d9:d1:d5:3c:e7:07:27:68:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:A5:2F:C8:AF:45:83:92:22:89:51:2A:92:EA:E1:59:FA:F4:F8
            X509v3 Authority Key Identifier:
                keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:c4:5c:02:b4:57:87:3a:d5:9f:68:52:6c:7e:fa:f6:da:
         49:ba:e8:31:88:6d:9c:3c:01:63:8b:c6:31:ce:da:d3:bb:87:
         b7:c2:49:d2:d7:f1:9e:1a:a2:94:58:aa:b4:77:f9:96:11:d5:
         6b:f8:9f:fd:ba:fa:0d:3b:85:12:af:ee:8a:d8:a1:7a:4f:d3:
         4f:05:d9:2e:92:71:d7:17:21:af:3c:9b:2d:2a:7f:e3:38:bd:
         22:b8:8f:bf:73:bb:72:c5:50:90:ab:6c:59:35:9a:76:14:fd:
         12:42:71:af:e2:9a:70:bb:51:15:06:15:15:f6:bf:3d:91:b6:
         79:23:9d:57:25:4b:18:14:65:b7:7a:f5:8c:ca:2a:bf:53:3e:
         b0:9b:65:ff:a5:8e:6b:c7:51:30:2b:8f:33:19:e1:f4:42:ce:
         58:79:7c:84:1f:d7:5a:d4:81:5a:f1:f1:4c:28:01:6d:e7:a0:
         85:6e:e8:13:c1:0c:e9:77:4d:8c:7d:47:ce:22:92:fb:c0:e8:
         35:ad:c8:84:39:65:ac:21:49:1b:9e:38:61:56:fb:5a:e0:d0:
         d6:63:b6:fa:e3:e6:86:36:98:5e:e3:5d:a9:1e:4f:dc:02:0e:
         04:10:56:b3:8f:db:5c:88:5d:69:e5:47:38:f8:93:14:02:f0:
         fb:4d:c3:28
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQIIzv+puvTc/TmGJhes2PRzHfHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCRURFOTgzQTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdD
NjA2M0ZCNTAeFw0yNjA1MDMwMjA4MDNaFw0yNzA1MDIwMjEzMDNaMDMxMTAvBgNV
BAMTKDk3OTZBNTJGQzhBRjQ1ODM5MjIyODk1MTJBOTJFQUUxNTlGQUY0RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67KR3FIr6nMbtvRwqn3tuxEil
nisJdXkrZDRQ25DHFItKqpeQEJ07mbkTnMqyYzz6l9ipzfoByZnMsBjrnJ7/kOkD
ycswP6Q7Osed3Zn38+f9MmZ2dZRieMIbyH5+ijauHypK5JVd77ywT9hArverk5qE
P2DMj01XJ7GHkjMEwBYLYg+1G1BtWL2iQEQYK+LevYtWHVM7nNVvATv2KmONMGei
SLXwoGzX0C5+dgVAXnnDR/N4D0HQyqzZWbPwtAtPJ/xZXmwkVCw8Yp1HIeyQtlp3
YcphnsdSorK8cPjlygUYQ1+Lua3k6saZ8N5LjcDWuKsNld7Z0dU85wcnaJZ5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUl5alL8ivRYOSIolRKpLq4Vn69PgwHwYDVR0j
BBgwFoAUX77emDpjIrmZpGq2qsz2p8YGP7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGM3NjVkNTEtYjBiMS00MzVkLWE2NmItNjA0YzZlNWQyOWVmLzAvNUZCRURFOTgz
QTYzMjJCOTk5QTQ2QUI2QUFDQ0Y2QTdDNjA2M0ZCNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RkJFREU5ODNBNjMyMkI5OTlBNDZBQjZBQUNDRjZBN0M2MDYz
RkI1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjNzY1ZDUxLWIwYjEtNDM1ZC1h
NjZiLTYwNGM2ZTVkMjllZi8wLzMxMzAzMzJlMzEzNTM0MmUzNTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5o1MA0GCSqG
SIb3DQEBCwUAA4IBAQCQosRcArRXhzrVn2hSbH769tpJuugxiG2cPAFji8YxztrT
u4e3wknS1/GeGqKUWKq0d/mWEdVr+J/9uvoNO4USr+6K2KF6T9NPBdkuknHXFyGv
PJstKn/jOL0iuI+/c7tyxVCQq2xZNZp2FP0SQnGv4ppwu1EVBhUV9r89kbZ5I51X
JUsYFGW3evWMyiq/Uz6wm2X/pY5rx1EwK48zGeH0Qs5YeXyEH9da1IFa8fFMKAFt
56CFbugTwQzpd02MfUfOIpL7wOg1rciEOWWsIUkbnjhhVvta4NDWY7b64+aGNphe
412pHk/cAg4EEFazj9tciF1p5Uc4+JMUAvD7TcMo
-----END CERTIFICATE-----
Generated at Wed May 13 08:24:32 2026 by rpki-client