Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa
File:                     3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          uX052Tj5rGF2pdx/AzNTc46gCVZ9O0oMkrpcZfXHTKQ=
Subject key identifier:   67:BC:6C:A0:1B:C9:1C:1D:F9:32:60:39:C3:B8:E4:3F:D1:95:DD:F7
Certificate issuer:       /CN=92CAA744707BC6EC7B059C523AD55BFB0DD800DF
Certificate serial:       7B63DFD3DA3C571EC077CC6047DE02773A739E9F
Authority key identifier: 92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 02:13:23 +0000
ROA not before:           Sun 03 May 2026 02:08:23 +0000
ROA not after:            Sun 02 May 2027 02:13:23 +0000
asID:                     45305
IP address blocks:        103.184.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl
                          rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:63:df:d3:da:3c:57:1e:c0:77:cc:60:47:de:02:77:3a:73:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92CAA744707BC6EC7B059C523AD55BFB0DD800DF
        Validity
            Not Before: May  3 02:08:23 2026 GMT
            Not After : May  2 02:13:23 2027 GMT
        Subject: CN=67BC6CA01BC91C1DF9326039C3B8E43FD195DDF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:62:67:5b:5e:92:16:4d:ab:05:c4:40:7c:
                    78:99:25:92:ec:96:a1:d6:dd:38:58:55:18:6b:39:
                    0b:7c:42:e6:b6:55:48:49:69:87:6a:0c:cb:12:70:
                    d6:61:3a:fb:65:f9:24:3d:11:1a:5e:66:3f:4c:b9:
                    4e:ef:5d:d7:3c:d2:52:c2:64:eb:77:d9:02:ae:eb:
                    0e:2a:37:08:dc:36:33:33:00:af:f2:10:c1:fe:de:
                    99:66:6c:db:87:4e:86:11:f1:8b:45:7f:81:8e:cf:
                    a8:9f:43:cc:65:d2:54:ce:29:34:9a:16:2e:da:5c:
                    2b:e9:3e:2f:23:62:77:53:85:dd:32:09:2d:83:38:
                    78:ea:ae:0c:b2:af:f6:47:f9:ae:b0:6f:e1:bb:58:
                    fb:92:9c:95:e7:b3:39:0b:93:d1:50:b1:d2:a7:53:
                    b7:90:8c:3a:07:69:5d:6f:af:ba:58:f6:83:83:39:
                    65:9e:0e:d1:17:a2:50:1b:8c:cf:01:1d:8d:0d:40:
                    8a:0e:8e:1f:ee:bf:c0:da:84:09:5f:b2:7f:28:69:
                    5f:7d:68:eb:dd:ec:a6:c8:20:fa:2b:29:97:34:8b:
                    93:5a:6d:6f:08:4f:61:b5:bb:a1:e9:07:6e:b4:eb:
                    30:6d:12:e6:0b:b8:89:08:b1:26:d8:bb:b8:f5:e5:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BC:6C:A0:1B:C9:1C:1D:F9:32:60:39:C3:B8:E4:3F:D1:95:DD:F7
            X509v3 Authority Key Identifier:
                keyid:92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:66:54:bc:66:dd:7d:90:66:45:1f:31:32:89:c5:07:c0:02:
         1c:67:61:6a:37:ba:77:e8:e9:8e:44:73:c6:7e:7f:c7:6f:fd:
         f6:1d:a7:a3:07:bd:d6:83:f9:3c:45:1e:01:c9:56:8e:41:2a:
         06:3b:ae:1b:24:61:5c:08:de:8d:cd:a1:b3:12:75:01:81:53:
         b4:5a:4d:90:a2:77:9a:d4:b2:e4:e2:05:f2:cd:63:83:20:23:
         0a:05:fc:9c:90:8a:c1:0d:bd:b6:af:2f:03:21:1d:47:b7:b0:
         1c:50:24:5b:26:06:1f:8d:c4:07:1c:94:ca:7d:2d:2c:03:2c:
         a7:8b:29:40:9a:15:80:c1:51:eb:ee:2e:49:30:07:8e:40:11:
         05:32:dd:97:cc:1f:94:01:ee:46:fc:86:3d:a8:5d:5b:c8:2d:
         fd:95:4e:62:04:68:9f:1f:28:36:88:1a:51:ec:3f:9a:8c:46:
         46:cd:a2:11:a8:47:c0:8a:4d:5e:d4:89:49:e1:d6:d9:aa:0b:
         e3:e8:66:7d:9b:ba:69:70:6e:5f:bd:5c:62:3d:f9:04:68:35:
         66:45:e0:29:17:66:6e:14:57:4b:40:cc:b3:f2:a7:49:41:3e:
         7e:fa:d7:07:1b:ab:d2:87:34:fc:f9:ac:57:f0:2d:b7:8b:71:
         19:ba:8a:7f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUe2Pf09o8Vx7Ad8xgR94Cdzpznp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDQUE3NDQ3MDdCQzZFQzdCMDU5QzUyM0FENTVCRkIw
REQ4MDBERjAeFw0yNjA1MDMwMjA4MjNaFw0yNzA1MDIwMjEzMjNaMDMxMTAvBgNV
BAMTKDY3QkM2Q0EwMUJDOTFDMURGOTMyNjAzOUMzQjhFNDNGRDE5NURERjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTKmJnW16SFk2rBcRAfHiZJZLs
lqHW3ThYVRhrOQt8Qua2VUhJaYdqDMsScNZhOvtl+SQ9ERpeZj9MuU7vXdc80lLC
ZOt32QKu6w4qNwjcNjMzAK/yEMH+3plmbNuHToYR8YtFf4GOz6ifQ8xl0lTOKTSa
Fi7aXCvpPi8jYndThd0yCS2DOHjqrgyyr/ZH+a6wb+G7WPuSnJXnszkLk9FQsdKn
U7eQjDoHaV1vr7pY9oODOWWeDtEXolAbjM8BHY0NQIoOjh/uv8DahAlfsn8oaV99
aOvd7KbIIPorKZc0i5NabW8IT2G1u6HpB2606zBtEuYLuIkIsSbYu7j15dzXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZ7xsoBvJHB35MmA5w7jkP9GV3fcwHwYDVR0j
BBgwFoAUksqnRHB7xux7BZxSOtVb+w3YAN8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGU1Nzk5MWEtMTU2ZC00YjU1LTkwY2ItNzliODc2Y2Y2YTRhLzAvOTJDQUE3NDQ3
MDdCQzZFQzdCMDU5QzUyM0FENTVCRkIwREQ4MDBERi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkNBQTc0NDcwN0JDNkVDN0IwNTlDNTIzQUQ1NUJGQjBERDgw
MERGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBlNTc5OTFhLTE1NmQtNGI1NS05
MGNiLTc5Yjg3NmNmNmE0YS8wLzMxMzAzMzJlMzEzODM0MmUzMTM4MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7i0MA0GCSqG
SIb3DQEBCwUAA4IBAQCLZlS8Zt19kGZFHzEyicUHwAIcZ2FqN7p36OmORHPGfn/H
b/32HaejB73Wg/k8RR4ByVaOQSoGO64bJGFcCN6NzaGzEnUBgVO0Wk2Qonea1LLk
4gXyzWODICMKBfyckIrBDb22ry8DIR1Ht7AcUCRbJgYfjcQHHJTKfS0sAyyniylA
mhWAwVHr7i5JMAeOQBEFMt2XzB+UAe5G/IY9qF1byC39lU5iBGifHyg2iBpR7D+a
jEZGzaIRqEfAik1e1IlJ4dbZqgvj6GZ9m7ppcG5fvVxiPfkEaDVmReApF2ZuFFdL
QMyz8qdJQT5++tcHG6vShzT8+axX8C23i3EZuop/
-----END CERTIFICATE-----
Generated at Wed May 13 09:15:02 2026 by rpki-client