Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          MYHc1QilfD2U8Oz6IIqNh/TzUhL1fSoeXnQW/OCLsII=
Subject key identifier:   99:2A:D5:26:CC:B5:85:A7:4A:8C:3B:9A:05:C6:D2:F1:89:8E:25:1C
Certificate issuer:       /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3
Certificate serial:       3AC7C3D5D0A84553826CB39F1935C12ECCBEA082
Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa
Signing time:             Sun 03 May 2026 02:13:27 +0000
ROA not before:           Sun 03 May 2026 02:08:27 +0000
ROA not after:            Sun 02 May 2027 02:13:27 +0000
asID:                     138123
IP address blocks:        103.132.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl
                          rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c7:c3:d5:d0:a8:45:53:82:6c:b3:9f:19:35:c1:2e:cc:be:a0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3
        Validity
            Not Before: May  3 02:08:27 2026 GMT
            Not After : May  2 02:13:27 2027 GMT
        Subject: CN=992AD526CCB585A74A8C3B9A05C6D2F1898E251C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ab:c5:fe:66:49:8b:31:3c:89:2f:8d:f8:a3:
                    cc:3b:28:7a:5d:c4:80:2c:36:a6:d1:63:1f:81:9a:
                    88:0c:76:0b:c4:7c:e5:4d:28:46:5a:49:22:75:c6:
                    ff:0e:c2:1b:a0:74:5a:b1:bf:d3:39:d0:03:a6:1a:
                    7c:39:5e:7f:5d:bb:4b:07:dc:07:c5:1d:00:41:28:
                    7a:db:67:83:45:f3:d7:0e:cb:d9:54:3e:6d:9d:64:
                    f8:9e:8c:32:80:ee:1a:d0:6c:e5:0b:4f:8c:5c:0f:
                    76:b5:ed:e4:b7:dc:2e:59:cc:30:c6:12:28:80:87:
                    05:39:67:eb:3f:7b:04:dd:eb:aa:28:97:66:93:e9:
                    21:4e:38:ec:e3:16:78:3f:64:31:2a:a4:c2:fa:f3:
                    88:01:a9:e7:d4:8f:63:95:64:b8:9e:28:31:cf:b5:
                    0b:fd:15:07:45:72:10:37:46:84:e5:ce:f8:ac:72:
                    4e:34:69:6d:ec:e1:d9:d3:ac:26:b5:a8:a5:cf:82:
                    84:f3:6b:27:68:53:88:54:8d:8a:7a:c1:50:88:58:
                    ef:fe:12:42:5f:c3:8e:34:4c:8e:b6:8c:63:d8:a6:
                    36:68:70:97:bd:e3:31:f0:56:bb:1f:1c:63:55:3b:
                    b9:7e:f7:92:56:d1:c4:2f:33:65:a4:22:e6:79:37:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2A:D5:26:CC:B5:85:A7:4A:8C:3B:9A:05:C6:D2:F1:89:8E:25:1C
            X509v3 Authority Key Identifier:
                keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:d1:ae:cc:06:18:4a:57:1f:29:5c:a4:9c:f3:e9:14:bf:2d:
         d5:a7:cc:1b:24:cd:36:e5:a9:3f:44:e4:54:d5:45:a4:67:3e:
         2b:de:ae:c3:ed:54:4d:fa:8d:5e:79:5d:22:e9:44:b7:0d:e4:
         a3:3d:fc:54:a2:6a:3b:43:b4:2b:aa:52:23:d6:6f:8f:02:87:
         98:3c:47:cf:27:17:21:00:24:76:86:5e:f6:86:93:f1:2e:75:
         41:7b:d4:2e:63:5d:85:44:0d:4a:0c:1b:50:2c:2c:f8:74:d7:
         8c:de:1a:58:d5:81:3b:33:f2:a7:b3:66:88:5f:74:ad:cc:9d:
         53:3d:c3:34:e9:55:da:fd:f2:21:41:ed:09:6a:00:80:0d:90:
         a1:34:e4:fc:b0:b1:57:68:2e:21:dd:45:b8:c1:2f:d9:08:91:
         d3:f0:da:1f:6a:58:d0:48:b6:4e:24:0d:36:9b:4c:94:bf:fa:
         23:26:ad:fc:f4:22:b8:13:b1:80:ca:ca:d4:b6:55:01:58:1b:
         34:93:03:37:ce:3a:e3:25:41:42:0f:68:a8:2c:58:3b:57:e6:
         74:89:2d:a2:94:6b:32:39:43:b2:53:dd:f3:8c:7e:b8:46:2d:
         bb:78:da:85:35:46:45:07:9b:30:13:e7:89:09:0b:77:43:2e:
         5b:ff:72:40
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOsfD1dCoRVOCbLOfGTXBLsy+oIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1
QzYwRjVDMzAeFw0yNjA1MDMwMjA4MjdaFw0yNzA1MDIwMjEzMjdaMDMxMTAvBgNV
BAMTKDk5MkFENTI2Q0NCNTg1QTc0QThDM0I5QTA1QzZEMkYxODk4RTI1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHq8X+ZkmLMTyJL434o8w7KHpd
xIAsNqbRYx+BmogMdgvEfOVNKEZaSSJ1xv8OwhugdFqxv9M50AOmGnw5Xn9du0sH
3AfFHQBBKHrbZ4NF89cOy9lUPm2dZPiejDKA7hrQbOULT4xcD3a17eS33C5ZzDDG
EiiAhwU5Z+s/ewTd66ool2aT6SFOOOzjFng/ZDEqpML684gBqefUj2OVZLieKDHP
tQv9FQdFchA3RoTlzvisck40aW3s4dnTrCa1qKXPgoTzaydoU4hUjYp6wVCIWO/+
EkJfw440TI62jGPYpjZocJe94zHwVrsfHGNVO7l+95JW0cQvM2WkIuZ5N6w7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUmSrVJsy1hadKjDuaBcbS8YmOJRwwHwYDVR0j
BBgwFoAUhdc9gE6LQo5DS00qdzugL1xg9cMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGU5NmVkODktMmExNi00MTUxLWJmODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0
RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1QzYwRjVDMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NUQ3M0Q4MDRFOEI0MjhFNDM0QjREMkE3NzNCQTAyRjVDNjBG
NUMzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBlOTZlZDg5LTJhMTYtNDE1MS1i
ZjgzLTU5ZGNlNTYxNDYwYy8wLzMxMzAzMzJlMzEzMzMyMmUzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4Q3MA0GCSqG
SIb3DQEBCwUAA4IBAQDZ0a7MBhhKVx8pXKSc8+kUvy3Vp8wbJM025ak/RORU1UWk
Zz4r3q7D7VRN+o1eeV0i6US3DeSjPfxUomo7Q7QrqlIj1m+PAoeYPEfPJxchACR2
hl72hpPxLnVBe9QuY12FRA1KDBtQLCz4dNeM3hpY1YE7M/Kns2aIX3StzJ1TPcM0
6VXa/fIhQe0JagCADZChNOT8sLFXaC4h3UW4wS/ZCJHT8NofaljQSLZOJA02m0yU
v/ojJq389CK4E7GAysrUtlUBWBs0kwM3zjrjJUFCD2ioLFg7V+Z0iS2ilGsyOUOy
U93zjH64Ri27eNqFNUZFB5swE+eJCQt3Qy5b/3JA
-----END CERTIFICATE-----
Generated at Wed May 13 06:47:38 2026 by rpki-client