Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa
File:                     3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          rh0sBxj81btPPODPu5P0eEgRgLm8ewf9kn1GsH7FYgE=
Subject key identifier:   D0:38:CA:59:96:C2:53:FF:1E:F5:F3:CD:30:12:6F:C2:E5:C2:B2:11
Certificate issuer:       /CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Certificate serial:       77C800744119B43F5A1FC8BCB35CF48F337A5BFA
Authority key identifier: 06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa
Signing time:             Sun 03 May 2026 02:14:35 +0000
ROA not before:           Sun 03 May 2026 02:09:35 +0000
ROA not after:            Sun 02 May 2027 02:14:35 +0000
asID:                     38320
IP address blocks:        103.158.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
                          rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c8:00:74:41:19:b4:3f:5a:1f:c8:bc:b3:5c:f4:8f:33:7a:5b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064B9E28C1AE598921210EB5E94CAE9E89533533
        Validity
            Not Before: May  3 02:09:35 2026 GMT
            Not After : May  2 02:14:35 2027 GMT
        Subject: CN=D038CA5996C253FF1EF5F3CD30126FC2E5C2B211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:d7:d0:c8:0b:86:fc:a0:46:ff:ed:ad:0d:
                    34:f0:0d:a7:ee:f5:e2:85:b8:75:bc:60:31:f1:39:
                    54:91:d5:d6:21:74:56:82:93:53:84:13:01:65:5d:
                    e8:35:c2:57:fc:05:e7:e8:ea:69:13:5c:71:68:0d:
                    1b:4e:02:66:23:91:64:b6:07:26:5e:5d:8a:f7:9f:
                    3c:89:3f:38:85:b0:c1:05:14:14:a4:86:a8:52:87:
                    3c:99:29:a2:f4:ae:26:bd:44:b3:f0:20:14:67:37:
                    b3:c3:7e:3c:af:03:4a:6b:94:e1:12:47:3d:86:09:
                    e3:03:e5:fc:4f:d3:a6:7a:67:d5:70:1d:c7:05:cf:
                    6f:25:ce:c2:40:94:9a:87:43:bc:24:64:c1:93:bb:
                    fe:3c:30:37:96:10:2e:3d:8c:0e:6e:36:97:ae:b4:
                    ca:72:f9:fc:e7:25:e6:6c:4e:04:0d:bd:07:f0:87:
                    ee:99:42:2c:18:bc:c9:46:1f:8e:d2:1e:47:f9:11:
                    b4:92:99:d2:b0:44:9a:6f:9e:67:46:cb:95:33:a1:
                    cf:0c:36:a9:8f:31:1e:d7:73:bc:2a:f0:65:f7:44:
                    9f:2d:dd:5e:21:51:37:bc:16:a9:15:e1:e7:4e:46:
                    94:56:d5:1c:18:e7:c6:60:83:65:ea:b8:e3:de:b7:
                    e9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:38:CA:59:96:C2:53:FF:1E:F5:F3:CD:30:12:6F:C2:E5:C2:B2:11
            X509v3 Authority Key Identifier:
                keyid:06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:24:9e:3b:99:6d:9f:df:06:69:1a:44:2a:57:b6:e2:c8:c4:
         87:be:f7:e5:81:53:87:23:b6:ee:be:36:fd:71:35:47:bb:0f:
         d8:f9:10:de:22:bb:42:68:6c:af:31:7e:d9:f2:9c:08:93:33:
         55:2c:1b:83:b6:6a:32:6f:17:c7:3a:55:ca:52:31:ac:6e:8d:
         a9:74:19:ac:b5:67:4f:bb:ca:94:65:98:cf:24:ee:48:c2:a5:
         14:16:21:0b:30:53:a6:18:fb:94:82:da:40:d9:53:25:e3:e1:
         b9:b7:84:8a:9f:c2:59:c7:a3:5c:3d:be:be:36:f6:76:b0:49:
         4f:d5:fd:93:b5:4c:97:37:b6:3b:77:8d:e4:e4:92:2d:20:e9:
         f1:0a:1d:24:96:f4:69:94:d3:3a:28:79:f3:81:12:d1:14:9d:
         0c:ac:0c:81:94:59:e6:76:3e:76:ec:56:2f:2c:31:c7:9b:48:
         df:e1:f0:95:bf:7d:39:4b:3d:9f:07:ec:e2:84:cf:c7:77:44:
         04:d9:97:2b:71:11:86:50:f2:7e:cd:e8:2a:de:22:74:c6:4a:
         25:3c:1d:5b:81:16:e2:6d:e8:d1:ea:7c:a5:3d:3a:54:7c:36:
         82:fd:09:81:01:cc:a9:30:72:f5:c8:1f:18:5c:2d:74:64:e0:
         55:4f:42:9b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUd8gAdEEZtD9aH8i8s1z0jzN6W/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY0QjlFMjhDMUFFNTk4OTIxMjEwRUI1RTk0Q0FFOUU4
OTUzMzUzMzAeFw0yNjA1MDMwMjA5MzVaFw0yNzA1MDIwMjE0MzVaMDMxMTAvBgNV
BAMTKEQwMzhDQTU5OTZDMjUzRkYxRUY1RjNDRDMwMTI2RkMyRTVDMkIyMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1tfQyAuG/KBG/+2tDTTwDafu
9eKFuHW8YDHxOVSR1dYhdFaCk1OEEwFlXeg1wlf8Befo6mkTXHFoDRtOAmYjkWS2
ByZeXYr3nzyJPziFsMEFFBSkhqhShzyZKaL0ria9RLPwIBRnN7PDfjyvA0prlOES
Rz2GCeMD5fxP06Z6Z9VwHccFz28lzsJAlJqHQ7wkZMGTu/48MDeWEC49jA5uNpeu
tMpy+fznJeZsTgQNvQfwh+6ZQiwYvMlGH47SHkf5EbSSmdKwRJpvnmdGy5Uzoc8M
NqmPMR7Xc7wq8GX3RJ8t3V4hUTe8FqkV4edORpRW1RwY58Zgg2XquOPet+mPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU0DjKWZbCU/8e9fPNMBJvwuXCshEwHwYDVR0j
BBgwFoAUBkueKMGuWYkhIQ616UyunolTNTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTNmMGE4M2MtMmJjMC00MmE1LWE0YWUtMTFhNTM4ODJkZjEwLzAvMDY0QjlFMjhD
MUFFNTk4OTIxMjEwRUI1RTk0Q0FFOUU4OTUzMzUzMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNjRCOUUyOEMxQUU1OTg5MjEyMTBFQjVFOTRDQUU5RTg5NTMz
NTMzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzEzZjBhODNjLTJiYzAtNDJhNS1h
NGFlLTExYTUzODgyZGYxMC8wLzMxMzAzMzJlMzEzNTM4MmUzMTMyMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ56AMA0GCSqG
SIb3DQEBCwUAA4IBAQCBJJ47mW2f3wZpGkQqV7biyMSHvvflgVOHI7buvjb9cTVH
uw/Y+RDeIrtCaGyvMX7Z8pwIkzNVLBuDtmoybxfHOlXKUjGsbo2pdBmstWdPu8qU
ZZjPJO5IwqUUFiELMFOmGPuUgtpA2VMl4+G5t4SKn8JZx6NcPb6+NvZ2sElP1f2T
tUyXN7Y7d43k5JItIOnxCh0klvRplNM6KHnzgRLRFJ0MrAyBlFnmdj527FYvLDHH
m0jf4fCVv305Sz2fB+zihM/Hd0QE2ZcrcRGGUPJ+zegq3iJ0xkolPB1bgRbibejR
6nylPTpUfDaC/QmBAcypMHL1yB8YXC10ZOBVT0Kb
-----END CERTIFICATE-----
Generated at Wed May 13 08:35:07 2026 by rpki-client