Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa
File:                     3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (raw, json)
Hash identifier:          CNG3TKSalvuCxf+hLEGkOQvjI+uVRC0qCR05spnG4ao=
Subject key identifier:   27:4C:8C:C3:C4:1F:AC:85:BD:A1:43:72:EE:AE:07:ED:D5:47:46:C4
Certificate issuer:       /CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A
Certificate serial:       6C36FCBA3CD98A3D308D17C55CB8436FA4D1E602
Authority key identifier: E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa
Signing time:             Sun 03 May 2026 02:14:43 +0000
ROA not before:           Sun 03 May 2026 02:09:43 +0000
ROA not after:            Sun 02 May 2027 02:14:43 +0000
asID:                     141089
IP address blocks:        103.156.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl
                          rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:36:fc:ba:3c:d9:8a:3d:30:8d:17:c5:5c:b8:43:6f:a4:d1:e6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A
        Validity
            Not Before: May  3 02:09:43 2026 GMT
            Not After : May  2 02:14:43 2027 GMT
        Subject: CN=274C8CC3C41FAC85BDA14372EEAE07EDD54746C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:f1:bf:41:03:f1:f2:71:8c:4c:40:72:a1:
                    b0:78:61:e0:ad:75:65:88:15:57:7e:e1:30:44:5e:
                    4b:f0:1c:cf:1b:f4:bb:88:17:c6:0a:7b:4f:db:d2:
                    4b:c2:09:b4:78:e3:a7:9b:70:ea:0b:a2:5c:98:f4:
                    91:21:8e:b0:b2:8d:13:c3:c9:b6:13:d4:31:a0:ea:
                    42:40:49:c2:1e:77:97:d7:0c:06:3f:30:17:d1:15:
                    e9:5d:9b:f9:b2:0f:e3:53:84:90:cb:5d:46:58:08:
                    a6:43:83:5a:22:c9:e9:fa:75:e0:4d:c9:1b:09:ca:
                    7d:a7:52:4f:2d:87:cc:c2:35:c5:1c:1d:c0:24:c0:
                    76:a1:17:b9:4c:b4:38:7f:03:ff:0e:49:77:c0:68:
                    34:f7:2f:09:b9:9b:5c:3d:6d:05:2b:6f:01:b2:c7:
                    1c:c7:86:91:55:ed:e7:c2:49:6e:79:79:1f:0a:af:
                    bb:76:ce:61:b5:25:bb:0d:f5:ef:23:83:fc:6c:53:
                    d1:34:b1:b6:9e:fc:ed:3b:da:35:b5:84:8a:79:3f:
                    7b:d9:81:e5:86:6f:53:9f:a1:ae:c6:bd:7d:9b:83:
                    6d:98:7d:50:5d:e1:10:e6:ec:54:e1:78:0c:c7:39:
                    af:27:27:3d:e5:9c:5c:39:67:63:4b:94:c7:d4:0f:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4C:8C:C3:C4:1F:AC:85:BD:A1:43:72:EE:AE:07:ED:D5:47:46:C4
            X509v3 Authority Key Identifier:
                keyid:E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:10:5e:77:92:51:84:12:f1:26:11:17:cc:ce:bc:4d:39:
         f7:85:67:42:b6:e2:42:eb:44:54:15:71:2a:6e:92:90:2b:36:
         27:8f:0b:1c:3b:0b:97:a3:d0:03:19:08:f7:9a:0b:b1:cc:c5:
         ef:30:66:e1:93:76:8a:ee:bf:8f:22:ba:5b:8b:08:1c:bb:82:
         a6:b0:14:54:e5:ac:38:c4:ed:86:10:d5:be:f0:ab:3c:49:c9:
         d7:a4:2c:a7:4e:a1:6e:d4:76:48:a4:a2:fa:65:4e:07:a4:d8:
         a7:7d:e9:f3:c4:dd:99:6c:1f:8d:4a:59:d1:b8:35:77:36:26:
         a6:45:0c:50:c5:fc:94:dd:dd:27:55:f5:21:24:1b:e4:7e:26:
         f5:b5:a0:d8:22:fe:28:c4:b3:0b:7e:5f:6d:4a:9f:12:bf:7f:
         1e:7a:6f:9c:52:22:d4:3d:60:2c:25:6a:77:62:1e:8a:17:72:
         fc:9d:59:cd:8a:a4:2e:8c:78:b3:df:8b:39:4d:30:a2:3a:08:
         d5:c2:ab:05:26:cd:72:fd:66:db:47:ca:6e:4d:8e:ed:7a:eb:
         1a:56:86:20:f5:44:f9:21:c1:0c:69:05:6c:60:97:ea:64:dd:
         d3:31:a0:81:f4:10:a5:94:52:78:52:42:82:49:fe:8d:d0:36:
         fe:bf:c5:90
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbDb8ujzZij0wjRfFXLhDb6TR5gIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUy
OUEzNzkzQTAeFw0yNjA1MDMwMjA5NDNaFw0yNzA1MDIwMjE0NDNaMDMxMTAvBgNV
BAMTKDI3NEM4Q0MzQzQxRkFDODVCREExNDM3MkVFQUUwN0VERDU0NzQ2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmPG/QQPx8nGMTEByobB4YeCt
dWWIFVd+4TBEXkvwHM8b9LuIF8YKe0/b0kvCCbR446ebcOoLolyY9JEhjrCyjRPD
ybYT1DGg6kJAScIed5fXDAY/MBfRFeldm/myD+NThJDLXUZYCKZDg1oiyen6deBN
yRsJyn2nUk8th8zCNcUcHcAkwHahF7lMtDh/A/8OSXfAaDT3Lwm5m1w9bQUrbwGy
xxzHhpFV7efCSW55eR8Kr7t2zmG1JbsN9e8jg/xsU9E0sbae/O072jW1hIp5P3vZ
geWGb1Ofoa7GvX2bg22YfVBd4RDm7FTheAzHOa8nJz3lnFw5Z2NLlMfUD5a/AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUJ0yMw8QfrIW9oUNy7q4H7dVHRsQwHwYDVR0j
BBgwFoAU6d35j7Mh1al3rUewxBzU/imjeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTQzM2ExYzYtMGY3MC00Yzk4LTk2YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZC
MzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUyOUEzNzkzQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOURERjk4RkIzMjFENUE5NzdBRDQ3QjBDNDFDRDRGRTI5QTM3
OTNBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0MzNhMWM2LTBmNzAtNGM5OC05
NmIwLWNhYjU4MTI2YWI5NC8wLzMxMzAzMzJlMzEzNTM2MmUzMTMxMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnG4wDQYJ
KoZIhvcNAQELBQADggEBAJHCEF53klGEEvEmERfMzrxNOfeFZ0K24kLrRFQVcSpu
kpArNiePCxw7C5ej0AMZCPeaC7HMxe8wZuGTdoruv48iuluLCBy7gqawFFTlrDjE
7YYQ1b7wqzxJydekLKdOoW7UdkikovplTgek2Kd96fPE3ZlsH41KWdG4NXc2JqZF
DFDF/JTd3SdV9SEkG+R+JvW1oNgi/ijEswt+X21KnxK/fx56b5xSItQ9YCwlandi
HooXcvydWc2KpC6MeLPfizlNMKI6CNXCqwUmzXL9ZttHym5Nju166xpWhiD1RPkh
wQxpBWxgl+pk3dMxoIH0EKWUUnhSQoJJ/o3QNv6/xZA=
-----END CERTIFICATE-----
Generated at Wed May 13 13:02:54 2026 by rpki-client