Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa
File:                     3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (raw, json)
Hash identifier:          n/anw1j/p698bFcxqqm49V4G12x2QBboMMl4JYNKkrU=
Subject key identifier:   0B:7F:72:FE:70:0E:1F:67:E2:B7:35:32:36:2B:B6:06:03:1E:5C:28
Certificate issuer:       /CN=D5B392E916885394AA1C2B31FE082DC317BCE686
Certificate serial:       66487DC57A730156AEECC5DCCFF738D29887D0F2
Authority key identifier: D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa
Signing time:             Sun 03 May 2026 02:14:45 +0000
ROA not before:           Sun 03 May 2026 02:09:45 +0000
ROA not after:            Sun 02 May 2027 02:14:45 +0000
asID:                     139431
IP address blocks:        103.143.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl
                          rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:48:7d:c5:7a:73:01:56:ae:ec:c5:dc:cf:f7:38:d2:98:87:d0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5B392E916885394AA1C2B31FE082DC317BCE686
        Validity
            Not Before: May  3 02:09:45 2026 GMT
            Not After : May  2 02:14:45 2027 GMT
        Subject: CN=0B7F72FE700E1F67E2B73532362BB606031E5C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cf:97:d1:de:e7:c7:db:9f:95:cd:a7:62:d6:
                    f9:70:6b:85:cc:3b:f3:b3:42:2e:e1:69:80:a3:de:
                    68:78:80:86:fc:19:7f:a7:90:6f:3a:8d:ff:e7:5b:
                    03:ab:c4:d9:2f:fa:ad:ab:7a:3d:6d:bd:6c:fd:49:
                    51:d3:be:43:11:44:13:bb:17:a3:b9:be:9d:40:fa:
                    59:9e:a1:71:04:1f:79:3a:83:db:d3:5c:c5:40:fe:
                    80:c6:15:c1:9c:10:ee:01:d9:0c:e7:ec:35:59:63:
                    51:2c:ca:18:cd:f4:d3:db:a1:3d:df:11:48:98:09:
                    24:69:ae:28:35:29:91:cc:fb:6d:2c:50:bb:95:77:
                    c9:9d:bb:b6:dd:2c:34:99:c5:35:30:3e:9a:16:14:
                    eb:08:1f:e2:e2:78:81:f8:40:42:7a:db:b3:83:bb:
                    d8:97:45:01:fa:af:07:a4:91:1d:1e:73:ce:ef:6a:
                    82:ac:23:8a:d7:ec:0e:69:e1:28:4a:79:55:ba:77:
                    3b:7f:4b:f8:a9:99:78:34:b3:d1:c7:fa:39:84:fe:
                    37:31:21:f6:ac:3f:1a:11:cc:92:02:1f:53:31:43:
                    c1:09:e2:4e:3e:1c:8d:d2:28:4f:5f:50:f3:a9:74:
                    ef:8d:52:6a:c7:18:a7:ab:8d:93:f6:67:02:fd:48:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7F:72:FE:70:0E:1F:67:E2:B7:35:32:36:2B:B6:06:03:1E:5C:28
            X509v3 Authority Key Identifier:
                keyid:D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:7e:98:bb:b4:a3:ac:73:e2:8e:71:e7:a3:96:12:98:29:
         39:9d:84:ac:e5:f7:69:19:4a:ba:d6:9f:22:fd:81:c7:e3:b8:
         e5:3c:fb:19:23:14:b1:5a:f8:07:17:ec:98:e6:68:d0:c0:46:
         1d:c4:41:0f:7e:12:fe:66:95:b7:5c:96:63:b5:40:63:3e:30:
         52:15:ec:8e:3a:aa:c9:43:c3:34:8f:9c:ff:97:77:68:68:dd:
         de:2f:7a:df:53:b9:49:48:6e:54:f2:7b:ba:ea:95:42:23:52:
         19:86:bb:c8:a8:bf:8a:59:54:9e:18:87:87:2e:b3:22:bb:f0:
         ed:6c:c1:3f:d4:4a:6d:f2:0e:62:60:9c:75:80:59:7f:81:3d:
         31:c2:51:56:99:7f:a2:75:4c:c2:ef:48:e5:c9:75:ee:84:d5:
         a9:18:2f:28:bd:16:0a:4f:62:4a:c1:6c:da:8e:f3:45:c9:f5:
         47:4f:a2:6f:35:35:a9:c7:24:18:39:67:ee:aa:fd:18:52:fd:
         b9:7e:ec:e2:25:ef:f2:13:03:c4:0f:1b:aa:56:b7:51:14:f8:
         c6:2e:6a:c2:1c:aa:a5:d0:7d:cd:1c:4b:f8:c5:95:9e:68:16:
         ed:f1:0d:ae:ca:01:be:1e:1d:46:d7:53:25:01:36:c2:69:0f:
         9a:07:7e:92
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZkh9xXpzAVau7MXcz/c40piH0PIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJEQzMx
N0JDRTY4NjAeFw0yNjA1MDMwMjA5NDVaFw0yNzA1MDIwMjE0NDVaMDMxMTAvBgNV
BAMTKDBCN0Y3MkZFNzAwRTFGNjdFMkI3MzUzMjM2MkJCNjA2MDMxRTVDMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdz5fR3ufH25+Vzadi1vlwa4XM
O/OzQi7haYCj3mh4gIb8GX+nkG86jf/nWwOrxNkv+q2rej1tvWz9SVHTvkMRRBO7
F6O5vp1A+lmeoXEEH3k6g9vTXMVA/oDGFcGcEO4B2Qzn7DVZY1EsyhjN9NPboT3f
EUiYCSRprig1KZHM+20sULuVd8mdu7bdLDSZxTUwPpoWFOsIH+LieIH4QEJ627OD
u9iXRQH6rwekkR0ec87vaoKsI4rX7A5p4ShKeVW6dzt/S/ipmXg0s9HH+jmE/jcx
IfasPxoRzJICH1MxQ8EJ4k4+HI3SKE9fUPOpdO+NUmrHGKerjZP2ZwL9SKKJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUC39y/nAOH2fitzUyNiu2BgMeXCgwHwYDVR0j
BBgwFoAU1bOS6RaIU5SqHCsx/ggtwxe85oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTQ2ZjMzZjItZjA2ZS00ZWI2LWFlNjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkx
Njg4NTM5NEFBMUMyQjMxRkUwODJEQzMxN0JDRTY4Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENUIzOTJFOTE2ODg1Mzk0QUExQzJCMzFGRTA4MkRDMzE3QkNF
Njg2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0NmYzM2YyLWYwNmUtNGViNi1h
ZTYxLTU1MjliY2ExY2RjZC8wLzMxMzAzMzJlMzEzNDMzMmUzMjMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzQzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ48WMA0GCSqG
SIb3DQEBCwUAA4IBAQBLwn6Yu7SjrHPijnHno5YSmCk5nYSs5fdpGUq61p8i/YHH
47jlPPsZIxSxWvgHF+yY5mjQwEYdxEEPfhL+ZpW3XJZjtUBjPjBSFeyOOqrJQ8M0
j5z/l3doaN3eL3rfU7lJSG5U8nu66pVCI1IZhrvIqL+KWVSeGIeHLrMiu/DtbME/
1Ept8g5iYJx1gFl/gT0xwlFWmX+idUzC70jlyXXuhNWpGC8ovRYKT2JKwWzajvNF
yfVHT6JvNTWpxyQYOWfuqv0YUv25fuziJe/yEwPEDxuqVrdRFPjGLmrCHKql0H3N
HEv4xZWeaBbt8Q2uygG+Hh1G11MlATbCaQ+aB36S
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:30 2026 by rpki-client