Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa
File:                     3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (raw, json)
Hash identifier:          cbAdIskM1pEjxRO+NRH9Xmr+LSfrz4v+8kHiTjQjIx0=
Subject key identifier:   3D:8D:BB:C4:6D:6B:CD:A5:F6:97:30:D7:E9:97:59:55:01:67:A1:FE
Certificate issuer:       /CN=D448B410BA4C741968F8C5B34E3156EA5666874D
Certificate serial:       0DB13A450C2473D9418D09F8B1FD0689089F55A3
Authority key identifier: D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa
Signing time:             Sun 03 May 2026 02:17:07 +0000
ROA not before:           Sun 03 May 2026 02:12:07 +0000
ROA not after:            Sun 02 May 2027 02:17:07 +0000
asID:                     150532
IP address blocks:        103.151.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.crl
                          rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b1:3a:45:0c:24:73:d9:41:8d:09:f8:b1:fd:06:89:08:9f:55:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D448B410BA4C741968F8C5B34E3156EA5666874D
        Validity
            Not Before: May  3 02:12:07 2026 GMT
            Not After : May  2 02:17:07 2027 GMT
        Subject: CN=3D8DBBC46D6BCDA5F69730D7E99759550167A1FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:e9:50:bc:f4:91:69:99:17:5c:57:7b:4f:
                    84:42:cf:d4:60:1c:37:df:9f:cb:0b:7b:54:3f:b4:
                    90:d7:ba:6a:e7:e6:06:08:f5:e0:32:f4:8d:c3:a8:
                    c3:14:46:d8:96:24:d4:f3:5a:35:19:5c:ce:81:6b:
                    87:e2:79:41:19:c5:3a:a7:94:ed:98:54:df:86:f1:
                    36:30:0f:62:f3:95:d6:1f:0a:87:b4:23:7b:14:ed:
                    d8:ed:04:92:3f:1f:27:83:3f:1c:9b:87:28:d2:2c:
                    6c:c6:b0:33:84:08:2e:e9:c8:1f:ce:b0:f4:fa:34:
                    22:2d:d7:4d:0e:8e:0e:78:5d:a0:00:be:ab:04:75:
                    ce:00:9f:33:33:3d:01:c3:8a:ae:1e:8f:c6:4c:6a:
                    85:65:46:32:2c:b7:af:b1:19:37:4b:1c:6b:ae:28:
                    b3:e3:99:23:b2:8a:b2:2c:20:64:b3:d5:b3:4d:6f:
                    58:33:4b:60:eb:f0:35:aa:6a:9a:4b:ce:53:75:be:
                    5c:21:a6:c5:5a:26:ab:9d:74:00:84:eb:ae:d1:da:
                    cc:f1:dc:a5:4f:e2:ea:4b:ba:85:59:b1:9a:af:c4:
                    bb:ce:f0:30:27:b6:07:34:b3:02:3e:ab:90:5e:a4:
                    48:e6:19:02:e8:a1:cf:9f:12:77:d2:f4:e6:4e:4c:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8D:BB:C4:6D:6B:CD:A5:F6:97:30:D7:E9:97:59:55:01:67:A1:FE
            X509v3 Authority Key Identifier:
                keyid:D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f4:81:7e:3f:55:08:4f:3f:87:e4:ed:cf:e7:44:87:d3:92:
         18:3a:da:4e:98:21:d0:de:68:45:dd:eb:34:31:3f:02:13:e0:
         e1:6d:fc:a4:d8:88:44:0d:79:4e:bc:1c:37:1f:da:41:a6:04:
         71:2e:f6:96:15:e7:1b:96:7e:2c:c1:42:24:95:44:31:ac:7e:
         63:c1:8f:7d:30:04:a3:ce:11:7a:07:d2:8f:be:e3:e3:37:e3:
         16:50:80:f8:a5:5b:b3:31:2f:8b:d8:0a:ca:6b:fc:8f:74:a4:
         02:25:42:92:6f:7c:5f:da:05:1e:5a:59:e7:27:1f:db:be:e5:
         87:91:83:2c:46:74:ac:5a:7f:12:1d:49:db:2e:89:e1:57:fe:
         41:31:c1:a5:6d:4c:62:b2:69:60:fb:c9:b7:97:4e:ae:27:e0:
         a7:0d:02:86:cd:de:e2:1d:2c:62:cc:f4:94:9c:9f:98:d0:91:
         bf:72:fa:e7:c0:dd:c1:03:a5:ff:b6:f2:41:f3:ee:c2:30:1f:
         7c:d2:1f:2e:43:dc:f7:eb:34:5a:de:75:a2:d3:2e:7d:ed:d9:
         cd:43:48:0e:8f:7e:f6:27:23:d8:27:99:0e:b3:f4:21:99:37:
         77:2f:52:09:be:e7:a6:1e:e2:c0:b9:69:c4:cd:a7:61:55:07:
         1f:15:26:1a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDbE6RQwkc9lBjQn4sf0GiQifVaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ0OEI0MTBCQTRDNzQxOTY4RjhDNUIzNEUzMTU2RUE1
NjY2ODc0RDAeFw0yNjA1MDMwMjEyMDdaFw0yNzA1MDIwMjE3MDdaMDMxMTAvBgNV
BAMTKDNEOERCQkM0NkQ2QkNEQTVGNjk3MzBEN0U5OTc1OTU1MDE2N0ExRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMOlQvPSRaZkXXFd7T4RCz9Rg
HDffn8sLe1Q/tJDXumrn5gYI9eAy9I3DqMMURtiWJNTzWjUZXM6Ba4fieUEZxTqn
lO2YVN+G8TYwD2LzldYfCoe0I3sU7djtBJI/HyeDPxybhyjSLGzGsDOECC7pyB/O
sPT6NCIt100Ojg54XaAAvqsEdc4AnzMzPQHDiq4ej8ZMaoVlRjIst6+xGTdLHGuu
KLPjmSOyirIsIGSz1bNNb1gzS2Dr8DWqappLzlN1vlwhpsVaJquddACE667R2szx
3KVP4upLuoVZsZqvxLvO8DAntgc0swI+q5BepEjmGQLooc+fEnfS9OZOTPhpAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUPY27xG1rzaX2lzDX6ZdZVQFnof4wHwYDVR0j
BBgwFoAU1Ei0ELpMdBlo+MWzTjFW6lZmh00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWI1YTQ3YjYtNTUxMy00NjEwLTk0Y2YtMWZlZWM0ZWVlY2YzLzAvRDQ0OEI0MTBC
QTRDNzQxOTY4RjhDNUIzNEUzMTU2RUE1NjY2ODc0RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENDQ4QjQxMEJBNEM3NDE5NjhGOEM1QjM0RTMxNTZFQTU2NjY4
NzRELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiNWE0N2I2LTU1MTMtNDYxMC05
NGNmLTFmZWVjNGVlZWNmMy8wLzMxMzAzMzJlMzEzNTMxMmUzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5cYMA0GCSqG
SIb3DQEBCwUAA4IBAQAl9IF+P1UITz+H5O3P50SH05IYOtpOmCHQ3mhF3es0MT8C
E+Dhbfyk2IhEDXlOvBw3H9pBpgRxLvaWFecbln4swUIklUQxrH5jwY99MASjzhF6
B9KPvuPjN+MWUID4pVuzMS+L2ArKa/yPdKQCJUKSb3xf2gUeWlnnJx/bvuWHkYMs
RnSsWn8SHUnbLonhV/5BMcGlbUxismlg+8m3l06uJ+CnDQKGzd7iHSxizPSUnJ+Y
0JG/cvrnwN3BA6X/tvJB8+7CMB980h8uQ9z36zRa3nWi0y597dnNQ0gOj372JyPY
J5kOs/QhmTd3L1IJvuemHuLAuWnEzadhVQcfFSYa
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:04 2026 by rpki-client