Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa
File:                     3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (raw, json)
Hash identifier:          OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=
Subject key identifier:   F1:66:AF:4D:03:A4:AC:8E:54:DB:75:19:83:19:B0:29:87:BC:C7:09
Certificate issuer:       /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5
Certificate serial:       039FF841A8E6C6C88233970BD7F7652B2E91B25C
Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa
Signing time:             Sun 03 May 2026 02:17:11 +0000
ROA not before:           Sun 03 May 2026 02:12:11 +0000
ROA not after:            Sun 02 May 2027 02:17:11 +0000
asID:                     147086
IP address blocks:        103.172.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl
                          rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9f:f8:41:a8:e6:c6:c8:82:33:97:0b:d7:f7:65:2b:2e:91:b2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5
        Validity
            Not Before: May  3 02:12:11 2026 GMT
            Not After : May  2 02:17:11 2027 GMT
        Subject: CN=F166AF4D03A4AC8E54DB75198319B02987BCC709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:9f:ec:c7:14:05:5d:fb:7e:cc:00:88:9e:
                    8e:c8:83:23:f9:1a:42:52:cd:26:2e:27:0b:dd:08:
                    34:3d:c9:70:34:d4:78:1a:e3:2c:a7:ce:34:a4:c2:
                    49:db:eb:ff:4e:48:6a:62:d6:c2:cb:65:79:5e:ab:
                    85:98:14:78:23:2f:e5:32:81:f3:e9:6b:db:3b:17:
                    49:37:a3:9a:93:b2:54:c0:22:4a:89:22:d5:3d:ce:
                    e5:a8:d6:ef:79:03:cd:98:1e:cb:21:0a:22:a5:8a:
                    9d:fe:07:35:ef:78:81:0d:21:c9:e6:15:85:fd:ea:
                    9d:d0:ba:fc:91:f9:12:36:4c:e2:95:39:3a:89:de:
                    14:cc:66:66:7a:3f:cc:c9:3a:9c:c8:f5:fd:61:17:
                    08:c2:2e:7d:cd:5e:d9:87:a5:2d:bd:ff:b8:7f:ca:
                    cd:f5:36:ca:3d:35:c4:b9:81:71:29:7e:fa:47:84:
                    80:5e:e3:e2:19:b0:72:04:15:57:20:8f:64:af:ba:
                    5e:38:72:2b:49:a9:bd:b7:c8:96:7d:b5:f4:08:18:
                    83:3d:de:48:f9:e1:83:5a:8b:21:a8:cd:c7:9b:e6:
                    a7:9e:5e:82:bb:b3:af:6c:9d:b7:7d:ac:61:b8:c2:
                    46:10:7e:20:e7:13:34:78:59:54:4f:24:c4:d3:43:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:66:AF:4D:03:A4:AC:8E:54:DB:75:19:83:19:B0:29:87:BC:C7:09
            X509v3 Authority Key Identifier:
                keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:33:8a:c3:1b:0d:d1:3c:8f:b6:14:70:36:0c:08:c1:13:21:
         ea:0a:1f:79:c5:e9:42:a2:56:b2:5f:75:1c:bd:b0:7c:e3:81:
         6a:61:86:6f:2b:be:69:25:7c:2c:57:a4:5a:bf:c0:f8:b5:78:
         fa:7b:f4:3d:a2:cb:2f:f5:21:d6:9c:3b:bf:ae:11:94:25:c9:
         32:27:c2:a4:15:22:ea:7c:46:10:ef:a9:4d:ef:8c:a5:9a:a5:
         7b:db:93:1e:ab:a8:5a:db:0f:bd:6b:38:da:47:10:32:fe:47:
         ee:c8:ec:ea:09:85:4e:a1:50:82:84:59:21:74:de:20:0c:ac:
         64:28:07:b2:95:69:ca:14:42:c3:c6:53:25:ff:04:df:b1:61:
         6e:ff:39:a1:81:a7:fd:ce:d2:de:f1:cd:50:54:94:7f:72:5a:
         31:b0:a5:36:1e:ac:bf:04:7a:99:b5:4e:e4:04:5c:0e:14:70:
         fc:03:60:dc:6b:80:34:79:61:d7:72:8a:1b:0d:8a:70:4c:fa:
         44:06:15:44:15:55:0d:34:91:3b:9f:d6:b5:c3:3f:91:ce:98:
         6a:8d:a4:a1:b0:76:45:85:ac:3a:4f:61:7c:29:f1:f0:c4:38:
         6b:78:2e:f0:75:e0:a0:2a:a7:c0:8e:69:84:d5:26:f2:d0:fe:
         42:4c:1b:e2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUA5/4QajmxsiCM5cL1/dlKy6RslwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIzOERG
MzM4RjJBNTAeFw0yNjA1MDMwMjEyMTFaFw0yNzA1MDIwMjE3MTFaMDMxMTAvBgNV
BAMTKEYxNjZBRjREMDNBNEFDOEU1NERCNzUxOTgzMTlCMDI5ODdCQ0M3MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAf5/sxxQFXft+zACIno7IgyP5
GkJSzSYuJwvdCDQ9yXA01Hga4yynzjSkwknb6/9OSGpi1sLLZXleq4WYFHgjL+Uy
gfPpa9s7F0k3o5qTslTAIkqJItU9zuWo1u95A82YHsshCiKlip3+BzXveIENIcnm
FYX96p3QuvyR+RI2TOKVOTqJ3hTMZmZ6P8zJOpzI9f1hFwjCLn3NXtmHpS29/7h/
ys31Nso9NcS5gXEpfvpHhIBe4+IZsHIEFVcgj2Svul44citJqb23yJZ9tfQIGIM9
3kj54YNaiyGozceb5qeeXoK7s69snbd9rGG4wkYQfiDnEzR4WVRPJMTTQw9DAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU8WavTQOkrI5U23UZgxmwKYe8xwkwHwYDVR0j
BBgwFoAUVKqhyupN6/x8gFvILJ4jjfM48qUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWI2ZDhmOTctYzgwNi00Nzk5LTg1ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FF
QTRERUJGQzdDODA1QkM4MkM5RTIzOERGMzM4RjJBNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NEFBQTFDQUVBNERFQkZDN0M4MDVCQzgyQzlFMjM4REYzMzhG
MkE1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiNmQ4Zjk3LWM4MDYtNDc5OS04
NWUwLThjY2YxOGRiYmIzMS8wLzMxMzAzMzJlMzEzNzMyMmUzMjM0MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM4MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrPMwDQYJ
KoZIhvcNAQELBQADggEBAH4zisMbDdE8j7YUcDYMCMETIeoKH3nF6UKiVrJfdRy9
sHzjgWphhm8rvmklfCxXpFq/wPi1ePp79D2iyy/1IdacO7+uEZQlyTInwqQVIup8
RhDvqU3vjKWapXvbkx6rqFrbD71rONpHEDL+R+7I7OoJhU6hUIKEWSF03iAMrGQo
B7KVacoUQsPGUyX/BN+xYW7/OaGBp/3O0t7xzVBUlH9yWjGwpTYerL8Eepm1TuQE
XA4UcPwDYNxrgDR5YddyihsNinBM+kQGFUQVVQ00kTuf1rXDP5HOmGqNpKGwdkWF
rDpPYXwp8fDEOGt4LvB14KAqp8COaYTVJvLQ/kJMG+I=
-----END CERTIFICATE-----
Generated at Wed May 13 10:20:36 2026 by rpki-client