Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa
File:                     3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (raw, json)
Hash identifier:          ahm/HoRAolOxtaIWGqQ0MLjBkp/CWv9tH60t0eSWQkU=
Subject key identifier:   76:D5:EB:69:77:8D:67:CC:1C:76:FF:7E:20:16:04:67:2E:7B:77:8F
Certificate issuer:       /CN=3B49013F73B5A7AF137F414DE362E405F31D32DC
Certificate serial:       40ECCAC15C278F9CDA80089A165F823A85F09FA7
Authority key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa
Signing time:             Sun 03 May 2026 02:24:21 +0000
ROA not before:           Sun 03 May 2026 02:19:21 +0000
ROA not after:            Sun 02 May 2027 02:24:21 +0000
asID:                     141920
IP address blocks:        103.165.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl
                          rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ec:ca:c1:5c:27:8f:9c:da:80:08:9a:16:5f:82:3a:85:f0:9f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC
        Validity
            Not Before: May  3 02:19:21 2026 GMT
            Not After : May  2 02:24:21 2027 GMT
        Subject: CN=76D5EB69778D67CC1C76FF7E201604672E7B778F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:6f:fc:48:28:c2:39:be:bd:1b:11:61:fc:
                    87:01:6a:26:02:07:e3:a0:f7:56:67:f1:97:01:ba:
                    89:36:a7:64:92:ee:30:85:9a:de:c1:7f:b2:66:64:
                    a2:0b:a0:bd:41:4d:45:b7:29:a6:a9:46:f5:19:cb:
                    92:84:51:57:0c:91:f7:17:05:20:92:d5:cc:f1:a7:
                    5a:b3:07:76:c2:f2:64:9c:ca:53:6d:36:b9:da:29:
                    61:78:53:25:6d:5e:e6:66:8b:21:74:af:5b:d5:90:
                    24:37:85:b1:76:4a:30:84:66:e8:8a:6d:62:d3:69:
                    6c:c4:a1:95:00:aa:95:e3:a6:6d:5e:60:29:92:0d:
                    18:b0:a5:a4:fd:f3:54:ff:4f:93:e6:1d:36:06:b0:
                    c5:37:3e:85:89:a4:b6:52:f7:cf:4a:6a:bd:a7:33:
                    e1:dc:e0:bb:51:bf:ea:29:50:75:8f:b3:e2:5a:1b:
                    9d:cf:b6:fd:7c:65:83:a9:6d:e3:bd:03:e0:9c:a1:
                    3f:ef:62:0f:bc:88:04:ba:2b:81:35:f2:e3:eb:f3:
                    ed:53:63:03:c2:38:e8:3d:d9:02:67:93:0e:6a:1c:
                    c6:cf:71:92:5a:39:99:a4:54:10:d9:94:40:81:43:
                    f7:cd:2b:36:34:25:09:6a:62:f2:c9:89:ea:89:dd:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D5:EB:69:77:8D:67:CC:1C:76:FF:7E:20:16:04:67:2E:7B:77:8F
            X509v3 Authority Key Identifier:
                keyid:3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ca:94:55:4e:01:a3:ab:fb:b0:b3:3f:27:6e:a3:82:ce:53:
         20:8c:38:82:08:34:01:98:af:6b:38:fc:84:10:72:1d:52:e8:
         06:ce:4e:74:70:97:b0:ee:cb:a6:ef:9e:8c:c5:35:df:60:54:
         95:ed:f8:1e:e4:8b:1d:bf:47:ab:3a:5e:c0:dc:06:64:9f:60:
         b7:66:06:a1:22:b6:f9:d5:81:c7:17:0f:a5:dc:cb:97:26:7c:
         73:98:04:9f:24:2d:2e:6c:5b:78:50:99:05:3e:48:03:b1:59:
         97:2c:15:44:c4:bb:85:a7:51:5c:79:58:d0:cf:97:65:35:c3:
         c4:d5:b8:42:fc:6f:5b:2c:c6:d1:dc:47:e6:43:43:ed:a6:17:
         8f:ae:5e:6e:f3:c9:ee:01:7d:e7:28:71:07:e9:87:ff:f5:54:
         26:93:48:2e:4e:d1:fc:10:7a:6a:81:b6:ce:aa:3b:6c:62:9a:
         6d:28:90:ab:e7:21:0a:88:93:90:3e:cc:09:5c:9b:bb:41:38:
         c3:95:11:de:95:83:8c:bd:6e:fa:22:ca:c4:d3:7a:91:6c:25:
         fe:5c:d1:fc:67:46:eb:c7:fd:8e:b0:67:de:11:0f:cd:8f:23:
         be:51:70:88:32:bf:80:8c:f1:36:3a:a6:62:59:b6:98:8e:e7:
         c3:65:b7:ca
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQOzKwVwnj5zagAiaFl+COoXwn6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVG
MzFEMzJEQzAeFw0yNjA1MDMwMjE5MjFaFw0yNzA1MDIwMjI0MjFaMDMxMTAvBgNV
BAMTKDc2RDVFQjY5Nzc4RDY3Q0MxQzc2RkY3RTIwMTYwNDY3MkU3Qjc3OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6m/8SCjCOb69GxFh/IcBaiYC
B+Og91Zn8ZcBuok2p2SS7jCFmt7Bf7JmZKILoL1BTUW3KaapRvUZy5KEUVcMkfcX
BSCS1czxp1qzB3bC8mScylNtNrnaKWF4UyVtXuZmiyF0r1vVkCQ3hbF2SjCEZuiK
bWLTaWzEoZUAqpXjpm1eYCmSDRiwpaT981T/T5PmHTYGsMU3PoWJpLZS989Kar2n
M+Hc4LtRv+opUHWPs+JaG53Ptv18ZYOpbeO9A+CcoT/vYg+8iAS6K4E18uPr8+1T
YwPCOOg92QJnkw5qHMbPcZJaOZmkVBDZlECBQ/fNKzY0JQlqYvLJieqJ3QvnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUdtXraXeNZ8wcdv9+IBYEZy57d48wHwYDVR0j
BBgwFoAUO0kBP3O1p68Tf0FN42LkBfMdMtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzJmM2Y1ZDktY2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3
M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVGMzFEMzJEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zQjQ5MDEzRjczQjVBN0FGMTM3RjQxNERFMzYyRTQwNUYzMUQz
MkRDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMyZjNmNWQ5LWNmYjgtNDEyMy1h
MmIxLWIwYjUyOTlmOWM2ZS8wLzMxMzAzMzJlMzEzNjM1MmUzMTM0MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMyMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpZUwDQYJ
KoZIhvcNAQELBQADggEBACzKlFVOAaOr+7CzPyduo4LOUyCMOIIINAGYr2s4/IQQ
ch1S6AbOTnRwl7Duy6bvnozFNd9gVJXt+B7kix2/R6s6XsDcBmSfYLdmBqEitvnV
gccXD6Xcy5cmfHOYBJ8kLS5sW3hQmQU+SAOxWZcsFUTEu4WnUVx5WNDPl2U1w8TV
uEL8b1ssxtHcR+ZDQ+2mF4+uXm7zye4BfecocQfph//1VCaTSC5O0fwQemqBts6q
O2ximm0okKvnIQqIk5A+zAlcm7tBOMOVEd6Vg4y9bvoiysTTepFsJf5c0fxnRuvH
/Y6wZ94RD82PI75RcIgyv4CM8TY6pmJZtpiO58Nlt8o=
-----END CERTIFICATE-----
Generated at Wed May 13 06:55:56 2026 by rpki-client