Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/3130332e31382e3131342e302f32332d3234203d3e203435323837.roa
File:                     3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (raw, json)
Hash identifier:          B4MJpy2WmXmWI2snPhvbbNGnwW8GYFx9bCPFTbBLiaQ=
Subject key identifier:   9C:5D:69:6E:E4:E0:31:4C:95:4C:C5:8A:4A:AE:F4:57:55:49:0F:7A
Certificate issuer:       /CN=EE63715AC09A5BF6E591CC15D636C202B7055A01
Certificate serial:       30FD80D5A1798DB927DB34703E4DDDAD234D0015
Authority key identifier: EE:63:71:5A:C0:9A:5B:F6:E5:91:CC:15:D6:36:C2:02:B7:05:5A:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE63715AC09A5BF6E591CC15D636C202B7055A01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/3130332e31382e3131342e302f32332d3234203d3e203435323837.roa
Signing time:             Sun 03 May 2026 02:25:26 +0000
ROA not before:           Sun 03 May 2026 02:20:26 +0000
ROA not after:            Sun 02 May 2027 02:25:26 +0000
asID:                     45287
IP address blocks:        103.18.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.crl
                          rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE63715AC09A5BF6E591CC15D636C202B7055A01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fd:80:d5:a1:79:8d:b9:27:db:34:70:3e:4d:dd:ad:23:4d:00:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE63715AC09A5BF6E591CC15D636C202B7055A01
        Validity
            Not Before: May  3 02:20:26 2026 GMT
            Not After : May  2 02:25:26 2027 GMT
        Subject: CN=9C5D696EE4E0314C954CC58A4AAEF45755490F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:ab:6a:20:13:09:e5:18:a5:9b:e3:92:d9:
                    ad:2f:09:30:39:32:61:c8:4b:4f:b7:e5:0b:9f:cb:
                    af:be:6d:f5:ef:34:d9:9c:5a:db:c9:8f:6e:24:94:
                    7d:e6:44:f7:3c:ad:0e:38:78:c8:41:39:fa:be:46:
                    df:70:94:19:16:4b:dc:3e:65:47:2f:a8:ba:e8:1d:
                    ef:4a:71:ca:0b:eb:7b:c2:2b:18:a1:c9:aa:0e:99:
                    00:0c:bd:45:e7:cd:f0:7c:dc:38:17:42:42:4f:3c:
                    fe:36:2c:1b:94:2f:2f:ae:d4:ff:d8:b6:7a:e7:5a:
                    74:53:ef:f4:c1:43:5b:0b:97:cf:33:36:99:7c:23:
                    39:43:dc:75:c1:bf:5b:aa:0c:33:ac:fb:85:8f:b3:
                    f0:a8:29:f5:c8:7e:4d:57:89:14:0e:a9:75:dc:08:
                    68:35:37:27:b5:c0:27:15:b5:21:eb:69:1e:b5:00:
                    62:76:99:ed:1d:6f:74:4d:a2:6b:13:06:cb:81:c8:
                    85:4f:90:ee:61:2f:56:46:da:a7:30:bb:c2:5d:4e:
                    7b:cb:d2:71:b3:51:8a:7c:67:58:90:a0:89:df:5b:
                    fd:a6:72:63:6a:d6:86:d9:6f:9e:e8:19:c0:88:ff:
                    46:09:0b:6a:aa:5c:0a:e8:1a:1d:3c:13:42:63:47:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5D:69:6E:E4:E0:31:4C:95:4C:C5:8A:4A:AE:F4:57:55:49:0F:7A
            X509v3 Authority Key Identifier:
                keyid:EE:63:71:5A:C0:9A:5B:F6:E5:91:CC:15:D6:36:C2:02:B7:05:5A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE63715AC09A5BF6E591CC15D636C202B7055A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/3130332e31382e3131342e302f32332d3234203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:33:86:db:a9:92:0f:f1:32:8f:9b:cf:24:df:ee:e8:ec:
         f2:5c:e3:0f:dd:72:27:a1:3d:96:d3:c5:6b:b8:49:0b:b4:23:
         22:50:52:ec:a4:0a:36:93:91:4f:51:24:aa:13:1f:92:72:af:
         7e:7c:9d:dd:25:91:8b:b3:c1:9e:0d:36:6a:bb:14:e3:37:b9:
         a6:7f:f6:e1:f4:34:63:b8:bf:ca:50:23:2a:1b:36:ac:4c:ea:
         4c:f1:62:2f:97:cd:75:60:57:7f:98:4a:fd:fa:1b:f8:75:b4:
         ff:3e:45:93:25:42:7d:39:86:c3:3a:b8:2f:c7:8f:c6:24:30:
         eb:7c:74:48:14:2c:b0:3b:55:98:bd:2a:e3:c9:f4:f8:48:2c:
         e0:23:49:b2:82:83:24:a3:f5:f6:ef:98:5f:a4:56:8c:79:90:
         44:f5:dc:f6:c5:9c:47:09:78:11:37:f4:4b:39:eb:f7:63:1a:
         d6:bf:52:77:2c:62:38:b4:20:c1:93:c0:65:04:ec:3e:f9:09:
         4d:c7:01:90:7a:3a:8a:5d:99:e1:6a:9e:7b:1c:5a:ae:a3:72:
         ca:cc:68:b9:a3:e2:33:8f:f4:04:31:76:62:eb:24:66:f4:58:
         dd:e9:fb:91:13:3f:b7:c6:d5:41:d1:9d:26:67:8a:43:d5:6d:
         5b:3c:fd:bd
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMP2A1aF5jbkn2zRwPk3drSNNABUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MzcxNUFDMDlBNUJGNkU1OTFDQzE1RDYzNkMyMDJC
NzA1NUEwMTAeFw0yNjA1MDMwMjIwMjZaFw0yNzA1MDIwMjI1MjZaMDMxMTAvBgNV
BAMTKDlDNUQ2OTZFRTRFMDMxNEM5NTRDQzU4QTRBQUVGNDU3NTU0OTBGN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSqtqIBMJ5Rilm+OS2a0vCTA5
MmHIS0+35Qufy6++bfXvNNmcWtvJj24klH3mRPc8rQ44eMhBOfq+Rt9wlBkWS9w+
ZUcvqLroHe9KccoL63vCKxihyaoOmQAMvUXnzfB83DgXQkJPPP42LBuULy+u1P/Y
tnrnWnRT7/TBQ1sLl88zNpl8IzlD3HXBv1uqDDOs+4WPs/CoKfXIfk1XiRQOqXXc
CGg1Nye1wCcVtSHraR61AGJ2me0db3RNomsTBsuByIVPkO5hL1ZG2qcwu8JdTnvL
0nGzUYp8Z1iQoInfW/2mcmNq1obZb57oGcCI/0YJC2qqXAroGh08E0JjR14fAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUnF1pbuTgMUyVTMWKSq70V1VJD3owHwYDVR0j
BBgwFoAU7mNxWsCaW/blkcwV1jbCArcFWgEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzYwYjlhODctODA1OC00NjZmLWI0YTktYTc3N2I0NjgxYWUxLzAvRUU2MzcxNUFD
MDlBNUJGNkU1OTFDQzE1RDYzNkMyMDJCNzA1NUEwMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRTYzNzE1QUMwOUE1QkY2RTU5MUNDMTVENjM2QzIwMkI3MDU1
QTAxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM2MGI5YTg3LTgwNTgtNDY2Zi1i
NGE5LWE3NzdiNDY4MWFlMS8wLzMxMzAzMzJlMzEzODJlMzEzMTM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcScjANBgkqhkiG
9w0BAQsFAAOCAQEAHJIzhtupkg/xMo+bzyTf7ujs8lzjD91yJ6E9ltPFa7hJC7Qj
IlBS7KQKNpORT1EkqhMfknKvfnyd3SWRi7PBng02arsU4ze5pn/24fQ0Y7i/ylAj
Khs2rEzqTPFiL5fNdWBXf5hK/fob+HW0/z5FkyVCfTmGwzq4L8ePxiQw63x0SBQs
sDtVmL0q48n0+Egs4CNJsoKDJKP19u+YX6RWjHmQRPXc9sWcRwl4ETf0Sznr92Ma
1r9SdyxiOLQgwZPAZQTsPvkJTccBkHo6il2Z4WqeexxarqNyysxouaPiM4/0BDF2
YuskZvRY3en7kRM/t8bVQdGdJmeKQ9VtWzz9vQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:04 2026 by rpki-client