Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa
File:                     3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (raw, json)
Hash identifier:          sR5YvjfokmmdEnTZTCAPYVCi8TZ9C5R9A7CXeqBE8Bo=
Subject key identifier:   E5:3D:66:8D:FE:FE:25:36:E8:3B:D4:64:98:CA:34:6C:DB:B1:95:63
Certificate issuer:       /CN=D14C74B06D9A4D3A47662DA76625CD3537D00471
Certificate serial:       6C0BEA36E8B1BD7496077A2D1C2F716B494F9C21
Authority key identifier: D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa
Signing time:             Sun 03 May 2026 02:25:28 +0000
ROA not before:           Sun 03 May 2026 02:20:28 +0000
ROA not after:            Sun 02 May 2027 02:25:28 +0000
asID:                     150284
IP address blocks:        103.43.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl
                          rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0b:ea:36:e8:b1:bd:74:96:07:7a:2d:1c:2f:71:6b:49:4f:9c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14C74B06D9A4D3A47662DA76625CD3537D00471
        Validity
            Not Before: May  3 02:20:28 2026 GMT
            Not After : May  2 02:25:28 2027 GMT
        Subject: CN=E53D668DFEFE2536E83BD46498CA346CDBB19563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:be:4a:5b:70:0b:90:3f:d1:4f:87:ca:9d:
                    e6:af:c3:c0:83:19:ce:18:1b:a9:48:e7:c5:19:e5:
                    96:74:7f:91:29:e5:9d:27:d2:bd:0a:cf:82:57:7c:
                    91:7b:d5:f8:1d:7b:0f:0f:8e:22:87:b6:db:53:e6:
                    ad:ba:1c:2f:c9:58:90:9d:38:d9:93:0e:74:ac:81:
                    d3:80:33:b4:f0:5b:6c:77:1e:6d:07:88:3f:31:e5:
                    92:65:59:bb:53:c9:17:e6:af:06:44:a8:77:56:70:
                    18:01:5a:64:ad:fa:1d:44:c2:85:27:58:46:b2:ff:
                    a8:82:5a:ca:cd:68:ce:b5:8c:3f:09:89:88:6d:b0:
                    f7:dd:1b:6b:be:13:30:90:7e:9c:c3:99:81:08:ee:
                    9e:16:d5:78:e2:6e:01:fd:8a:26:12:0e:f5:d5:b8:
                    04:b8:24:50:8a:23:ff:2f:d6:ad:17:4a:fb:83:34:
                    c0:b4:bf:5d:9a:cd:58:56:72:0c:4b:e5:7d:c3:46:
                    39:e2:bc:5e:d4:31:cd:0f:70:ad:ea:99:5d:f5:a4:
                    99:b7:63:32:6d:26:5f:bd:80:3f:b3:ec:0b:04:a4:
                    9f:41:98:71:a9:65:22:e8:4b:dd:74:b1:07:a3:53:
                    b7:0b:fd:34:1d:34:76:2c:b5:91:ab:cc:b7:70:c1:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3D:66:8D:FE:FE:25:36:E8:3B:D4:64:98:CA:34:6C:DB:B1:95:63
            X509v3 Authority Key Identifier:
                keyid:D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:20:70:3f:1a:5c:09:fd:6c:bf:95:6c:cc:74:53:72:b7:19:
         17:bf:3f:db:1d:6e:63:9b:e9:b5:79:fa:5e:97:a0:d7:99:cc:
         9d:31:1d:43:e3:03:d2:23:a7:e8:23:74:f2:00:48:18:7a:76:
         be:7a:f6:f4:eb:25:cf:16:05:c3:24:b6:41:c6:d8:39:cc:b9:
         ea:3c:1a:8d:a6:fd:f1:17:74:d9:55:c6:f3:22:67:be:95:13:
         a9:05:f9:e9:3d:ad:d9:ba:ae:e0:9f:e2:4e:8c:77:5e:1d:f5:
         fc:b7:a0:5c:16:38:66:07:97:1a:4a:66:fe:71:a6:8d:da:6f:
         ac:bf:9f:ff:0d:27:60:b7:0d:b1:6a:be:5e:13:8f:db:22:91:
         1d:2d:05:f6:3f:4b:72:37:95:2f:f8:96:2a:99:63:42:47:59:
         51:62:31:03:a2:32:b2:8b:09:50:79:03:62:7f:c2:83:1f:f2:
         6e:96:5b:a4:ba:0e:86:4c:dd:3f:11:93:50:d3:30:22:c5:74:
         31:d4:cc:81:6b:0d:ce:22:ea:04:a7:49:44:5b:56:95:13:17:
         c4:f6:46:aa:4b:99:66:53:ba:bc:5c:40:49:56:d0:2c:11:b4:
         50:50:99:72:a1:d6:81:c0:50:5d:36:06:c5:63:48:21:86:f7:
         02:99:9a:16
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbAvqNuixvXSWB3otHC9xa0lPnCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUz
N0QwMDQ3MTAeFw0yNjA1MDMwMjIwMjhaFw0yNzA1MDIwMjI1MjhaMDMxMTAvBgNV
BAMTKEU1M0Q2NjhERkVGRTI1MzZFODNCRDQ2NDk4Q0EzNDZDREJCMTk1NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5b5KW3ALkD/RT4fKneavw8CD
Gc4YG6lI58UZ5ZZ0f5Ep5Z0n0r0Kz4JXfJF71fgdew8PjiKHtttT5q26HC/JWJCd
ONmTDnSsgdOAM7TwW2x3Hm0HiD8x5ZJlWbtTyRfmrwZEqHdWcBgBWmSt+h1EwoUn
WEay/6iCWsrNaM61jD8JiYhtsPfdG2u+EzCQfpzDmYEI7p4W1XjibgH9iiYSDvXV
uAS4JFCKI/8v1q0XSvuDNMC0v12azVhWcgxL5X3DRjnivF7UMc0PcK3qmV31pJm3
YzJtJl+9gD+z7AsEpJ9BmHGpZSLoS910sQejU7cL/TQdNHYstZGrzLdwwU91AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU5T1mjf7+JTboO9RkmMo0bNuxlWMwHwYDVR0j
BBgwFoAU0Ux0sG2aTTpHZi2nZiXNNTfQBHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzYyYmFjYzktZDI1ZC00NjEwLWFlZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2
RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUzN0QwMDQ3MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMTRDNzRCMDZEOUE0RDNBNDc2NjJEQTc2NjI1Q0QzNTM3RDAw
NDcxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM2MmJhY2M5LWQyNWQtNDYxMC1h
ZWU0LTY1NWExNGVhMmZkNi8wLzMxMzAzMzJlMzQzMzJlMzEzNjM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzIzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZyukMA0GCSqG
SIb3DQEBCwUAA4IBAQC4IHA/GlwJ/Wy/lWzMdFNytxkXvz/bHW5jm+m1efpel6DX
mcydMR1D4wPSI6foI3TyAEgYena+evb06yXPFgXDJLZBxtg5zLnqPBqNpv3xF3TZ
VcbzIme+lROpBfnpPa3Zuq7gn+JOjHdeHfX8t6BcFjhmB5caSmb+caaN2m+sv5//
DSdgtw2xar5eE4/bIpEdLQX2P0tyN5Uv+JYqmWNCR1lRYjEDojKyiwlQeQNif8KD
H/Jullukug6GTN0/EZNQ0zAixXQx1MyBaw3OIuoEp0lEW1aVExfE9kaqS5lmU7q8
XEBJVtAsEbRQUJlyodaBwFBdNgbFY0ghhvcCmZoW
-----END CERTIFICATE-----
Generated at Wed May 13 04:15:54 2026 by rpki-client