Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa
File:                     3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (raw, json)
Hash identifier:          z0KglzUoHVHvxkZjD906Xmm3Uuu4IPK6qmYY5Pl0Weo=
Subject key identifier:   DC:7E:87:49:FA:2D:FB:93:0C:B0:56:AA:30:FA:81:24:38:DA:B5:45
Certificate issuer:       /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D
Certificate serial:       084272A9D23AF6E2CE59228D7CF067D6A14E3056
Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa
Signing time:             Sun 03 May 2026 02:25:35 +0000
ROA not before:           Sun 03 May 2026 02:20:35 +0000
ROA not after:            Sun 02 May 2027 02:25:35 +0000
asID:                     141639
IP address blocks:        103.162.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl
                          rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:42:72:a9:d2:3a:f6:e2:ce:59:22:8d:7c:f0:67:d6:a1:4e:30:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D
        Validity
            Not Before: May  3 02:20:35 2026 GMT
            Not After : May  2 02:25:35 2027 GMT
        Subject: CN=DC7E8749FA2DFB930CB056AA30FA812438DAB545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:95:fa:9f:2d:8d:29:4c:29:02:61:31:79:
                    96:93:35:b1:35:52:df:b5:86:4f:ea:c4:8e:1d:20:
                    dc:17:ea:96:2b:5a:38:7d:d6:69:13:65:0e:33:cd:
                    c9:af:64:5d:2e:6b:db:4c:e4:a5:ef:f4:88:9d:f0:
                    37:d5:a0:ef:5f:65:d3:f3:4d:1f:66:5f:8f:bb:e9:
                    2e:fd:7a:7d:e6:6f:86:cd:6a:4e:8b:06:f1:08:6e:
                    9b:7d:21:83:8f:c3:72:77:2b:97:f9:ce:1b:dd:48:
                    12:cf:fe:bc:5e:11:0e:37:d7:a1:f2:81:77:1d:d9:
                    59:7b:ad:63:37:00:87:97:72:79:ab:c3:34:3e:b8:
                    12:65:ef:8a:8a:4e:b5:73:5c:64:90:4e:9e:73:fc:
                    cf:29:bb:81:59:ab:1a:9d:41:07:b7:c1:36:c1:58:
                    78:f5:49:53:8e:a8:e0:4c:59:d0:a8:10:dc:17:a7:
                    42:36:d1:85:5d:ac:20:1c:c3:99:7e:20:79:85:12:
                    25:86:e2:17:f7:bd:47:1d:8c:cf:8e:d7:00:eb:f1:
                    95:cd:11:98:b1:2f:0e:41:a0:c7:ea:47:c3:4b:f5:
                    ce:94:28:84:54:a8:f1:1b:e4:13:d8:97:a7:7e:31:
                    1f:c8:e2:df:f7:f8:52:1e:9a:13:d4:d4:a1:72:b3:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7E:87:49:FA:2D:FB:93:0C:B0:56:AA:30:FA:81:24:38:DA:B5:45
            X509v3 Authority Key Identifier:
                keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:7e:89:8b:1f:87:15:d2:3e:41:76:1c:8d:cb:71:ce:7d:
         10:1e:c9:88:d1:84:eb:62:91:4a:ae:39:62:88:e6:e6:ac:0c:
         07:8a:17:5e:21:77:b1:b5:3d:0f:e4:e6:6b:c4:2d:42:dc:c1:
         96:82:23:ff:81:8e:fd:93:31:be:8f:bb:b1:a0:0c:49:25:e8:
         5d:db:09:c0:5a:a1:17:49:a5:f6:f1:d9:af:a0:10:44:41:96:
         13:42:38:ed:41:ea:82:f5:77:b1:f6:65:8a:af:fc:30:c2:82:
         99:41:4d:ba:b7:9c:b7:9c:1a:60:c0:a9:2e:a8:a2:b2:e4:bb:
         8e:3f:c1:15:49:eb:d1:a4:f4:38:16:17:51:d5:b6:03:93:f1:
         c5:cf:42:7b:c1:61:6d:ba:8e:7d:d1:84:b6:55:60:7a:35:eb:
         40:76:b2:95:0a:74:15:27:a1:0f:25:dc:d9:2f:9a:2b:32:90:
         42:df:01:3b:2f:a0:39:68:00:6b:12:6f:39:10:66:70:ad:fe:
         9e:c0:72:66:e0:22:f7:66:8d:ea:c7:66:d6:d3:09:e8:78:29:
         1b:1c:5b:9c:40:89:fa:a9:b5:1c:7c:21:3c:63:9e:1b:3b:75:
         2f:7f:a9:b5:e0:93:94:a0:c8:12:5d:72:4a:03:cc:92:3e:4e:
         a6:9b:07:9c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCEJyqdI69uLOWSKNfPBn1qFOMFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUw
Q0ZCNjgzRDAeFw0yNjA1MDMwMjIwMzVaFw0yNzA1MDIwMjI1MzVaMDMxMTAvBgNV
BAMTKERDN0U4NzQ5RkEyREZCOTMwQ0IwNTZBQTMwRkE4MTI0MzhEQUI1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE95X6ny2NKUwpAmExeZaTNbE1
Ut+1hk/qxI4dINwX6pYrWjh91mkTZQ4zzcmvZF0ua9tM5KXv9Iid8DfVoO9fZdPz
TR9mX4+76S79en3mb4bNak6LBvEIbpt9IYOPw3J3K5f5zhvdSBLP/rxeEQ4316Hy
gXcd2Vl7rWM3AIeXcnmrwzQ+uBJl74qKTrVzXGSQTp5z/M8pu4FZqxqdQQe3wTbB
WHj1SVOOqOBMWdCoENwXp0I20YVdrCAcw5l+IHmFEiWG4hf3vUcdjM+O1wDr8ZXN
EZixLw5BoMfqR8NL9c6UKIRUqPEb5BPYl6d+MR/I4t/3+FIemhPU1KFys4w/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3H6HSfot+5MMsFaqMPqBJDjatUUwHwYDVR0j
BBgwFoAUyuOV60e7TleZDfKD3XuVlQz7aD0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzZmM2FlOTctZjUyZS00OTc3LTkwZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0
N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUwQ0ZCNjgzRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DQUUzOTVFQjQ3QkI0RTU3OTkwREYyODNERDdCOTU5NTBDRkI2
ODNELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM2ZjNhZTk3LWY1MmUtNDk3Ny05
MGQxLTQzNDlhYWQwNTJhOC8wLzMxMzAzMzJlMzEzNjMyMmUzMzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6IlMA0GCSqG
SIb3DQEBCwUAA4IBAQAucX6Jix+HFdI+QXYcjctxzn0QHsmI0YTrYpFKrjliiObm
rAwHihdeIXextT0P5OZrxC1C3MGWgiP/gY79kzG+j7uxoAxJJehd2wnAWqEXSaX2
8dmvoBBEQZYTQjjtQeqC9Xex9mWKr/wwwoKZQU26t5y3nBpgwKkuqKKy5LuOP8EV
SevRpPQ4FhdR1bYDk/HFz0J7wWFtuo590YS2VWB6NetAdrKVCnQVJ6EPJdzZL5or
MpBC3wE7L6A5aABrEm85EGZwrf6ewHJm4CL3Zo3qx2bW0wnoeCkbHFucQIn6qbUc
fCE8Y54bO3Uvf6m14JOUoMgSXXJKA8ySPk6mmwec
-----END CERTIFICATE-----
Generated at Wed May 13 14:34:23 2026 by rpki-client