Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa
File:                     3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (raw, json)
Hash identifier:          ZU9AWpUxdYUG4I1ckl8naoTziQnadPPBJeiNhP+hrxg=
Subject key identifier:   F9:38:37:61:A2:B7:9C:6C:D6:88:71:6C:7D:7E:15:2C:9D:25:A1:76
Certificate issuer:       /CN=1956B47266ADE221B617582972A27AAFA0CA985C
Certificate serial:       1D89071087FCAF007296114CA8160D92E6DA9082
Authority key identifier: 19:56:B4:72:66:AD:E2:21:B6:17:58:29:72:A2:7A:AF:A0:CA:98:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa
Signing time:             Sun 03 May 2026 02:30:10 +0000
ROA not before:           Sun 03 May 2026 02:25:10 +0000
ROA not after:            Sun 02 May 2027 02:30:10 +0000
asID:                     135471
IP address blocks:        103.137.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.crl
                          rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:89:07:10:87:fc:af:00:72:96:11:4c:a8:16:0d:92:e6:da:90:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1956B47266ADE221B617582972A27AAFA0CA985C
        Validity
            Not Before: May  3 02:25:10 2026 GMT
            Not After : May  2 02:30:10 2027 GMT
        Subject: CN=F9383761A2B79C6CD688716C7D7E152C9D25A176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:d0:dd:a4:fa:eb:c4:d9:7c:07:46:28:5a:
                    20:aa:7f:83:fa:81:4c:cc:cf:6f:01:69:8f:8a:43:
                    37:0b:a4:bc:0d:b6:c1:5e:47:fc:d1:2d:2e:5b:9e:
                    56:09:c2:a6:7a:b5:6c:dd:5a:88:56:59:bc:e4:4c:
                    b6:b0:31:93:63:67:48:e5:1f:34:ee:2c:98:a5:7f:
                    6a:0b:87:27:34:7b:7f:9e:bd:52:37:15:37:a1:1f:
                    51:89:ce:c3:ed:db:79:fd:92:51:54:d2:30:48:b0:
                    7d:c0:9e:e4:a8:08:c0:4a:52:0d:5b:bb:cc:e7:80:
                    62:68:cb:58:07:73:70:e4:b8:53:d4:d9:24:94:a1:
                    b1:8a:29:04:2b:01:2e:01:2d:6b:02:f9:72:72:3c:
                    25:07:0f:3c:0f:3c:54:1b:b9:cb:7f:ec:66:cb:51:
                    fb:dc:1d:d9:70:06:72:8a:09:47:03:1a:96:ac:ac:
                    9b:40:e2:71:d2:d1:69:7a:8e:74:59:ba:6d:68:d8:
                    8a:77:f8:d2:a9:87:c8:40:8d:10:9a:c3:fb:8d:08:
                    eb:c4:fa:aa:e6:c1:44:ad:19:b1:66:13:81:24:81:
                    96:cb:38:40:d8:a4:4f:1e:86:a5:18:15:70:1b:bc:
                    a6:66:7e:e2:11:d5:cf:7d:c0:17:09:ef:28:12:93:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:38:37:61:A2:B7:9C:6C:D6:88:71:6C:7D:7E:15:2C:9D:25:A1:76
            X509v3 Authority Key Identifier:
                keyid:19:56:B4:72:66:AD:E2:21:B6:17:58:29:72:A2:7A:AF:A0:CA:98:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:60:3e:32:d6:ad:63:9e:a0:92:83:a2:ac:64:ef:14:76:36:
         c1:45:c8:4c:57:97:c0:98:32:58:e2:90:fc:0d:e7:0b:63:0a:
         af:90:8b:5b:37:ff:12:f2:1e:9b:dc:7f:b7:1b:85:a7:27:eb:
         a6:63:0a:47:58:d3:3d:ab:2a:84:5f:50:26:8b:0b:d5:cf:90:
         e7:b4:ff:c2:3b:a2:41:70:13:d3:9d:ca:d3:ca:99:cd:c6:5a:
         62:ca:86:77:df:3f:c7:9f:70:b2:f3:0d:3d:9d:f7:de:af:7a:
         16:7b:4e:82:54:e9:ae:a3:62:3d:d3:f4:e3:a7:0a:af:0a:43:
         7d:cd:99:63:66:e7:54:69:1b:c9:87:fd:2e:60:cf:e3:98:e1:
         bb:81:ba:d0:bf:f0:2e:ce:01:0a:4a:e2:68:b9:4e:6e:cf:1f:
         99:bf:74:49:18:ca:c0:ea:8e:61:3c:01:d2:0f:73:57:16:b5:
         98:4e:8a:11:9b:f7:c1:e9:10:52:3b:71:8c:c9:46:7e:5f:3f:
         c8:80:5e:6b:a1:e3:f8:96:55:a6:c5:40:58:a0:63:ee:1d:21:
         db:9e:45:c2:04:db:58:03:ff:cb:58:f0:88:21:4d:10:f9:c7:
         05:17:de:86:c8:47:ae:6d:1c:bb:46:37:f4:b3:ec:e7:40:8c:
         0b:05:f6:3d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHYkHEIf8rwBylhFMqBYNkubakIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk1NkI0NzI2NkFERTIyMUI2MTc1ODI5NzJBMjdBQUZB
MENBOTg1QzAeFw0yNjA1MDMwMjI1MTBaFw0yNzA1MDIwMjMwMTBaMDMxMTAvBgNV
BAMTKEY5MzgzNzYxQTJCNzlDNkNENjg4NzE2QzdEN0UxNTJDOUQyNUExNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9wtDdpPrrxNl8B0YoWiCqf4P6
gUzMz28BaY+KQzcLpLwNtsFeR/zRLS5bnlYJwqZ6tWzdWohWWbzkTLawMZNjZ0jl
HzTuLJilf2oLhyc0e3+evVI3FTehH1GJzsPt23n9klFU0jBIsH3AnuSoCMBKUg1b
u8zngGJoy1gHc3DkuFPU2SSUobGKKQQrAS4BLWsC+XJyPCUHDzwPPFQbuct/7GbL
UfvcHdlwBnKKCUcDGpasrJtA4nHS0Wl6jnRZum1o2Ip3+NKph8hAjRCaw/uNCOvE
+qrmwUStGbFmE4EkgZbLOEDYpE8ehqUYFXAbvKZmfuIR1c99wBcJ7ygSkxsFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+Tg3YaK3nGzWiHFsfX4VLJ0loXYwHwYDVR0j
BBgwFoAUGVa0cmat4iG2F1gpcqJ6r6DKmFwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDYzMDI4MTAtNTY0Yy00NWI3LThhNzItZWY2YjhmNjMwOWMwLzAvMTk1NkI0NzI2
NkFERTIyMUI2MTc1ODI5NzJBMjdBQUZBMENBOTg1Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xOTU2QjQ3MjY2QURFMjIxQjYxNzU4Mjk3MkEyN0FBRkEwQ0E5
ODVDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ2MzAyODEwLTU2NGMtNDViNy04
YTcyLWVmNmI4ZjYzMDljMC8wLzMxMzAzMzJlMzEzMzM3MmUzMzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4klMA0GCSqG
SIb3DQEBCwUAA4IBAQDGYD4y1q1jnqCSg6KsZO8UdjbBRchMV5fAmDJY4pD8DecL
YwqvkItbN/8S8h6b3H+3G4WnJ+umYwpHWNM9qyqEX1AmiwvVz5DntP/CO6JBcBPT
ncrTypnNxlpiyoZ33z/Hn3Cy8w09nffer3oWe06CVOmuo2I90/TjpwqvCkN9zZlj
ZudUaRvJh/0uYM/jmOG7gbrQv/AuzgEKSuJouU5uzx+Zv3RJGMrA6o5hPAHSD3NX
FrWYTooRm/fB6RBSO3GMyUZ+Xz/IgF5roeP4llWmxUBYoGPuHSHbnkXCBNtYA//L
WPCIIU0Q+ccFF96GyEeubRy7Rjf0s+znQIwLBfY9
-----END CERTIFICATE-----
Generated at Wed May 13 07:46:07 2026 by rpki-client