Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa
File:                     3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (raw, json)
Hash identifier:          cc/saxfe9KKXtfm7XzpNhS/kTpo6bsyBLZi4D549YFI=
Subject key identifier:   7F:43:AD:64:CF:44:06:81:DE:78:F8:C0:F4:6F:69:BC:87:37:3A:2C
Certificate issuer:       /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial:       2BCC8E9D61A67104ED8C8F336817E42A163B8C9E
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa
Signing time:             Sun 03 May 2026 02:30:34 +0000
ROA not before:           Sun 03 May 2026 02:25:34 +0000
ROA not after:            Sun 02 May 2027 02:30:34 +0000
asID:                     136874
IP address blocks:        103.105.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
                          rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cc:8e:9d:61:a6:71:04:ed:8c:8f:33:68:17:e4:2a:16:3b:8c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
        Validity
            Not Before: May  3 02:25:34 2026 GMT
            Not After : May  2 02:30:34 2027 GMT
        Subject: CN=7F43AD64CF440681DE78F8C0F46F69BC87373A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:79:34:1b:02:53:50:56:91:fd:30:28:3a:
                    74:b9:24:ac:7f:78:30:a4:d7:38:d1:27:ab:f1:29:
                    ee:45:38:10:c1:6c:14:a3:fa:cf:7c:6b:ce:77:de:
                    92:f5:2a:f8:c1:21:7d:32:3f:cb:2a:f8:c5:c5:3a:
                    47:90:4a:2d:72:b5:c3:10:73:47:2c:9f:bc:52:76:
                    53:7a:6d:90:48:a3:b8:29:e4:51:63:63:37:b2:f3:
                    8e:ae:15:22:f6:aa:0a:3d:28:ae:15:d7:01:34:bb:
                    96:98:e6:b6:cd:a1:b5:e1:30:04:8a:7e:d9:cb:27:
                    8c:15:68:0a:22:40:2e:c7:94:72:33:96:98:f7:18:
                    ce:4e:b6:6a:ec:2b:00:cf:8b:eb:04:73:ad:15:95:
                    02:6a:96:60:1f:f6:ee:93:05:33:67:8e:64:1b:e4:
                    59:41:9d:e4:f8:9c:0f:7a:0a:55:d3:c5:ea:b4:5b:
                    94:04:ac:25:be:9f:24:31:c3:e2:70:3f:2b:fe:de:
                    f7:10:35:11:43:0d:58:d0:e4:5d:34:71:90:f3:d4:
                    3f:58:e9:c5:4b:87:46:7e:82:60:fc:c2:14:f6:a2:
                    28:ca:ac:72:43:23:32:3c:72:da:49:b2:d8:1a:f4:
                    24:8b:a7:59:37:a4:76:f2:c9:6a:f2:92:3d:95:43:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:43:AD:64:CF:44:06:81:DE:78:F8:C0:F4:6F:69:BC:87:37:3A:2C
            X509v3 Authority Key Identifier:
                keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:96:20:9d:db:b8:5d:02:fb:12:c4:af:2b:11:b0:a6:09:ae:
         72:91:71:13:42:22:0d:85:e7:77:13:d4:41:91:34:8c:b0:67:
         8d:45:76:ae:0b:34:d2:86:6f:b7:a6:ab:54:45:f4:ec:b2:8c:
         48:3e:31:dd:31:2d:49:d7:2b:3f:c2:bb:60:c0:6f:1f:c0:90:
         18:dd:44:3f:88:3e:b9:13:64:d7:b8:8d:14:ca:4f:45:10:ac:
         28:07:85:d7:f8:d0:4e:51:70:9a:18:04:f7:5f:59:db:1e:d0:
         80:a5:5b:a8:ea:25:b3:39:e3:f2:3b:eb:fe:6f:7e:98:e7:c7:
         08:13:f6:14:f3:89:24:4f:ab:c2:6e:1e:96:10:d8:91:79:a5:
         b6:4d:bf:41:ba:e3:42:a0:dd:4f:50:f5:c0:14:99:d6:62:63:
         02:23:ed:ca:99:d3:73:29:06:ec:4d:f0:2f:bd:71:b3:94:76:
         8f:fd:5c:ba:94:d2:0f:9b:64:4e:4d:48:af:d4:54:a8:85:79:
         06:a4:2e:3a:4a:34:30:8a:64:58:16:27:fc:8c:9f:6a:68:8a:
         bf:c0:bf:4f:82:56:77:06:9d:6c:30:3e:fa:1f:7f:8d:be:04:
         2a:38:84:09:3b:a1:3d:92:9c:6b:02:d2:bb:44:c9:85:00:e7:
         bb:94:6d:ce
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUK8yOnWGmcQTtjI8zaBfkKhY7jJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg4QkM4QTdGMjdEMkE1Qjc1MjBFODc3NjA4ODlDRDA0
Mjg1M0FERTAeFw0yNjA1MDMwMjI1MzRaFw0yNzA1MDIwMjMwMzRaMDMxMTAvBgNV
BAMTKDdGNDNBRDY0Q0Y0NDA2ODFERTc4RjhDMEY0NkY2OUJDODczNzNBMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWMnk0GwJTUFaR/TAoOnS5JKx/
eDCk1zjRJ6vxKe5FOBDBbBSj+s98a8533pL1KvjBIX0yP8sq+MXFOkeQSi1ytcMQ
c0csn7xSdlN6bZBIo7gp5FFjYzey846uFSL2qgo9KK4V1wE0u5aY5rbNobXhMASK
ftnLJ4wVaAoiQC7HlHIzlpj3GM5OtmrsKwDPi+sEc60VlQJqlmAf9u6TBTNnjmQb
5FlBneT4nA96ClXTxeq0W5QErCW+nyQxw+JwPyv+3vcQNRFDDVjQ5F00cZDz1D9Y
6cVLh0Z+gmD8whT2oijKrHJDIzI8ctpJstga9CSLp1k3pHbyyWrykj2VQ46DAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUf0OtZM9EBoHeePjA9G9pvIc3OiwwHwYDVR0j
BBgwFoAU6IvIp/J9Klt1IOh3YIic0EKFOt4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDc3YmMzZDItNGFiMy00Y2ZiLTkyMjItNjZjNmVhOTQ0N2UzLzAvRTg4QkM4QTdG
MjdEMkE1Qjc1MjBFODc3NjA4ODlDRDA0Mjg1M0FERS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FODhCQzhBN0YyN0QyQTVCNzUyMEU4Nzc2MDg4OUNEMDQyODUz
QURFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3N2JjM2QyLTRhYjMtNGNmYi05
MjIyLTY2YzZlYTk0NDdlMy8wLzMxMzAzMzJlMzEzMDM1MmUzNzM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ2lMMA0GCSqG
SIb3DQEBCwUAA4IBAQC1liCd27hdAvsSxK8rEbCmCa5ykXETQiINhed3E9RBkTSM
sGeNRXauCzTShm+3pqtURfTssoxIPjHdMS1J1ys/wrtgwG8fwJAY3UQ/iD65E2TX
uI0Uyk9FEKwoB4XX+NBOUXCaGAT3X1nbHtCApVuo6iWzOePyO+v+b36Y58cIE/YU
84kkT6vCbh6WENiReaW2Tb9BuuNCoN1PUPXAFJnWYmMCI+3KmdNzKQbsTfAvvXGz
lHaP/Vy6lNIPm2ROTUiv1FSohXkGpC46SjQwimRYFif8jJ9qaIq/wL9PglZ3Bp1s
MD76H3+NvgQqOIQJO6E9kpxrAtK7RMmFAOe7lG3O
-----END CERTIFICATE-----
Generated at Wed May 13 03:55:14 2026 by rpki-client