Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233332e302f32342d3234203d3e203538343735.roa
File:                     3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier:          gz0mtebVHRYvwcZULFWZzRpAOfu5PGcdFQ6/2J/rYJg=
Subject key identifier:   B8:66:E2:1D:CA:1C:C9:0E:82:96:CF:9E:E2:F7:9B:99:D7:A7:F0:C0
Certificate issuer:       /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial:       34F501C628362B57DD88DD3BC3139F5EB82A7D90
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233332e302f32342d3234203d3e203538343735.roa
Signing time:             Sun 03 May 2026 02:30:59 +0000
ROA not before:           Sun 03 May 2026 02:25:59 +0000
ROA not after:            Sun 02 May 2027 02:30:59 +0000
asID:                     58475
IP address blocks:        103.23.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
                          rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f5:01:c6:28:36:2b:57:dd:88:dd:3b:c3:13:9f:5e:b8:2a:7d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
        Validity
            Not Before: May  3 02:25:59 2026 GMT
            Not After : May  2 02:30:59 2027 GMT
        Subject: CN=B866E21DCA1CC90E8296CF9EE2F79B99D7A7F0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:da:4d:af:50:c3:56:88:f7:b4:c3:e3:cd:
                    2a:0b:a2:86:af:f9:65:2a:9c:13:d2:18:48:a1:c2:
                    32:a3:5a:21:d1:52:7a:63:5a:45:df:ec:56:79:1a:
                    d9:4d:44:8b:b4:00:9f:57:06:fa:cc:67:b2:57:aa:
                    85:50:0e:88:d4:6f:30:2b:67:9c:77:7b:4f:b1:94:
                    7e:26:f9:96:84:58:ce:53:65:21:8c:57:1c:7c:8b:
                    c9:d1:5f:38:34:ba:e1:ef:d3:c5:bd:db:02:de:76:
                    ab:fe:85:a2:70:0c:ef:a7:67:d1:ec:2d:00:2a:ff:
                    73:90:d3:b7:6c:4e:75:13:5f:70:5e:e7:e2:28:74:
                    e1:76:10:87:9a:87:51:e7:b2:51:16:1a:02:40:af:
                    7f:f9:5a:e0:cf:fd:0c:6c:41:65:1c:e1:e7:00:ec:
                    42:10:bf:ac:be:79:9e:b8:8a:0f:2d:8f:82:8f:42:
                    61:c0:17:d0:45:17:c5:eb:08:98:94:2f:ab:33:d5:
                    f4:81:86:c8:cd:93:cc:09:76:16:5c:bc:d1:00:63:
                    b1:54:03:d5:15:b5:36:cd:dc:64:4a:fd:49:8b:36:
                    08:e9:af:4e:d6:7f:8f:1b:bc:7d:f6:1d:e6:dc:67:
                    8f:fc:f4:e9:1d:6b:b7:f2:09:82:87:2a:b6:1f:d2:
                    05:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:66:E2:1D:CA:1C:C9:0E:82:96:CF:9E:E2:F7:9B:99:D7:A7:F0:C0
            X509v3 Authority Key Identifier:
                keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233332e302f32342d3234203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:52:a2:44:a8:c5:ef:e9:1b:88:45:81:f6:cc:fd:b0:f0:f3:
         47:50:d0:0f:ae:6d:07:64:e5:97:8d:8f:9c:a0:da:fa:28:27:
         77:f5:e1:dc:36:bd:ba:a4:5c:a7:6e:d9:f5:9b:49:8a:61:cf:
         61:16:83:14:d1:8f:ef:2d:9c:78:aa:dd:ef:23:37:9a:83:ec:
         3d:fa:c6:3a:ad:93:e7:28:93:b0:75:38:54:3e:7c:60:5b:91:
         a7:ac:16:ed:cf:aa:29:9d:fc:d4:97:f2:f8:d1:63:1f:ee:48:
         f7:85:4f:1c:75:e2:60:b4:cb:6f:ca:c7:68:99:ed:d7:ea:ae:
         82:1d:71:22:0b:89:9e:8e:9d:1f:14:de:d6:f2:18:d1:6d:35:
         0d:4e:83:bb:c1:8e:92:28:e5:26:8c:d2:d1:e4:55:d0:97:c1:
         b8:dd:db:be:2b:7f:e2:8e:65:54:45:ef:4b:1f:d8:94:c9:8a:
         e8:26:28:73:7e:7d:f2:33:da:b9:78:e3:23:44:18:93:86:b1:
         6e:03:2b:e2:90:f3:1c:bb:49:49:89:42:72:73:e6:19:54:34:
         4b:55:36:a9:0c:f3:0b:00:4b:42:d4:ff:e9:4b:55:27:e0:e2:
         cc:e2:d6:7e:d2:da:d5:92:c9:6e:aa:0a:5c:75:ca:95:04:3a:
         90:44:e7:d6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNPUBxig2K1fdiN07wxOfXrgqfZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E1QTU4NjgwQTA1RDdDREE2OEFGN0MwOThBQTVFMUQx
REI2NTEzNjAeFw0yNjA1MDMwMjI1NTlaFw0yNzA1MDIwMjMwNTlaMDMxMTAvBgNV
BAMTKEI4NjZFMjFEQ0ExQ0M5MEU4Mjk2Q0Y5RUUyRjc5Qjk5RDdBN0YwQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVdpNr1DDVoj3tMPjzSoLooav
+WUqnBPSGEihwjKjWiHRUnpjWkXf7FZ5GtlNRIu0AJ9XBvrMZ7JXqoVQDojUbzAr
Z5x3e0+xlH4m+ZaEWM5TZSGMVxx8i8nRXzg0uuHv08W92wLedqv+haJwDO+nZ9Hs
LQAq/3OQ07dsTnUTX3Be5+IodOF2EIeah1HnslEWGgJAr3/5WuDP/QxsQWUc4ecA
7EIQv6y+eZ64ig8tj4KPQmHAF9BFF8XrCJiUL6sz1fSBhsjNk8wJdhZcvNEAY7FU
A9UVtTbN3GRK/UmLNgjpr07Wf48bvH32HebcZ4/89Okda7fyCYKHKrYf0gXtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUuGbiHcocyQ6Cls+e4vebmden8MAwHwYDVR0j
BBgwFoAUelpYaAoF182mivfAmKpeHR22UTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDhmMzliZDQtY2RhYy00MWNmLTg4NTgtZDc0MTBmNjRkMTU1LzAvN0E1QTU4Njgw
QTA1RDdDREE2OEFGN0MwOThBQTVFMUQxREI2NTEzNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QTVBNTg2ODBBMDVEN0NEQTY4QUY3QzA5OEFBNUUxRDFEQjY1
MTM2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ4ZjM5YmQ0LWNkYWMtNDFjZi04
ODU4LWQ3NDEwZjY0ZDE1NS8wLzMxMzAzMzJlMzIzMzJlMzIzMzMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcX6TANBgkqhkiG
9w0BAQsFAAOCAQEAc1KiRKjF7+kbiEWB9sz9sPDzR1DQD65tB2Tll42PnKDa+ign
d/Xh3Da9uqRcp27Z9ZtJimHPYRaDFNGP7y2ceKrd7yM3moPsPfrGOq2T5yiTsHU4
VD58YFuRp6wW7c+qKZ381Jfy+NFjH+5I94VPHHXiYLTLb8rHaJnt1+qugh1xIguJ
no6dHxTe1vIY0W01DU6Du8GOkijlJozS0eRV0JfBuN3bvit/4o5lVEXvSx/YlMmK
6CYoc3598jPauXjjI0QYk4axbgMr4pDzHLtJSYlCcnPmGVQ0S1U2qQzzCwBLQtT/
6UtVJ+DizOLWftLa1ZLJbqoKXHXKlQQ6kETn1g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:08:04 2026 by rpki-client