Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa
File:                     3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (raw, json)
Hash identifier:          Trw+y/sXFJtkefRvcCLMU2FAEepNpbCrLf/kUCXfHQE=
Subject key identifier:   DD:00:14:56:85:FA:6F:44:D3:6B:0D:21:B7:3C:9D:F3:4C:37:A0:E0
Certificate issuer:       /CN=46932859C0D86F27F517A125185AE45763AEA7D7
Certificate serial:       56B70AA2BEFBD2854F66A7386F8BBD8F40FBADBB
Authority key identifier: 46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa
Signing time:             Sun 03 May 2026 02:32:16 +0000
ROA not before:           Sun 03 May 2026 02:27:16 +0000
ROA not after:            Sun 02 May 2027 02:32:16 +0000
asID:                     138127
IP address blocks:        103.132.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl
                          rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b7:0a:a2:be:fb:d2:85:4f:66:a7:38:6f:8b:bd:8f:40:fb:ad:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46932859C0D86F27F517A125185AE45763AEA7D7
        Validity
            Not Before: May  3 02:27:16 2026 GMT
            Not After : May  2 02:32:16 2027 GMT
        Subject: CN=DD00145685FA6F44D36B0D21B73C9DF34C37A0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:a7:f3:06:84:95:bc:df:4e:d2:b5:c4:f6:
                    5a:bc:50:3f:ec:8c:73:65:fd:54:94:02:ad:99:d3:
                    42:b5:91:db:b8:5a:5a:d3:87:43:f1:bf:81:3a:bf:
                    5e:e3:8d:f6:21:7c:18:8f:00:5a:dc:14:52:b7:56:
                    c9:de:32:39:c6:5e:09:e5:95:68:ca:cf:62:d5:92:
                    3c:af:f0:c0:64:45:4d:c6:af:46:bc:b3:27:1b:4f:
                    5c:0f:7f:5f:6b:ce:01:90:36:95:b7:b0:59:fe:28:
                    f2:f3:06:bb:52:e7:26:f0:7d:c4:af:c1:9f:a5:88:
                    1c:0a:d7:5a:ae:b4:c5:95:03:99:ab:c3:9b:cb:16:
                    f4:b6:75:d8:98:76:48:ac:45:4c:28:94:c2:f4:1b:
                    d6:13:57:1c:78:b6:b9:6d:ff:28:07:58:6c:92:6d:
                    69:b3:0c:ba:a9:14:a0:1c:d4:c6:2f:1d:ce:12:22:
                    95:35:df:5a:fc:ba:5d:67:42:dd:ec:02:ef:55:95:
                    43:c7:09:01:6c:de:28:22:a5:6b:93:20:18:49:4d:
                    9d:b4:b3:ce:de:2b:5b:e0:18:32:c4:39:5f:8d:11:
                    73:a4:04:62:b1:95:ed:83:83:41:80:cc:27:c4:84:
                    d7:14:ab:1c:70:ff:c2:f9:4b:54:02:7a:a3:9b:4e:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:00:14:56:85:FA:6F:44:D3:6B:0D:21:B7:3C:9D:F3:4C:37:A0:E0
            X509v3 Authority Key Identifier:
                keyid:46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:36:2c:f2:88:ca:af:38:28:56:95:4b:d5:e6:38:b3:b6:dc:
         63:16:0c:e2:65:6d:67:da:35:9b:20:da:65:be:5d:89:ea:e5:
         6f:8e:db:60:a1:53:b9:56:b9:8d:a9:ad:f1:2b:f1:38:83:5d:
         ce:a8:3c:f3:70:8b:46:a2:ce:bc:29:61:2b:9d:cb:bd:dd:31:
         d7:77:4f:a0:a1:84:06:95:af:52:e9:46:f3:f2:35:a7:a2:5f:
         6e:4b:f0:72:86:c4:36:ef:d3:e5:59:95:a7:ca:55:9e:07:26:
         d0:1e:5a:10:c2:b6:1b:ba:be:28:b7:c7:39:93:8f:3f:82:5c:
         f9:57:30:b5:46:e3:74:5c:d2:82:17:6c:89:cd:20:5e:43:fa:
         f7:8f:e5:9f:d2:0a:ed:8b:a6:77:54:a3:05:d1:d7:75:83:10:
         1b:42:84:b1:e9:bc:39:14:bc:93:78:26:47:cd:f2:09:2f:ef:
         d2:b4:2d:b2:45:66:ee:21:a2:25:22:c0:1e:34:0e:6f:84:3c:
         37:b6:3d:c9:20:0c:b6:9d:df:50:87:5e:a1:e3:09:0c:ca:ca:
         d3:70:e9:3e:c4:3d:5c:64:ee:2f:51:16:50:6d:6f:c6:b6:83:
         79:f5:cb:ea:58:df:54:0a:90:a4:28:a6:c3:a8:98:47:1d:11:
         eb:14:46:61
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVrcKor770oVPZqc4b4u9j0D7rbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY5MzI4NTlDMEQ4NkYyN0Y1MTdBMTI1MTg1QUU0NTc2
M0FFQTdENzAeFw0yNjA1MDMwMjI3MTZaFw0yNzA1MDIwMjMyMTZaMDMxMTAvBgNV
BAMTKEREMDAxNDU2ODVGQTZGNDREMzZCMEQyMUI3M0M5REYzNEMzN0EwRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qKfzBoSVvN9O0rXE9lq8UD/s
jHNl/VSUAq2Z00K1kdu4WlrTh0Pxv4E6v17jjfYhfBiPAFrcFFK3VsneMjnGXgnl
lWjKz2LVkjyv8MBkRU3Gr0a8sycbT1wPf19rzgGQNpW3sFn+KPLzBrtS5ybwfcSv
wZ+liBwK11qutMWVA5mrw5vLFvS2ddiYdkisRUwolML0G9YTVxx4trlt/ygHWGyS
bWmzDLqpFKAc1MYvHc4SIpU131r8ul1nQt3sAu9VlUPHCQFs3igipWuTIBhJTZ20
s87eK1vgGDLEOV+NEXOkBGKxle2Dg0GAzCfEhNcUqxxw/8L5S1QCeqObTkWJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU3QAUVoX6b0TTaw0htzyd80w3oOAwHwYDVR0j
BBgwFoAURpMoWcDYbyf1F6ElGFrkV2Oup9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGVkYzllNGYtODE4MC00MWQ2LWIwOGQtOGVlNWE4YTcwYTA1LzAvNDY5MzI4NTlD
MEQ4NkYyN0Y1MTdBMTI1MTg1QUU0NTc2M0FFQTdENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NjkzMjg1OUMwRDg2RjI3RjUxN0ExMjUxODVBRTQ1NzYzQUVB
N0Q3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRlZGM5ZTRmLTgxODAtNDFkNi1i
MDhkLThlZTVhOGE3MGEwNS8wLzMxMzAzMzJlMzEzMzMyMmUzMjMzMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnhOYwDQYJ
KoZIhvcNAQELBQADggEBAGY2LPKIyq84KFaVS9XmOLO23GMWDOJlbWfaNZsg2mW+
XYnq5W+O22ChU7lWuY2prfEr8TiDXc6oPPNwi0aizrwpYSudy73dMdd3T6ChhAaV
r1LpRvPyNaeiX25L8HKGxDbv0+VZlafKVZ4HJtAeWhDCthu6vii3xzmTjz+CXPlX
MLVG43Rc0oIXbInNIF5D+veP5Z/SCu2LpndUowXR13WDEBtChLHpvDkUvJN4JkfN
8gkv79K0LbJFZu4hoiUiwB40Dm+EPDe2PckgDLad31CHXqHjCQzKytNw6T7EPVxk
7i9RFlBtb8a2g3n1y+pY31QKkKQopsOomEcdEesURmE=
-----END CERTIFICATE-----
Generated at Wed May 13 03:58:43 2026 by rpki-client