Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa
File:                     3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (raw, json)
Hash identifier:          GHzYb3rjVTEQVdIvZj3KeXXe6U5QglqPAin2lkUZXo8=
Subject key identifier:   C3:D2:1C:10:7E:1D:A9:EF:4C:3C:AD:16:FD:C7:62:E6:C2:BC:40:2F
Certificate issuer:       /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
Certificate serial:       7029ABEF855B9811EDBD4C7E7A471E49005BC9E2
Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa
Signing time:             Sun 03 May 2026 02:32:45 +0000
ROA not before:           Sun 03 May 2026 02:27:45 +0000
ROA not after:            Sun 02 May 2027 02:32:45 +0000
asID:                     137343
IP address blocks:        103.113.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl
                          rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:29:ab:ef:85:5b:98:11:ed:bd:4c:7e:7a:47:1e:49:00:5b:c9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
        Validity
            Not Before: May  3 02:27:45 2026 GMT
            Not After : May  2 02:32:45 2027 GMT
        Subject: CN=C3D21C107E1DA9EF4C3CAD16FDC762E6C2BC402F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e2:24:28:70:b0:8b:ef:f0:44:ba:d4:ff:f8:
                    88:66:ac:31:cc:67:24:9e:cb:a2:35:82:e0:68:eb:
                    15:28:bb:ac:52:26:00:91:65:9c:2d:bc:5e:02:9f:
                    f0:73:6c:9c:72:19:64:01:88:a7:98:ef:76:8a:5e:
                    b6:fe:27:86:3d:05:0f:9b:d5:19:f4:14:44:76:0e:
                    83:b0:3a:7c:94:08:fe:73:b3:47:69:23:66:50:90:
                    70:04:93:27:ef:b6:33:81:c9:61:bc:f8:87:6a:11:
                    6a:62:b5:a1:75:a3:7d:99:dc:69:52:8c:1c:78:68:
                    2e:79:1d:65:0e:78:ca:93:c4:b8:01:52:ff:90:fc:
                    c4:46:7b:d0:a4:15:e5:06:67:b1:93:ba:bc:4c:e7:
                    0b:a4:09:d4:e5:53:28:3a:37:fd:06:79:0b:4e:79:
                    0e:d1:50:96:c5:e9:50:b7:8b:65:d0:99:f0:eb:37:
                    91:1e:43:02:24:63:6b:a9:12:80:e1:49:84:b2:a5:
                    03:ec:7f:52:a1:a1:e0:d5:88:67:5e:66:4d:08:af:
                    4d:1a:28:21:92:8a:4f:d6:c9:f4:e5:ce:d9:41:31:
                    54:4e:3c:81:35:d5:11:31:4a:a8:b8:8e:f3:e6:e5:
                    cb:31:05:93:4d:c1:48:74:1c:12:12:82:23:00:16:
                    64:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D2:1C:10:7E:1D:A9:EF:4C:3C:AD:16:FD:C7:62:E6:C2:BC:40:2F
            X509v3 Authority Key Identifier:
                keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:24:a4:ed:9a:c5:07:6a:f5:5b:9e:41:08:b7:40:5c:a0:
         e8:32:1c:f2:66:b7:c9:2e:d5:bd:ce:99:81:3f:97:2c:79:18:
         ff:e0:40:f2:82:01:3c:83:4e:14:dd:3b:5c:59:eb:67:31:21:
         31:6e:05:ed:2d:72:93:4c:7a:3b:c1:53:ce:3c:45:ab:0a:06:
         8d:cb:bb:3e:b7:da:8e:2c:1d:1c:e9:9e:6b:87:b6:0a:d9:f7:
         0c:23:0f:df:c1:2b:a2:2d:e9:b6:a2:3e:c0:9f:cc:08:f5:a9:
         05:39:b4:d5:9f:7b:80:28:80:eb:33:96:94:1e:0e:23:83:83:
         03:63:22:20:7c:f5:ea:9a:36:a3:34:f3:24:38:72:23:2d:75:
         b4:58:65:a8:cf:c4:d8:90:f1:a5:27:83:db:ef:b1:7c:10:87:
         e0:33:d6:5c:e5:39:d8:39:db:ee:e0:a6:7a:d2:36:8e:0d:c9:
         b5:e0:d3:02:21:b3:8f:7b:30:6e:81:b0:4b:d0:9a:cd:c4:0d:
         82:50:9c:51:b3:c6:a1:c9:79:1c:3a:6e:82:d8:1f:ee:a5:91:
         d4:86:0e:7b:6f:b2:83:8a:e5:22:d5:d6:92:16:ae:4f:08:ed:
         f4:50:a5:4e:2d:7e:fe:72:2e:55:a8:f9:61:68:21:c3:cd:7d:
         b4:96:a9:36
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUcCmr74VbmBHtvUx+ekceSQBbyeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBF
NkE3NTlGNTAeFw0yNjA1MDMwMjI3NDVaFw0yNzA1MDIwMjMyNDVaMDMxMTAvBgNV
BAMTKEMzRDIxQzEwN0UxREE5RUY0QzNDQUQxNkZEQzc2MkU2QzJCQzQwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD64iQocLCL7/BEutT/+IhmrDHM
ZySey6I1guBo6xUou6xSJgCRZZwtvF4Cn/BzbJxyGWQBiKeY73aKXrb+J4Y9BQ+b
1Rn0FER2DoOwOnyUCP5zs0dpI2ZQkHAEkyfvtjOByWG8+IdqEWpitaF1o32Z3GlS
jBx4aC55HWUOeMqTxLgBUv+Q/MRGe9CkFeUGZ7GTurxM5wukCdTlUyg6N/0GeQtO
eQ7RUJbF6VC3i2XQmfDrN5EeQwIkY2upEoDhSYSypQPsf1KhoeDViGdeZk0Ir00a
KCGSik/WyfTlztlBMVROPIE11RExSqi4jvPm5csxBZNNwUh0HBISgiMAFmRrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUw9IcEH4dqe9MPK0W/cdi5sK8QC8wHwYDVR0j
BBgwFoAUN8w6GowW+jDSbSE2SVJjsOanWfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTBkMDA3MTgtNTIxMC00NDM4LWI2NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4
QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBFNkE3NTlGNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zN0NDM0ExQThDMTZGQTMwRDI2RDIxMzY0OTUyNjNCMEU2QTc1
OUY1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUwZDAwNzE4LTUyMTAtNDQzOC1i
NjRkLTYyZWMxZjNlYmNkMC8wLzMxMzAzMzJlMzEzMTMzMmUzMTMyMzQyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzczMzM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJncXwwDQYJ
KoZIhvcNAQELBQADggEBAAuSJKTtmsUHavVbnkEIt0BcoOgyHPJmt8ku1b3OmYE/
lyx5GP/gQPKCATyDThTdO1xZ62cxITFuBe0tcpNMejvBU848RasKBo3Luz632o4s
HRzpnmuHtgrZ9wwjD9/BK6It6baiPsCfzAj1qQU5tNWfe4AogOszlpQeDiODgwNj
IiB89eqaNqM08yQ4ciMtdbRYZajPxNiQ8aUng9vvsXwQh+Az1lzlOdg52+7gpnrS
No4NybXg0wIhs497MG6BsEvQms3EDYJQnFGzxqHJeRw6boLYH+6lkdSGDntvsoOK
5SLV1pIWrk8I7fRQpU4tfv5yLlWo+WFoIcPNfbSWqTY=
-----END CERTIFICATE-----
Generated at Wed May 13 05:51:12 2026 by rpki-client