Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa
File:                     3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (raw, json)
Hash identifier:          DkGliUWM5XR773EPw61tub5dc+L/Xx/dukDzVXnnxcs=
Subject key identifier:   FA:40:B5:6E:39:EA:CD:06:12:42:7E:6A:6C:C4:06:67:D5:81:3B:5E
Certificate issuer:       /CN=E037136E2AAC9F6693BBACBC3C65801649522C3C
Certificate serial:       714F6C337C7DB6BE6A886B37FBA7A970BDD0373A
Authority key identifier: E0:37:13:6E:2A:AC:9F:66:93:BB:AC:BC:3C:65:80:16:49:52:2C:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa
Signing time:             Sun 03 May 2026 02:34:41 +0000
ROA not before:           Sun 03 May 2026 02:29:41 +0000
ROA not after:            Sun 02 May 2027 02:34:41 +0000
asID:                     215727
IP address blocks:        103.131.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.crl
                          rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4f:6c:33:7c:7d:b6:be:6a:88:6b:37:fb:a7:a9:70:bd:d0:37:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E037136E2AAC9F6693BBACBC3C65801649522C3C
        Validity
            Not Before: May  3 02:29:41 2026 GMT
            Not After : May  2 02:34:41 2027 GMT
        Subject: CN=FA40B56E39EACD0612427E6A6CC40667D5813B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:7f:39:e3:a7:d2:5a:b4:d8:0e:8d:3c:c7:
                    84:55:62:c8:1d:22:9e:3d:9e:e4:1e:94:cc:22:3d:
                    26:a6:c2:3b:1b:7c:68:26:29:f5:fe:18:dd:a7:1f:
                    ef:c1:a7:f4:ed:cf:e3:aa:ec:91:6a:fd:2c:8a:c9:
                    ba:25:9f:93:c8:39:ba:9f:16:90:f3:ab:38:1b:8a:
                    89:41:1f:a6:63:5f:74:14:b0:59:20:3e:b9:5d:eb:
                    cc:fa:fa:3c:5c:c7:32:74:d0:b1:ba:6a:5e:77:d9:
                    5f:d7:94:42:bd:f7:9a:c6:00:90:79:b2:bc:d5:3d:
                    ad:2d:64:c2:bc:7c:e7:34:4c:69:40:c1:b9:f2:83:
                    f6:c0:75:ac:c7:88:cb:10:62:16:b8:2d:76:c2:5c:
                    4f:de:dc:20:04:1d:c5:ff:b0:26:ff:b5:6a:10:a2:
                    d7:e7:12:39:5b:a3:b4:72:38:02:6a:8b:77:4e:71:
                    e1:31:98:ab:28:7f:d0:e1:66:79:3a:62:8a:d2:a1:
                    6c:a0:e3:28:48:a4:c7:da:fc:53:42:00:e2:38:81:
                    57:56:9c:e5:d5:e3:00:d1:9e:4d:cc:cb:bd:17:bd:
                    1a:43:c8:8b:8e:d4:6f:17:98:ea:8a:c1:0f:0b:14:
                    20:1b:57:2a:7f:58:cf:22:8a:3e:d3:63:d8:4e:77:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:40:B5:6E:39:EA:CD:06:12:42:7E:6A:6C:C4:06:67:D5:81:3B:5E
            X509v3 Authority Key Identifier:
                keyid:E0:37:13:6E:2A:AC:9F:66:93:BB:AC:BC:3C:65:80:16:49:52:2C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:34:94:39:3b:fe:fd:7d:14:c3:2c:7e:a1:b4:26:d9:fc:28:
         14:1a:ec:b9:0c:f0:db:2a:1f:8e:af:0f:21:f8:e2:60:cc:d4:
         11:87:ea:91:83:aa:30:31:dd:26:70:e7:e4:02:06:dd:34:af:
         b8:4a:ac:6f:88:74:0f:53:6e:a5:8c:68:d3:90:97:37:03:1e:
         5b:9a:ac:5f:85:25:78:d7:2f:21:42:b8:9e:b2:3e:54:99:e9:
         01:2d:b4:d8:92:6a:ad:ac:45:60:67:a7:94:1f:79:ea:8d:89:
         3a:ba:60:fe:a5:23:6d:fd:90:28:66:bb:ba:33:6b:41:90:47:
         a3:26:16:d3:00:8c:11:7b:2f:1e:5e:72:2f:fc:e0:3a:8b:de:
         4b:bc:14:b6:a5:5b:ff:4f:cf:b9:e4:68:d1:0f:bc:31:d7:46:
         19:95:ee:df:7f:9e:a1:70:f3:a8:a7:45:c2:7d:cd:81:e8:d4:
         27:07:52:2e:c2:d4:55:f0:2b:96:76:a1:e3:a9:ae:b6:54:d7:
         2b:b1:54:db:f4:4b:b8:7e:2d:c9:ab:d4:c1:50:d6:24:04:9d:
         d7:b8:2c:d9:9c:0e:ac:2c:d0:2c:b7:21:dd:2b:a5:b5:f5:c3:
         b5:a0:78:f0:bb:c9:b1:ad:e4:02:4b:e5:e1:1b:71:e2:87:b3:
         18:f0:3e:be
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcU9sM3x9tr5qiGs3+6epcL3QNzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAzNzEzNkUyQUFDOUY2NjkzQkJBQ0JDM0M2NTgwMTY0
OTUyMkMzQzAeFw0yNjA1MDMwMjI5NDFaFw0yNzA1MDIwMjM0NDFaMDMxMTAvBgNV
BAMTKEZBNDBCNTZFMzlFQUNEMDYxMjQyN0U2QTZDQzQwNjY3RDU4MTNCNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvn8546fSWrTYDo08x4RVYsgd
Ip49nuQelMwiPSamwjsbfGgmKfX+GN2nH+/Bp/Ttz+Oq7JFq/SyKyboln5PIObqf
FpDzqzgbiolBH6ZjX3QUsFkgPrld68z6+jxcxzJ00LG6al532V/XlEK995rGAJB5
srzVPa0tZMK8fOc0TGlAwbnyg/bAdazHiMsQYha4LXbCXE/e3CAEHcX/sCb/tWoQ
otfnEjlbo7RyOAJqi3dOceExmKsof9DhZnk6YorSoWyg4yhIpMfa/FNCAOI4gVdW
nOXV4wDRnk3My70XvRpDyIuO1G8XmOqKwQ8LFCAbVyp/WM8iij7TY9hOd7JnAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+kC1bjnqzQYSQn5qbMQGZ9WBO14wHwYDVR0j
BBgwFoAU4DcTbiqsn2aTu6y8PGWAFklSLDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTdjZDFkMmQtNzM2NC00ODFiLTk3OGUtMGE4NTRhOWNmZjRmLzAvRTAzNzEzNkUy
QUFDOUY2NjkzQkJBQ0JDM0M2NTgwMTY0OTUyMkMzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMDM3MTM2RTJBQUM5RjY2OTNCQkFDQkMzQzY1ODAxNjQ5NTIy
QzNDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3Y2QxZDJkLTczNjQtNDgxYi05
NzhlLTBhODU0YTljZmY0Zi8wLzMxMzAzMzJlMzEzMzMxMmUzMjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMTM1MzczMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4McMA0GCSqG
SIb3DQEBCwUAA4IBAQCQNJQ5O/79fRTDLH6htCbZ/CgUGuy5DPDbKh+Orw8h+OJg
zNQRh+qRg6owMd0mcOfkAgbdNK+4SqxviHQPU26ljGjTkJc3Ax5bmqxfhSV41y8h
Qriesj5UmekBLbTYkmqtrEVgZ6eUH3nqjYk6umD+pSNt/ZAoZru6M2tBkEejJhbT
AIwRey8eXnIv/OA6i95LvBS2pVv/T8+55GjRD7wx10YZle7ff56hcPOop0XCfc2B
6NQnB1IuwtRV8CuWdqHjqa62VNcrsVTb9Eu4fi3Jq9TBUNYkBJ3XuCzZnA6sLNAs
tyHdK6W19cO1oHjwu8mxreQCS+XhG3Hih7MY8D6+
-----END CERTIFICATE-----
Generated at Wed May 13 02:59:23 2026 by rpki-client