Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa
File:                     3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=
Subject key identifier:   ED:EF:73:E2:B2:E9:97:EE:67:04:DB:6A:FB:C7:FF:01:A9:15:7E:88
Certificate issuer:       /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67
Certificate serial:       13129826B881A15A4C13D21D2B2831EE36DEA2B9
Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa
Signing time:             Sun 03 May 2026 02:35:36 +0000
ROA not before:           Sun 03 May 2026 02:30:36 +0000
ROA not after:            Sun 02 May 2027 02:35:36 +0000
asID:                     138089
IP address blocks:        103.124.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl
                          rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:12:98:26:b8:81:a1:5a:4c:13:d2:1d:2b:28:31:ee:36:de:a2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67
        Validity
            Not Before: May  3 02:30:36 2026 GMT
            Not After : May  2 02:35:36 2027 GMT
        Subject: CN=EDEF73E2B2E997EE6704DB6AFBC7FF01A9157E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:e7:7c:e7:7a:11:2f:a4:03:fd:65:19:99:
                    08:d2:85:62:8d:29:47:a9:01:f0:d4:5f:a8:d1:33:
                    ff:fd:be:7a:80:5f:17:de:a4:57:f7:20:6e:10:0c:
                    8b:9d:50:8c:42:2a:fd:cc:aa:50:16:89:9c:5e:40:
                    7f:e2:a4:ac:89:af:f6:42:9f:3a:8a:b6:6c:0d:65:
                    c8:41:81:50:29:54:b1:af:b5:c3:ce:db:0b:4c:9a:
                    e8:e9:30:c8:c3:b3:a1:b2:49:57:60:29:25:35:a3:
                    df:7e:82:de:03:a7:02:23:07:30:e2:04:d7:d4:67:
                    8c:67:2f:3e:c5:98:bc:a3:b5:48:28:3b:fb:de:fc:
                    f9:1b:95:f7:1c:fa:94:a8:b9:77:3d:53:b6:0e:59:
                    71:92:7b:40:16:7c:64:5c:32:10:4a:fe:47:18:8a:
                    cf:c8:d4:8c:13:78:99:c6:d5:51:ad:29:82:c9:ed:
                    70:a7:93:5c:cb:c3:c4:18:7f:b4:0c:b9:71:45:32:
                    00:5d:a9:d0:77:8b:a9:87:b6:9b:97:d2:fb:bb:dc:
                    c1:3d:93:8d:e3:69:a2:50:da:3f:b5:d1:db:db:c4:
                    6d:e7:51:04:d7:44:f1:64:96:27:b6:61:09:be:da:
                    db:47:f9:5a:0c:f7:1d:d0:99:a6:5d:da:78:a2:0b:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EF:73:E2:B2:E9:97:EE:67:04:DB:6A:FB:C7:FF:01:A9:15:7E:88
            X509v3 Authority Key Identifier:
                keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:14:36:9a:d5:a6:3c:74:29:e8:ff:56:01:4f:86:f7:fc:a1:
         0a:91:22:7e:51:83:43:c8:38:76:21:3d:9e:36:c6:c7:02:d0:
         5f:1b:48:21:5f:04:de:94:e5:56:47:01:53:d4:fd:70:2a:a6:
         ee:f9:5c:06:b2:51:0b:9f:c4:75:ed:56:2d:ff:57:a9:b4:32:
         09:08:28:87:6a:4e:73:17:5d:9b:a7:08:fe:73:93:15:a5:38:
         b4:c7:0e:40:17:cf:b0:b6:f9:2d:6b:36:71:af:ea:0d:84:03:
         96:12:50:c4:0d:b9:7a:e9:9d:bd:cd:16:b4:3c:d5:9c:96:c6:
         77:09:b3:c5:9d:a7:e2:7f:53:2b:f3:91:7c:3c:20:2e:bf:06:
         d3:b0:4c:ef:24:e3:42:51:97:c5:61:7a:ec:18:e7:3e:31:04:
         a9:5f:fd:a4:9b:d0:e3:36:fd:55:6b:b4:a3:df:50:79:ae:b5:
         fc:b8:b9:f0:f8:0f:3b:87:5d:cc:b9:4e:77:93:55:02:78:c1:
         70:50:84:a5:0d:4c:4b:04:ed:9f:36:73:ff:b1:4d:de:34:ad:
         62:f7:4a:e2:87:4e:da:09:67:72:4c:30:62:6e:7c:48:01:48:
         35:8d:8e:3d:19:95:5b:0f:6e:07:8f:d4:a9:cd:34:27:07:a5:
         42:7c:88:06
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUExKYJriBoVpME9IdKygx7jbeorkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC
NDQ4NkU2NzAeFw0yNjA1MDMwMjMwMzZaFw0yNzA1MDIwMjM1MzZaMDMxMTAvBgNV
BAMTKEVERUY3M0UyQjJFOTk3RUU2NzA0REI2QUZCQzdGRjAxQTkxNTdFODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2X+d853oRL6QD/WUZmQjShWKN
KUepAfDUX6jRM//9vnqAXxfepFf3IG4QDIudUIxCKv3MqlAWiZxeQH/ipKyJr/ZC
nzqKtmwNZchBgVApVLGvtcPO2wtMmujpMMjDs6GySVdgKSU1o99+gt4DpwIjBzDi
BNfUZ4xnLz7FmLyjtUgoO/ve/Pkblfcc+pSouXc9U7YOWXGSe0AWfGRcMhBK/kcY
is/I1IwTeJnG1VGtKYLJ7XCnk1zLw8QYf7QMuXFFMgBdqdB3i6mHtpuX0vu73ME9
k43jaaJQ2j+10dvbxG3nUQTXRPFklie2YQm+2ttH+VoM9x3QmaZd2niiCxHpAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU7e9z4rLpl+5nBNtq+8f/AakVfogwHwYDVR0j
BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy
QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2
RTY3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04
OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfIswDQYJ
KoZIhvcNAQELBQADggEBANMUNprVpjx0Kej/VgFPhvf8oQqRIn5Rg0PIOHYhPZ42
xscC0F8bSCFfBN6U5VZHAVPU/XAqpu75XAayUQufxHXtVi3/V6m0MgkIKIdqTnMX
XZunCP5zkxWlOLTHDkAXz7C2+S1rNnGv6g2EA5YSUMQNuXrpnb3NFrQ81ZyWxncJ
s8Wdp+J/UyvzkXw8IC6/BtOwTO8k40JRl8VheuwY5z4xBKlf/aSb0OM2/VVrtKPf
UHmutfy4ufD4DzuHXcy5TneTVQJ4wXBQhKUNTEsE7Z82c/+xTd40rWL3SuKHTtoJ
Z3JMMGJufEgBSDWNjj0ZlVsPbgeP1KnNNCcHpUJ8iAY=
-----END CERTIFICATE-----
Generated at Wed May 13 00:45:02 2026 by rpki-client