Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa
File:                     3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=
Subject key identifier:   5D:F9:2E:47:68:FD:B4:FC:CA:AA:91:6A:BF:5D:94:CA:0B:73:E0:43
Certificate issuer:       /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A
Certificate serial:       2DF25B4890372E0021FCA194E0F302DAF3ACDDE7
Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 02:36:14 +0000
ROA not before:           Sun 03 May 2026 02:31:14 +0000
ROA not after:            Sun 02 May 2027 02:36:14 +0000
asID:                     154410
IP address blocks:        103.174.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl
                          rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f2:5b:48:90:37:2e:00:21:fc:a1:94:e0:f3:02:da:f3:ac:dd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A
        Validity
            Not Before: May  3 02:31:14 2026 GMT
            Not After : May  2 02:36:14 2027 GMT
        Subject: CN=5DF92E4768FDB4FCCAAA916ABF5D94CA0B73E043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f0:c9:94:0a:dd:9f:65:e8:27:62:59:7f:bb:
                    2b:d2:cd:68:92:e1:1c:22:6f:6f:93:96:df:48:b9:
                    9b:2b:72:7d:55:95:6b:3e:a4:5b:a1:81:7b:f4:81:
                    a8:97:40:20:c3:4b:09:a8:5e:1f:0c:f7:79:50:d9:
                    3f:c5:14:0f:7e:a1:a8:94:b3:a3:dd:6e:05:6e:f1:
                    81:a9:9b:c1:4a:72:98:53:6b:ff:42:d1:cb:c9:b9:
                    e5:86:93:c1:22:bc:ac:02:80:70:1b:da:17:59:8c:
                    2c:a0:29:3a:fa:4d:f9:84:bf:c8:75:34:0c:d2:cc:
                    b5:9f:5f:f3:91:15:eb:a3:aa:97:f7:00:62:6a:d3:
                    20:9c:00:10:00:5f:6d:24:71:98:55:6c:ee:3b:21:
                    55:da:65:0d:00:96:58:05:fe:d3:f6:27:b3:4d:8d:
                    8a:87:d7:07:2b:30:28:54:d8:ac:42:25:b1:54:ba:
                    43:60:9d:58:78:c2:b4:bf:fe:b8:11:e7:8f:36:04:
                    8a:ca:fb:22:9b:4e:e3:2d:ac:a9:f4:85:88:d4:21:
                    38:15:d2:60:00:8f:fb:0c:5e:23:cc:e6:53:86:62:
                    f9:7f:31:e8:ed:52:a5:ca:9e:53:c9:a7:f1:d6:82:
                    c3:50:8c:e7:a4:ac:40:da:e6:21:77:bc:06:73:80:
                    86:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F9:2E:47:68:FD:B4:FC:CA:AA:91:6A:BF:5D:94:CA:0B:73:E0:43
            X509v3 Authority Key Identifier:
                keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:da:de:99:af:5a:ce:1a:8f:af:b3:a5:c7:c7:4d:74:37:
         13:89:d6:46:47:30:d5:34:9e:53:cb:74:29:45:27:60:92:82:
         4d:32:a9:d6:df:48:56:c4:c7:5b:7f:27:5c:e1:27:b0:10:59:
         cc:d3:78:8d:e1:f7:0f:79:8f:3f:f5:66:a1:66:15:4e:12:b4:
         08:2b:22:bf:0b:27:07:0d:66:bc:34:03:98:42:5f:25:fa:5f:
         71:4a:f7:df:2f:ce:d7:65:ca:fa:e7:bf:67:ce:f7:56:c8:45:
         2a:90:65:29:e0:df:af:b0:08:ea:9b:7d:62:00:2a:5f:1b:86:
         96:07:1a:31:44:e6:95:e0:dd:b9:21:7d:8c:3b:54:09:ad:10:
         a9:0a:99:bb:65:3c:a3:2c:4e:36:13:a5:cb:7b:4b:17:2e:5b:
         62:ac:a0:1b:1a:98:6e:f1:80:2b:d1:dd:50:72:55:56:bc:d0:
         92:3e:f7:5f:2d:fd:de:5d:0b:c0:65:35:02:1c:61:82:ca:7c:
         51:3b:21:37:26:09:26:20:81:a3:bb:32:00:6e:c0:9f:1a:6a:
         60:87:5e:2d:6f:c8:e6:8d:f1:ef:ea:c3:20:ae:8f:c4:44:9f:
         26:9e:2d:77:b7:6c:80:9f:7a:dd:6d:63:7c:5a:cf:ec:41:ce:
         94:3d:7f:15
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIULfJbSJA3LgAh/KGU4PMC2vOs3ecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw
N0NCMDAxQTAeFw0yNjA1MDMwMjMxMTRaFw0yNzA1MDIwMjM2MTRaMDMxMTAvBgNV
BAMTKDVERjkyRTQ3NjhGREI0RkNDQUFBOTE2QUJGNUQ5NENBMEI3M0UwNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT8MmUCt2fZegnYll/uyvSzWiS
4Rwib2+Tlt9IuZsrcn1VlWs+pFuhgXv0gaiXQCDDSwmoXh8M93lQ2T/FFA9+oaiU
s6PdbgVu8YGpm8FKcphTa/9C0cvJueWGk8EivKwCgHAb2hdZjCygKTr6TfmEv8h1
NAzSzLWfX/ORFeujqpf3AGJq0yCcABAAX20kcZhVbO47IVXaZQ0AllgF/tP2J7NN
jYqH1wcrMChU2KxCJbFUukNgnVh4wrS//rgR5482BIrK+yKbTuMtrKn0hYjUITgV
0mAAj/sMXiPM5lOGYvl/MejtUqXKnlPJp/HWgsNQjOekrEDa5iF3vAZzgIaPAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUXfkuR2j9tPzKqpFqv12Uygtz4EMwHwYDVR0j
BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2
NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw
MDFBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMjg1MjkxLWNlOTItNDE0NC05
YzE4LTllOGMxOTFkZGVjNi8wLzMxMzAzMzJlMzEzNzM0MmUzMTM4MzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzQzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrrQwDQYJ
KoZIhvcNAQELBQADggEBACwA2t6Zr1rOGo+vs6XHx010NxOJ1kZHMNU0nlPLdClF
J2CSgk0yqdbfSFbEx1t/J1zhJ7AQWczTeI3h9w95jz/1ZqFmFU4StAgrIr8LJwcN
Zrw0A5hCXyX6X3FK998vztdlyvrnv2fO91bIRSqQZSng36+wCOqbfWIAKl8bhpYH
GjFE5pXg3bkhfYw7VAmtEKkKmbtlPKMsTjYTpct7SxcuW2KsoBsamG7xgCvR3VBy
VVa80JI+918t/d5dC8BlNQIcYYLKfFE7ITcmCSYggaO7MgBuwJ8aamCHXi1vyOaN
8e/qwyCuj8REnyaeLXe3bICfet1tY3xaz+xBzpQ9fxU=
-----END CERTIFICATE-----
Generated at Wed May 13 10:04:03 2026 by rpki-client