Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa
File:                     3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (raw, json)
Hash identifier:          CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=
Subject key identifier:   8C:87:CA:70:55:E3:53:A4:4D:93:41:50:88:E2:1C:7F:68:1E:45:3C
Certificate issuer:       /CN=3C38CDC785C4C8B22E60377271E55409582CCE11
Certificate serial:       58A1EB4AB747C722C0C962B8E939BCE31E476A48
Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa
Signing time:             Sun 03 May 2026 02:36:49 +0000
ROA not before:           Sun 03 May 2026 02:31:49 +0000
ROA not after:            Sun 02 May 2027 02:36:49 +0000
asID:                     138143
IP address blocks:        103.134.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl
                          rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a1:eb:4a:b7:47:c7:22:c0:c9:62:b8:e9:39:bc:e3:1e:47:6a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11
        Validity
            Not Before: May  3 02:31:49 2026 GMT
            Not After : May  2 02:36:49 2027 GMT
        Subject: CN=8C87CA7055E353A44D93415088E21C7F681E453C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:9b:3c:70:d0:23:6e:5a:45:8f:b6:51:4e:
                    bd:54:4b:bf:6c:3f:99:bc:86:55:8b:34:3e:32:e0:
                    9f:20:46:fd:4e:84:ff:cc:4c:89:f5:55:e5:d5:2f:
                    15:5d:a5:04:c7:02:75:a2:42:73:29:38:16:ad:68:
                    41:e1:79:a4:00:f1:18:6b:51:44:ef:2d:13:58:58:
                    9f:1a:58:86:a4:78:79:69:22:0f:01:ef:ec:ff:e9:
                    4e:2e:1c:30:ae:4d:b8:ce:19:da:be:11:fe:6c:23:
                    13:4d:cb:c8:6c:b9:bb:e3:f8:a7:fe:61:0a:7a:66:
                    d3:37:cd:60:7f:32:25:95:72:80:60:87:7e:e0:f4:
                    4f:d2:ce:10:42:7f:33:87:c8:05:6d:9c:64:9c:31:
                    7c:e1:f4:66:c8:07:15:2a:ba:cf:7f:c8:f8:0d:bf:
                    d2:41:df:5c:e7:e5:71:34:e9:13:84:48:53:2c:4b:
                    f5:3d:13:ad:6c:50:d2:86:44:4b:aa:26:23:2d:02:
                    ff:b3:5f:05:fa:82:88:d3:1e:76:4e:d4:ce:02:04:
                    13:7d:65:fd:9b:bb:b7:94:30:0d:c1:dc:a2:67:bb:
                    be:78:b1:af:36:9e:45:af:bb:01:01:68:00:ef:6e:
                    3c:a0:77:43:e1:49:1d:0f:4a:43:f2:ad:68:3e:c4:
                    2b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:87:CA:70:55:E3:53:A4:4D:93:41:50:88:E2:1C:7F:68:1E:45:3C
            X509v3 Authority Key Identifier:
                keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e2:fe:ed:5c:41:f8:e2:96:3c:be:c0:1d:7c:0d:c4:98:57:
         53:f9:59:d8:e2:d0:20:80:7b:17:a2:1d:6a:d6:c4:5d:fb:71:
         13:8d:62:b5:b6:19:d5:bd:fd:fb:88:c2:41:4b:e1:5d:3d:3a:
         2b:1e:17:50:13:35:69:04:07:0a:01:a1:c4:15:91:dd:fe:e0:
         6d:af:44:f1:39:fe:09:fc:70:d3:be:8e:c7:0a:bf:b7:15:26:
         70:56:15:76:a6:35:bd:12:81:ad:13:4f:8b:bb:21:06:af:eb:
         59:f4:25:da:d5:44:e0:3b:47:da:79:94:f3:f7:52:42:42:a8:
         0f:5f:e5:c9:60:3e:0d:e7:ae:96:c2:52:6d:66:a7:3a:c4:14:
         87:ff:79:ff:9b:a3:bb:95:9d:e6:2b:f5:90:cc:12:41:a5:7f:
         33:fa:6a:d8:86:74:3f:13:7f:5e:89:53:e0:94:34:0a:a4:3d:
         9c:a9:f4:fa:0b:51:2f:25:01:c9:3f:6c:60:05:e4:59:d7:61:
         ae:3c:a8:5b:8a:14:d7:21:ef:ff:c3:95:e8:3a:ed:42:8b:7f:
         50:da:b9:7a:6e:36:f4:f5:7a:0e:bb:0e:0c:51:2a:78:80:a2:
         0a:d0:d9:55:8f:8c:07:32:2f:12:75:dd:e0:5c:98:f4:9a:f2:
         af:42:d3:54
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWKHrSrdHxyLAyWK46Tm84x5HakgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1
ODJDQ0UxMTAeFw0yNjA1MDMwMjMxNDlaFw0yNzA1MDIwMjM2NDlaMDMxMTAvBgNV
BAMTKDhDODdDQTcwNTVFMzUzQTQ0RDkzNDE1MDg4RTIxQzdGNjgxRTQ1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zps8cNAjblpFj7ZRTr1US79s
P5m8hlWLND4y4J8gRv1OhP/MTIn1VeXVLxVdpQTHAnWiQnMpOBataEHheaQA8Rhr
UUTvLRNYWJ8aWIakeHlpIg8B7+z/6U4uHDCuTbjOGdq+Ef5sIxNNy8hsubvj+Kf+
YQp6ZtM3zWB/MiWVcoBgh37g9E/SzhBCfzOHyAVtnGScMXzh9GbIBxUqus9/yPgN
v9JB31zn5XE06ROESFMsS/U9E61sUNKGREuqJiMtAv+zXwX6gojTHnZO1M4CBBN9
Zf2bu7eUMA3B3KJnu754sa82nkWvuwEBaADvbjygd0PhSR0PSkPyrWg+xCtRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUjIfKcFXjU6RNk0FQiOIcf2geRTwwHwYDVR0j
BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4
NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND
RTExLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkNzk0ZDM2LTY5ZjgtNDQwNi1i
ZjlmLTEyMmRkZDE3ZjQ1MC8wLzMxMzAzMzJlMzEzMzM0MmUzNzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4ZPMA0GCSqG
SIb3DQEBCwUAA4IBAQCH4v7tXEH44pY8vsAdfA3EmFdT+VnY4tAggHsXoh1q1sRd
+3ETjWK1thnVvf37iMJBS+FdPTorHhdQEzVpBAcKAaHEFZHd/uBtr0TxOf4J/HDT
vo7HCr+3FSZwVhV2pjW9EoGtE0+LuyEGr+tZ9CXa1UTgO0faeZTz91JCQqgPX+XJ
YD4N566WwlJtZqc6xBSH/3n/m6O7lZ3mK/WQzBJBpX8z+mrYhnQ/E39eiVPglDQK
pD2cqfT6C1EvJQHJP2xgBeRZ12GuPKhbihTXIe//w5XoOu1Ci39Q2rl6bjb09XoO
uw4MUSp4gKIK0NlVj4wHMi8Sdd3gXJj0mvKvQtNU
-----END CERTIFICATE-----
Generated at Wed May 13 04:26:56 2026 by rpki-client