Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa
File:                     3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=
Subject key identifier:   DD:85:21:9C:84:00:BD:F0:42:C6:3C:58:2A:AB:9C:4D:A3:98:5E:3D
Certificate issuer:       /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03
Certificate serial:       7B713CFE8EB4C112E28A08ECE568E5A8C11D2C76
Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 02:37:10 +0000
ROA not before:           Sun 03 May 2026 02:32:10 +0000
ROA not after:            Sun 02 May 2027 02:37:10 +0000
asID:                     45305
IP address blocks:        103.100.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl
                          rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:71:3c:fe:8e:b4:c1:12:e2:8a:08:ec:e5:68:e5:a8:c1:1d:2c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03
        Validity
            Not Before: May  3 02:32:10 2026 GMT
            Not After : May  2 02:37:10 2027 GMT
        Subject: CN=DD85219C8400BDF042C63C582AAB9C4DA3985E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:46:01:48:57:d6:73:20:27:53:f8:5d:b6:
                    30:3b:09:94:84:95:be:e8:1e:5b:fa:bb:d0:71:6b:
                    12:cb:b2:ab:01:f2:56:ec:d9:29:34:25:f0:f0:d5:
                    bb:48:94:9f:46:f0:0d:85:5b:6a:f0:7a:c2:af:a2:
                    38:d6:ce:50:93:c7:1b:92:5e:96:56:52:6f:f8:d0:
                    eb:02:3b:2a:2f:b3:d8:51:64:d1:8d:e5:e7:70:ee:
                    ac:8a:5a:5c:8f:aa:86:7d:35:6e:8b:5b:ef:38:82:
                    40:27:b9:8f:27:23:8a:cc:df:43:2c:4e:90:45:41:
                    61:d3:f7:a3:f9:b7:ec:b7:83:33:31:3a:cc:2c:ff:
                    cc:1c:56:53:b9:5f:69:17:6d:57:10:d1:a5:da:f1:
                    6f:13:93:2c:b1:18:65:c7:11:db:75:db:8a:b2:7d:
                    d3:c0:b0:81:a4:a7:fd:5a:9e:0b:16:12:a8:6b:bf:
                    c2:b7:98:13:94:b7:2e:d9:09:39:02:47:40:5d:36:
                    1d:a4:43:96:78:cc:75:58:bf:62:8a:47:87:d2:49:
                    da:24:22:28:b0:72:00:0f:fa:2c:f7:25:eb:09:02:
                    0c:81:d5:a3:c2:3e:82:26:cf:9e:54:8e:cf:32:c9:
                    3a:3a:5a:4e:03:a5:f1:6f:06:ae:fd:55:70:2e:1f:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:85:21:9C:84:00:BD:F0:42:C6:3C:58:2A:AB:9C:4D:A3:98:5E:3D
            X509v3 Authority Key Identifier:
                keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:17:0c:3c:11:01:ca:98:f0:73:ea:c9:5c:b5:02:0d:60:
         63:00:49:76:c6:b2:c4:06:b1:9b:45:95:3b:cd:7d:a5:c5:fa:
         70:70:81:2e:c2:e3:b6:16:5d:03:ad:ef:40:88:3b:e7:69:8b:
         e0:8f:3f:9c:bb:ba:32:5f:d7:b9:05:4d:52:b8:45:6d:eb:aa:
         a0:ee:45:f8:43:d8:8b:e1:a9:7c:1e:ac:63:99:db:1d:c2:bc:
         54:4b:be:18:28:bb:31:38:ab:22:2b:29:d0:b0:06:d1:04:9b:
         25:61:f7:57:fa:e2:49:69:03:6c:a5:2b:cc:bf:66:25:99:b9:
         87:45:b4:d2:9e:8d:e2:93:55:d2:5f:45:73:75:ed:e1:b2:26:
         37:c3:60:d1:f5:cf:78:96:b5:fd:4c:95:77:b4:93:56:31:2a:
         db:84:da:8f:22:17:6f:d4:17:43:68:fc:bc:12:15:e8:6d:63:
         33:0e:25:68:e6:f3:5a:83:50:da:dd:de:90:71:99:1d:d1:f1:
         11:00:7b:a7:96:a6:0f:c1:4a:86:0c:27:ea:8d:24:cd:65:6e:
         13:f8:9e:e1:61:f6:5d:39:71:ca:ec:8a:b4:1a:3c:f3:fe:88:
         36:3d:0d:4e:99:cf:33:f0:a6:ed:0b:4e:06:93:d7:c8:03:8c:
         ce:a2:75:60
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUe3E8/o60wRLiigjs5WjlqMEdLHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3
MzkzNkIwMzAeFw0yNjA1MDMwMjMyMTBaFw0yNzA1MDIwMjM3MTBaMDMxMTAvBgNV
BAMTKEREODUyMTlDODQwMEJERjA0MkM2M0M1ODJBQUI5QzREQTM5ODVFM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDD0YBSFfWcyAnU/hdtjA7CZSE
lb7oHlv6u9BxaxLLsqsB8lbs2Sk0JfDw1btIlJ9G8A2FW2rwesKvojjWzlCTxxuS
XpZWUm/40OsCOyovs9hRZNGN5edw7qyKWlyPqoZ9NW6LW+84gkAnuY8nI4rM30Ms
TpBFQWHT96P5t+y3gzMxOsws/8wcVlO5X2kXbVcQ0aXa8W8TkyyxGGXHEdt124qy
fdPAsIGkp/1angsWEqhrv8K3mBOUty7ZCTkCR0BdNh2kQ5Z4zHVYv2KKR4fSSdok
IiiwcgAP+iz3JesJAgyB1aPCPoImz55Ujs8yyTo6Wk4DpfFvBq79VXAuH/XdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3YUhnIQAvfBCxjxYKqucTaOYXj0wHwYDVR0j
BBgwFoAU+gyB+osktEXj/7uRYur0P3OTawMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWVmMDg5MDAtZjJjNi00ZDA3LWI2OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4
QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3MzkzNkIwMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQTBDODFGQThCMjRCNDQ1RTNGRkJCOTE2MkVBRjQzRjczOTM2
QjAzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVlZjA4OTAwLWYyYzYtNGQwNy1i
Njk0LWQxODhiYWEzYjhmMi8wLzMxMzAzMzJlMzEzMDMwMmUzMTM4MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2S2MA0GCSqG
SIb3DQEBCwUAA4IBAQA5whcMPBEBypjwc+rJXLUCDWBjAEl2xrLEBrGbRZU7zX2l
xfpwcIEuwuO2Fl0Dre9AiDvnaYvgjz+cu7oyX9e5BU1SuEVt66qg7kX4Q9iL4al8
HqxjmdsdwrxUS74YKLsxOKsiKynQsAbRBJslYfdX+uJJaQNspSvMv2YlmbmHRbTS
no3ik1XSX0Vzde3hsiY3w2DR9c94lrX9TJV3tJNWMSrbhNqPIhdv1BdDaPy8EhXo
bWMzDiVo5vNag1Da3d6QcZkd0fERAHunlqYPwUqGDCfqjSTNZW4T+J7hYfZdOXHK
7Iq0Gjzz/og2PQ1Omc8z8KbtC04Gk9fIA4zOonVg
-----END CERTIFICATE-----
Generated at Wed May 13 09:37:48 2026 by rpki-client