Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa
File:                     3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (raw, json)
Hash identifier:          pJiC24QIjxd6JDAGc4IBUzAveppgmfr21Asl7pAU+wU=
Subject key identifier:   B0:B0:41:BF:43:A0:49:63:C7:2C:2E:A0:39:C7:CE:6C:83:D5:24:E6
Certificate issuer:       /CN=4D81747956B88002B7CA79329A458E7D5CC04FC7
Certificate serial:       2AC383894AAB9CBE1B48D1B3598125315D704F20
Authority key identifier: 4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa
Signing time:             Sun 03 May 2026 02:37:12 +0000
ROA not before:           Sun 03 May 2026 02:32:12 +0000
ROA not after:            Sun 02 May 2027 02:37:12 +0000
asID:                     150544
IP address blocks:        103.147.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl
                          rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c3:83:89:4a:ab:9c:be:1b:48:d1:b3:59:81:25:31:5d:70:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D81747956B88002B7CA79329A458E7D5CC04FC7
        Validity
            Not Before: May  3 02:32:12 2026 GMT
            Not After : May  2 02:37:12 2027 GMT
        Subject: CN=B0B041BF43A04963C72C2EA039C7CE6C83D524E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:7c:13:ff:df:3e:5c:e1:2a:00:02:08:52:
                    03:ff:22:04:67:d4:80:ba:04:81:d7:d9:42:34:46:
                    73:32:75:18:74:b1:b0:d5:b0:bd:4c:c7:b4:e4:b8:
                    f8:af:b8:2d:20:26:0d:d2:49:95:61:2d:8d:04:2f:
                    62:d7:c7:7b:b3:f2:d3:b2:1c:d0:68:67:06:18:f7:
                    a3:46:94:2d:ef:9b:dc:6d:65:a2:3b:f5:92:0d:48:
                    3b:c2:c6:80:00:5a:41:1c:3f:d9:5f:19:29:d5:91:
                    be:31:53:7a:be:96:d8:4a:1e:a4:3e:da:0c:0d:8f:
                    5b:61:d0:9e:e6:f3:e4:d5:83:c5:6d:e6:52:98:b6:
                    36:6f:2e:4c:51:55:46:19:5e:20:eb:73:d2:30:99:
                    1d:26:bf:97:b1:be:da:d3:70:d0:2c:4d:d1:18:97:
                    13:53:fc:c0:81:70:1b:3b:55:7e:0f:fe:36:bc:09:
                    cb:10:42:1e:6c:44:d6:5c:c4:d4:0a:56:72:26:bd:
                    76:e8:70:67:35:6c:6b:bf:23:d3:06:9d:f4:23:3d:
                    45:99:24:e5:2b:1f:b0:84:80:c2:59:79:32:6c:cc:
                    74:40:8c:43:4f:8d:51:a4:ab:e5:43:2d:e4:a1:4c:
                    e6:59:5c:ac:44:5d:4a:3d:1d:f8:6e:c2:c6:77:5f:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B0:41:BF:43:A0:49:63:C7:2C:2E:A0:39:C7:CE:6C:83:D5:24:E6
            X509v3 Authority Key Identifier:
                keyid:4D:81:74:79:56:B8:80:02:B7:CA:79:32:9A:45:8E:7D:5C:C0:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/4D81747956B88002B7CA79329A458E7D5CC04FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D81747956B88002B7CA79329A458E7D5CC04FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:6d:aa:46:a0:c5:ae:cf:c7:25:94:c6:f2:e2:d1:34:1d:b2:
         cf:dd:b1:18:4a:f7:f5:61:30:da:fa:46:b5:fb:37:93:3c:49:
         34:4d:a4:54:7d:8d:ef:be:e6:e0:77:ef:87:65:86:f7:ec:5e:
         6b:9f:0c:38:ef:87:a4:8b:96:d7:84:a6:43:9b:15:3f:aa:12:
         63:58:a5:5d:d3:f3:f7:66:c1:27:90:c9:ff:26:01:1d:2c:c9:
         6b:44:12:09:04:22:06:6c:3a:74:01:58:f4:e4:d9:c5:99:25:
         43:f1:ba:6b:d7:52:24:8c:fd:f5:bb:03:58:9f:ab:22:71:2d:
         b7:1e:37:78:6e:52:12:e7:7d:e2:bd:85:b1:3f:fa:65:86:f3:
         4b:d5:7f:7c:0a:17:27:da:ca:00:28:85:87:97:a3:8a:f2:81:
         ca:aa:a3:63:d6:a6:c2:33:54:a4:e7:b3:13:89:5b:09:ae:57:
         8c:c3:99:5a:15:0a:3a:94:f2:4a:01:0c:e9:42:1e:1a:ef:95:
         3f:dc:b6:32:63:cd:df:f1:4f:8f:6c:5d:7c:5d:77:fd:42:e5:
         53:fe:13:6e:4c:bc:36:e1:48:09:28:e3:f9:9d:44:64:ed:79:
         8c:c3:c9:bc:d0:8a:76:1c:ef:64:e8:0f:ac:76:ae:a1:0a:47:
         02:0f:cb:09
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUKsODiUqrnL4bSNGzWYElMV1wTyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4MTc0Nzk1NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1
Q0MwNEZDNzAeFw0yNjA1MDMwMjMyMTJaFw0yNzA1MDIwMjM3MTJaMDMxMTAvBgNV
BAMTKEIwQjA0MUJGNDNBMDQ5NjNDNzJDMkVBMDM5QzdDRTZDODNENTI0RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGx3wT/98+XOEqAAIIUgP/IgRn
1IC6BIHX2UI0RnMydRh0sbDVsL1Mx7TkuPivuC0gJg3SSZVhLY0EL2LXx3uz8tOy
HNBoZwYY96NGlC3vm9xtZaI79ZINSDvCxoAAWkEcP9lfGSnVkb4xU3q+lthKHqQ+
2gwNj1th0J7m8+TVg8Vt5lKYtjZvLkxRVUYZXiDrc9IwmR0mv5exvtrTcNAsTdEY
lxNT/MCBcBs7VX4P/ja8CcsQQh5sRNZcxNQKVnImvXbocGc1bGu/I9MGnfQjPUWZ
JOUrH7CEgMJZeTJszHRAjENPjVGkq+VDLeShTOZZXKxEXUo9HfhuwsZ3X/NpAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUsLBBv0OgSWPHLC6gOcfObIPVJOYwHwYDVR0j
BBgwFoAUTYF0eVa4gAK3ynkymkWOfVzAT8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWYwYTJiZWMtZjgxYS00YTNiLWExNDQtMTc1YjE2OGUyMmZkLzAvNEQ4MTc0Nzk1
NkI4ODAwMkI3Q0E3OTMyOUE0NThFN0Q1Q0MwNEZDNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RDgxNzQ3OTU2Qjg4MDAyQjdDQTc5MzI5QTQ1OEU3RDVDQzA0
RkM3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmMGEyYmVjLWY4MWEtNGEzYi1h
MTQ0LTE3NWIxNjhlMjJmZC8wLzMxMzAzMzJlMzEzNDM3MmUzMjMxMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk9MwDQYJ
KoZIhvcNAQELBQADggEBAEFtqkagxa7PxyWUxvLi0TQdss/dsRhK9/VhMNr6RrX7
N5M8STRNpFR9je++5uB374dlhvfsXmufDDjvh6SLlteEpkObFT+qEmNYpV3T8/dm
wSeQyf8mAR0syWtEEgkEIgZsOnQBWPTk2cWZJUPxumvXUiSM/fW7A1ifqyJxLbce
N3huUhLnfeK9hbE/+mWG80vVf3wKFyfaygAohYeXo4rygcqqo2PWpsIzVKTnsxOJ
WwmuV4zDmVoVCjqU8koBDOlCHhrvlT/ctjJjzd/xT49sXXxdd/1C5VP+E25MvDbh
SAko4/mdRGTteYzDybzQinYc72ToD6x2rqEKRwIPywk=
-----END CERTIFICATE-----
Generated at Wed May 13 12:05:57 2026 by rpki-client