Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa
File:                     3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (raw, json)
Hash identifier:          OwuNAyMCdQqzVBOVJzr7kPThUt6VdOd9CvAXA9Sod0M=
Subject key identifier:   3F:A6:DE:12:A1:C5:BC:FB:89:F3:2B:18:99:E8:99:B1:9E:A9:8C:12
Certificate issuer:       /CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Certificate serial:       36059E3B97A3149B9163D5CA3224CD08D7731E3B
Authority key identifier: A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa
Signing time:             Sun 03 May 2026 02:38:17 +0000
ROA not before:           Sun 03 May 2026 02:33:17 +0000
ROA not after:            Sun 02 May 2027 02:38:17 +0000
asID:                     142360
IP address blocks:        103.147.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
                          rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:05:9e:3b:97:a3:14:9b:91:63:d5:ca:32:24:cd:08:d7:73:1e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
        Validity
            Not Before: May  3 02:33:17 2026 GMT
            Not After : May  2 02:38:17 2027 GMT
        Subject: CN=3FA6DE12A1C5BCFB89F32B1899E899B19EA98C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:27:bd:4b:11:e6:9d:fd:c2:e4:bc:9d:70:
                    1f:e7:df:dc:10:a5:2d:24:88:14:09:88:17:df:b7:
                    cf:96:ae:b7:a0:50:8f:ae:f2:f6:8d:66:d2:57:98:
                    e6:90:ff:8a:90:7a:49:e9:da:58:43:f3:66:a1:44:
                    89:1b:09:ba:c7:ab:3a:fb:df:0f:12:a7:dd:88:c1:
                    e6:74:29:34:4b:4a:ac:eb:77:a3:60:63:64:16:43:
                    78:93:12:7d:32:e4:8f:32:31:8b:e3:07:eb:68:6c:
                    86:61:10:6a:f2:13:e4:ff:c2:3b:a3:7d:7b:9e:99:
                    40:2b:fc:44:0d:1f:1b:78:a4:4d:db:8e:c6:d4:a6:
                    f2:51:ff:d4:de:c9:df:8a:c0:1f:e7:9d:e6:9b:66:
                    84:f9:de:e3:ff:94:0f:c6:de:0d:c9:c0:2b:0a:8a:
                    93:16:1e:0e:9b:11:89:33:21:c6:a2:15:c0:e2:dd:
                    f0:e5:cb:02:ab:40:38:c0:06:7f:c6:87:c0:de:c8:
                    22:71:ae:65:eb:f2:e1:44:1e:9d:23:33:d4:ac:8e:
                    ee:03:7f:07:59:ae:7f:6a:fd:84:7c:64:ae:80:8e:
                    24:56:7c:25:b9:ba:f4:cf:d0:2f:86:2d:e1:96:26:
                    68:db:5e:95:3d:50:dd:51:a7:76:fa:33:91:e3:cd:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A6:DE:12:A1:C5:BC:FB:89:F3:2B:18:99:E8:99:B1:9E:A9:8C:12
            X509v3 Authority Key Identifier:
                keyid:A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:21:bd:97:5f:62:bd:bb:ed:fc:a1:9a:a6:53:1f:40:26:
         18:21:55:a4:d0:27:0f:1c:00:b6:a5:0a:ac:b0:13:bc:8e:62:
         24:74:8a:bc:b2:cf:b3:6a:48:2e:6f:3d:df:3a:8f:d3:4f:cc:
         d8:cd:23:49:71:a7:be:9d:a9:c5:cc:90:8c:05:ca:70:11:43:
         f6:d1:82:7d:dd:a5:55:8e:24:41:79:d8:be:a1:ef:cf:7d:1e:
         25:bc:78:c8:50:37:9a:58:8a:69:35:c2:10:35:50:ab:49:5f:
         8c:af:47:5d:62:23:46:5b:ce:ca:5a:0c:0a:9b:d2:14:ad:89:
         8b:88:aa:62:35:e5:18:b5:6c:37:61:19:58:47:90:4b:ed:d6:
         7b:17:fb:e7:e2:a9:b7:ef:c9:b1:cc:b1:8f:91:5a:39:1a:90:
         f7:5e:8d:69:4c:c1:fc:5c:d1:c6:ea:05:f8:54:00:4e:1d:c7:
         bd:e2:c8:af:0f:d6:93:13:e1:72:f0:cb:cd:49:0d:c3:56:00:
         66:95:ec:48:06:08:a7:d0:58:90:79:3c:bc:8d:d5:04:5c:0a:
         34:73:c3:75:51:e5:81:e9:5a:5c:bc:b8:0b:73:09:fb:02:f6:
         a3:1f:c1:ad:1a:a0:e9:9e:80:e2:29:28:1a:05:5b:42:35:e8:
         2f:51:f9:4c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNgWeO5ejFJuRY9XKMiTNCNdzHjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ3OUJFOEEyQUI3MzY5OTc3OTlDNUVERDE5RENDMUUx
NDA4MDk1MTAeFw0yNjA1MDMwMjMzMTdaFw0yNzA1MDIwMjM4MTdaMDMxMTAvBgNV
BAMTKDNGQTZERTEyQTFDNUJDRkI4OUYzMkIxODk5RTg5OUIxOUVBOThDMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2Se9SxHmnf3C5LydcB/n39wQ
pS0kiBQJiBfft8+WrregUI+u8vaNZtJXmOaQ/4qQeknp2lhD82ahRIkbCbrHqzr7
3w8Sp92IweZ0KTRLSqzrd6NgY2QWQ3iTEn0y5I8yMYvjB+tobIZhEGryE+T/wjuj
fXuemUAr/EQNHxt4pE3bjsbUpvJR/9Teyd+KwB/nneabZoT53uP/lA/G3g3JwCsK
ipMWHg6bEYkzIcaiFcDi3fDlywKrQDjABn/Gh8DeyCJxrmXr8uFEHp0jM9Ssju4D
fwdZrn9q/YR8ZK6AjiRWfCW5uvTP0C+GLeGWJmjbXpU9UN1Rp3b6M5HjzXaTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUP6beEqHFvPuJ8ysYmeiZsZ6pjBIwHwYDVR0j
BBgwFoAUpHm+iiq3Npl3mcXt0Z3MHhQICVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjJkYWE5NWYtMmY1OS00MzlhLTgzNGYtYTcyMWMzNzJhNzRjLzAvQTQ3OUJFOEEy
QUI3MzY5OTc3OTlDNUVERDE5RENDMUUxNDA4MDk1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNDc5QkU4QTJBQjczNjk5Nzc5OUM1RUREMTlEQ0MxRTE0MDgw
OTUxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYyZGFhOTVmLTJmNTktNDM5YS04
MzRmLWE3MjFjMzcyYTc0Yy8wLzMxMzAzMzJlMzEzNDM3MmUzMTM1MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk50wDQYJ
KoZIhvcNAQELBQADggEBAJ+xIb2XX2K9u+38oZqmUx9AJhghVaTQJw8cALalCqyw
E7yOYiR0iryyz7NqSC5vPd86j9NPzNjNI0lxp76dqcXMkIwFynARQ/bRgn3dpVWO
JEF52L6h7899HiW8eMhQN5pYimk1whA1UKtJX4yvR11iI0ZbzspaDAqb0hStiYuI
qmI15Ri1bDdhGVhHkEvt1nsX++fiqbfvybHMsY+RWjkakPdejWlMwfxc0cbqBfhU
AE4dx73iyK8P1pMT4XLwy81JDcNWAGaV7EgGCKfQWJB5PLyN1QRcCjRzw3VR5YHp
Wly8uAtzCfsC9qMfwa0aoOmegOIpKBoFW0I16C9R+Uw=
-----END CERTIFICATE-----
Generated at Wed May 13 09:08:43 2026 by rpki-client