Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa
File:                     3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (raw, json)
Hash identifier:          OUIoLLo/dAdijxG7HgPy+7u0dGo5YCKdHwzzHlzGJYU=
Subject key identifier:   A6:0E:6A:94:B2:40:25:48:3E:46:AC:D3:24:ED:08:FC:D6:46:A5:96
Certificate issuer:       /CN=D522456371D4AC1AABD94B54197F5014F8E929A5
Certificate serial:       37346B6A85BBC8B056C36B2670A6E1F30D47AAB1
Authority key identifier: D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa
Signing time:             Sun 03 May 2026 02:41:32 +0000
ROA not before:           Sun 03 May 2026 02:36:32 +0000
ROA not after:            Sun 02 May 2027 02:41:32 +0000
asID:                     139977
IP address blocks:        103.179.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl
                          rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:34:6b:6a:85:bb:c8:b0:56:c3:6b:26:70:a6:e1:f3:0d:47:aa:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D522456371D4AC1AABD94B54197F5014F8E929A5
        Validity
            Not Before: May  3 02:36:32 2026 GMT
            Not After : May  2 02:41:32 2027 GMT
        Subject: CN=A60E6A94B24025483E46ACD324ED08FCD646A596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:74:d3:06:40:c5:1f:7e:c3:fd:d0:a4:bb:
                    22:f1:ca:50:ad:8f:e2:94:14:58:0d:fe:05:fe:7e:
                    ad:fd:44:74:31:1d:50:ae:9a:8d:c1:13:a4:b3:82:
                    52:c2:0c:f8:43:f6:e3:34:2e:c5:ee:76:0d:3f:fa:
                    fa:40:14:0e:59:7e:05:9a:d7:e2:4e:84:19:74:09:
                    cb:41:4e:37:34:0a:ed:86:34:45:6d:4a:d5:1b:11:
                    65:b8:a3:d1:8f:14:6b:0e:62:2e:ee:c8:a8:76:d8:
                    30:d4:03:2f:38:e0:02:c7:7a:bc:ce:f4:f5:96:0a:
                    fa:a3:02:87:75:28:31:6c:fe:c8:e6:f0:58:da:bc:
                    b6:94:7e:98:29:5d:80:e4:38:f9:02:21:81:09:0b:
                    95:39:25:44:78:09:83:11:b6:10:77:a4:f2:b0:ab:
                    24:6a:49:f8:ee:74:e6:0c:27:48:cb:3b:6a:00:a1:
                    20:37:b0:86:90:bf:72:b6:32:65:13:f7:f5:4d:d9:
                    ec:e9:25:2c:11:12:da:0f:78:3a:78:24:07:92:b1:
                    56:39:90:5d:78:3a:0f:93:0e:bc:91:dc:f3:05:f7:
                    78:ef:df:33:ea:6d:eb:3c:2b:6d:de:9b:83:8b:32:
                    06:be:77:03:65:7a:6e:d5:51:b5:e3:b4:9c:3f:f1:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0E:6A:94:B2:40:25:48:3E:46:AC:D3:24:ED:08:FC:D6:46:A5:96
            X509v3 Authority Key Identifier:
                keyid:D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:77:6a:f8:a6:76:b8:73:26:38:14:d7:d8:6f:01:c1:b1:e3:
         7f:c5:9c:cf:4e:c8:fc:27:5d:9c:6e:de:28:51:4b:78:e8:b4:
         e2:25:b0:88:82:3d:c3:2f:5e:1f:ee:67:21:34:0f:8b:d1:9d:
         b6:95:63:db:54:45:bf:7b:93:6a:01:69:0d:11:93:da:36:e8:
         c4:4b:c7:5f:a3:83:8f:b1:22:ab:a5:3c:9d:e7:ac:3c:75:68:
         5e:6b:52:c6:2d:df:42:f9:b7:ae:7a:e0:c7:11:f9:0b:87:27:
         8c:c2:2c:e4:2b:24:3d:f6:62:56:28:0f:ba:f6:ad:23:8b:8b:
         86:5f:23:31:7d:ba:bb:89:ff:ce:8b:f5:55:5f:0b:c9:0b:12:
         e7:24:b0:11:2b:b3:2e:87:70:64:9d:d8:e3:5a:5d:86:ad:b2:
         e3:e5:3b:1a:cd:ad:9a:0f:de:94:9a:bf:5c:de:eb:7d:54:29:
         f3:b5:66:05:68:fa:da:0c:f5:a1:9d:77:59:18:ec:bb:65:f0:
         66:16:96:59:f1:97:dc:2e:92:c2:2e:7c:14:29:a2:19:9a:59:
         f1:ba:66:f6:d0:5b:1e:e2:31:64:c8:ef:95:35:f8:8b:c6:fb:
         29:ad:6b:0e:1f:c4:f8:ae:fc:0c:ac:33:2e:48:91:2c:cd:85:
         9a:93:02:60
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNzRraoW7yLBWw2smcKbh8w1HqrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRG
OEU5MjlBNTAeFw0yNjA1MDMwMjM2MzJaFw0yNzA1MDIwMjQxMzJaMDMxMTAvBgNV
BAMTKEE2MEU2QTk0QjI0MDI1NDgzRTQ2QUNEMzI0RUQwOEZDRDY0NkE1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyaXTTBkDFH37D/dCkuyLxylCt
j+KUFFgN/gX+fq39RHQxHVCumo3BE6SzglLCDPhD9uM0LsXudg0/+vpAFA5ZfgWa
1+JOhBl0CctBTjc0Cu2GNEVtStUbEWW4o9GPFGsOYi7uyKh22DDUAy844ALHerzO
9PWWCvqjAod1KDFs/sjm8FjavLaUfpgpXYDkOPkCIYEJC5U5JUR4CYMRthB3pPKw
qyRqSfjudOYMJ0jLO2oAoSA3sIaQv3K2MmUT9/VN2ezpJSwREtoPeDp4JAeSsVY5
kF14Og+TDryR3PMF93jv3zPqbes8K23em4OLMga+dwNlem7VUbXjtJw/8bqPAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUpg5qlLJAJUg+RqzTJO0I/NZGpZYwHwYDVR0j
BBgwFoAU1SJFY3HUrBqr2UtUGX9QFPjpKaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmQ4MGIzMjEtYWEzMS00MzE3LTlkMzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3
MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRGOEU5MjlBNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENTIyNDU2MzcxRDRBQzFBQUJEOTRCNTQxOTdGNTAxNEY4RTky
OUE1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZkODBiMzIxLWFhMzEtNDMxNy05
ZDMxLWMyYmQxOTBjMTM4NC8wLzMxMzAzMzJlMzEzNzM5MmUzMTMzMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM3Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFns4gwDQYJ
KoZIhvcNAQELBQADggEBABV3avimdrhzJjgU19hvAcGx43/FnM9OyPwnXZxu3ihR
S3jotOIlsIiCPcMvXh/uZyE0D4vRnbaVY9tURb97k2oBaQ0Rk9o26MRLx1+jg4+x
IqulPJ3nrDx1aF5rUsYt30L5t6564McR+QuHJ4zCLOQrJD32YlYoD7r2rSOLi4Zf
IzF9uruJ/86L9VVfC8kLEucksBErsy6HcGSd2ONaXYatsuPlOxrNrZoP3pSav1ze
631UKfO1ZgVo+toM9aGdd1kY7Ltl8GYWllnxl9wuksIufBQpohmaWfG6ZvbQWx7i
MWTI75U1+IvG+ymtaw4fxPiu/AysMy5IkSzNhZqTAmA=
-----END CERTIFICATE-----
Generated at Wed May 13 12:39:16 2026 by rpki-client