Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa
File:                     3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (raw, json)
Hash identifier:          OeYZDJDnfFOrv0gLIl0BcG8+/dZQ9bC3jq7crp9LkMo=
Subject key identifier:   A9:17:0E:2B:EB:98:CC:7D:BC:B5:7B:F4:1E:BC:FB:5A:FB:9B:71:1A
Certificate issuer:       /CN=FF5E59BD445AE731E58ED471848043C324931D05
Certificate serial:       07E35795389D703051D62A9CA72D91601FDBA5F5
Authority key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa
Signing time:             Sun 03 May 2026 02:44:00 +0000
ROA not before:           Sun 03 May 2026 02:39:00 +0000
ROA not after:            Sun 02 May 2027 02:44:00 +0000
asID:                     139412
IP address blocks:        103.143.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl
                          rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e3:57:95:38:9d:70:30:51:d6:2a:9c:a7:2d:91:60:1f:db:a5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5E59BD445AE731E58ED471848043C324931D05
        Validity
            Not Before: May  3 02:39:00 2026 GMT
            Not After : May  2 02:44:00 2027 GMT
        Subject: CN=A9170E2BEB98CC7DBCB57BF41EBCFB5AFB9B711A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:09:9e:ce:6b:c2:ad:76:18:80:27:44:02:
                    50:16:62:5c:09:5b:dd:a8:37:80:59:e2:dc:5f:69:
                    47:bc:83:2d:63:cb:4f:42:af:96:a6:f0:a1:66:8b:
                    ed:4f:a6:18:3a:b3:cb:e6:49:5e:48:32:03:a6:ee:
                    48:2f:0d:74:a2:d2:ce:36:7f:fe:8a:65:c2:57:bc:
                    4e:6c:e9:5f:2d:26:a4:47:e9:c6:88:13:fb:1d:a6:
                    11:65:14:93:47:bd:05:c9:74:5e:65:4c:a5:c3:f7:
                    f1:f8:89:4c:74:fe:90:25:80:ba:ad:64:b0:57:d3:
                    a4:21:8f:b0:f1:d3:ae:14:49:d5:b9:92:64:f9:a1:
                    a4:9c:28:7d:8a:b2:c3:7a:f2:ae:4c:dd:98:77:8a:
                    ff:b6:d7:85:88:71:88:75:29:8c:49:15:49:65:25:
                    c2:62:18:47:35:78:ab:de:aa:29:7a:1b:25:c5:26:
                    a9:f2:12:d3:44:22:d4:5a:b0:62:d7:0f:4e:89:98:
                    1e:8f:79:d2:6e:96:3d:a8:f7:73:d4:7d:47:b9:98:
                    ee:c6:d8:dd:63:cb:b4:c1:12:14:ea:1a:5d:78:7e:
                    3e:6c:16:3a:e1:cd:5b:c6:dd:94:03:27:a9:92:20:
                    a2:1f:1d:8e:a9:0d:ce:30:bf:cf:6d:e0:71:7d:a8:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:0E:2B:EB:98:CC:7D:BC:B5:7B:F4:1E:BC:FB:5A:FB:9B:71:1A
            X509v3 Authority Key Identifier:
                keyid:FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:d3:bf:b6:de:aa:77:d5:0a:1e:af:8e:01:bd:ee:b5:c8:4c:
         e5:22:92:49:62:78:29:2a:00:8b:0c:f3:f4:e2:dd:bf:a5:87:
         a4:28:ce:e0:8c:ad:b7:11:16:6b:1c:f4:4e:b2:f0:f6:e5:7a:
         c3:dd:b6:e0:c0:86:50:fa:f4:31:74:80:6f:db:7c:5e:19:64:
         69:a4:4a:6a:c3:fd:b4:1c:2f:e7:51:d2:1a:cf:1d:2b:ab:af:
         f9:70:55:ef:21:0b:52:bd:92:bd:0d:03:71:22:4f:f4:f1:e1:
         d8:0b:dc:c4:65:00:23:f8:30:61:57:56:db:4c:33:06:df:8b:
         5e:e0:78:c2:62:26:01:75:f0:1b:b7:4c:fa:d8:2e:16:8e:1f:
         bc:51:4a:4a:e7:5b:e1:a5:ce:1e:70:fc:df:e6:ac:92:ad:dd:
         55:72:06:36:49:d9:38:3f:c9:9e:dd:e8:6c:cb:86:3c:0b:6c:
         39:25:3d:a6:15:a5:ba:89:f2:59:0f:82:ec:be:74:cd:d0:53:
         5d:08:81:a9:ea:5b:f2:d6:00:ad:39:62:f3:c2:9b:70:d4:17:
         a6:70:8b:c6:a3:39:12:e6:7a:2e:47:d2:3b:c4:fa:4c:b7:bc:
         fc:76:ba:71:90:5b:81:41:86:9e:15:d5:b8:3d:65:b6:9d:bb:
         53:7e:e5:53
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUB+NXlTidcDBR1iqcpy2RYB/bpfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RTU5QkQ0NDVBRTczMUU1OEVENDcxODQ4MDQzQzMy
NDkzMUQwNTAeFw0yNjA1MDMwMjM5MDBaFw0yNzA1MDIwMjQ0MDBaMDMxMTAvBgNV
BAMTKEE5MTcwRTJCRUI5OENDN0RCQ0I1N0JGNDFFQkNGQjVBRkI5QjcxMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNOQmezmvCrXYYgCdEAlAWYlwJ
W92oN4BZ4txfaUe8gy1jy09Cr5am8KFmi+1Pphg6s8vmSV5IMgOm7kgvDXSi0s42
f/6KZcJXvE5s6V8tJqRH6caIE/sdphFlFJNHvQXJdF5lTKXD9/H4iUx0/pAlgLqt
ZLBX06Qhj7Dx064USdW5kmT5oaScKH2KssN68q5M3Zh3iv+214WIcYh1KYxJFUll
JcJiGEc1eKveqil6GyXFJqnyEtNEItRasGLXD06JmB6PedJulj2o93PUfUe5mO7G
2N1jy7TBEhTqGl14fj5sFjrhzVvG3ZQDJ6mSIKIfHY6pDc4wv89t4HF9qGRdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUqRcOK+uYzH28tXv0Hrz7WvubcRowHwYDVR0j
BBgwFoAU/15ZvURa5zHljtRxhIBDwySTHQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Nzc3MGZlZWItMmNhYS00NzZhLWFiNDMtZjY1MmExMWZkMDhjLzAvRkY1RTU5QkQ0
NDVBRTczMUU1OEVENDcxODQ4MDQzQzMyNDkzMUQwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GRjVFNTlCRDQ0NUFFNzMxRTU4RUQ0NzE4NDgwNDNDMzI0OTMx
RDA1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc3NzBmZWViLTJjYWEtNDc2YS1h
YjQzLWY2NTJhMTFmZDA4Yy8wLzMxMzAzMzJlMzEzNDMzMmUzMjMyMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzkzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnj+AwDQYJ
KoZIhvcNAQELBQADggEBAAXTv7beqnfVCh6vjgG97rXITOUikklieCkqAIsM8/Ti
3b+lh6QozuCMrbcRFmsc9E6y8PblesPdtuDAhlD69DF0gG/bfF4ZZGmkSmrD/bQc
L+dR0hrPHSurr/lwVe8hC1K9kr0NA3EiT/Tx4dgL3MRlACP4MGFXVttMMwbfi17g
eMJiJgF18Bu3TPrYLhaOH7xRSkrnW+Glzh5w/N/mrJKt3VVyBjZJ2Tg/yZ7d6GzL
hjwLbDklPaYVpbqJ8lkPguy+dM3QU10IganqW/LWAK05YvPCm3DUF6Zwi8ajORLm
ei5H0jvE+ky3vPx2unGQW4FBhp4V1bg9Zbadu1N+5VM=
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:35 2026 by rpki-client