Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa
File:                     3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (raw, json)
Hash identifier:          J0+iHCZ4UXpTu9FbQSO8iPWMu0E+Lc3DRVGjSSCxGxw=
Subject key identifier:   D8:10:1A:03:86:1B:5B:A9:67:71:C9:D9:D9:BF:EC:F4:7F:58:D0:94
Certificate issuer:       /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
Certificate serial:       37935F648D112DCF497287E5F828FF318F976478
Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa
Signing time:             Sun 03 May 2026 02:46:09 +0000
ROA not before:           Sun 03 May 2026 02:41:09 +0000
ROA not after:            Sun 02 May 2027 02:46:09 +0000
asID:                     140459
IP address blocks:        103.153.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl
                          rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:5f:64:8d:11:2d:cf:49:72:87:e5:f8:28:ff:31:8f:97:64:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
        Validity
            Not Before: May  3 02:41:09 2026 GMT
            Not After : May  2 02:46:09 2027 GMT
        Subject: CN=D8101A03861B5BA96771C9D9D9BFECF47F58D094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:7e:2a:6c:28:11:dd:ad:7c:6b:34:fb:2c:
                    b7:bc:8f:4e:45:05:c9:7e:19:38:ea:95:1f:97:7a:
                    46:61:db:90:23:03:96:d8:f1:92:e6:15:eb:1d:51:
                    27:ca:45:1a:f4:b1:cf:95:3b:1f:5e:70:36:8d:d8:
                    bc:18:30:8e:98:a6:2a:be:0a:b0:fd:6d:99:47:7c:
                    1f:77:9a:b8:d3:61:ef:f5:2a:28:04:49:7d:b8:ac:
                    14:86:65:5c:83:93:2d:04:de:f1:46:c6:f9:67:cf:
                    b9:7f:14:9c:0e:2a:62:2c:8e:ce:a7:69:9f:89:7d:
                    0c:d7:9d:26:a3:cb:34:88:d9:57:19:06:fd:a5:81:
                    96:08:31:e1:1f:ef:98:c4:70:07:f9:26:da:58:ae:
                    15:68:21:76:13:8d:c9:47:00:36:a4:78:49:c0:75:
                    11:6d:4e:a0:26:1f:cf:54:0a:e5:1f:00:92:00:98:
                    86:0d:ac:c8:76:42:e9:63:aa:3c:39:ef:11:4d:ba:
                    82:3d:a3:49:c3:93:ef:f2:21:41:36:1c:06:36:a8:
                    34:6e:78:b8:38:24:e6:da:4f:4d:9d:dd:92:c2:db:
                    d9:c4:a0:0c:f3:13:e5:cb:f5:5c:6c:b7:97:66:39:
                    71:37:7b:77:7c:f8:ff:2c:9a:fe:28:0f:4d:3f:63:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:10:1A:03:86:1B:5B:A9:67:71:C9:D9:D9:BF:EC:F4:7F:58:D0:94
            X509v3 Authority Key Identifier:
                keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:44:a3:07:6f:3b:43:00:29:70:41:5b:f2:fe:7c:a2:d8:e8:
         b9:31:8e:6a:57:c4:f3:bb:70:32:c2:0a:e3:17:b1:b9:f5:ec:
         f4:66:e0:4d:e5:4d:74:1a:71:9a:8e:e0:f0:18:e5:78:53:ce:
         a9:35:e5:9b:46:83:5b:fe:cb:96:40:92:a0:1b:6d:91:ed:90:
         21:28:48:b5:15:e4:ef:2e:78:5c:66:6c:0b:dd:f0:83:e8:46:
         7d:72:84:77:b3:e6:d7:55:ff:a7:a1:88:18:38:66:b2:e5:e5:
         73:77:a3:57:c0:20:20:57:be:74:18:b2:13:a5:2b:8a:e7:12:
         3a:32:f7:d3:d6:fc:8f:fe:74:51:77:c9:32:f6:65:82:d6:ec:
         92:a6:c2:60:9e:a5:18:fe:0a:e9:82:b9:1b:ae:d4:34:d5:5d:
         23:13:d9:77:50:8a:48:fe:95:d3:dd:0f:ae:6f:46:d9:55:24:
         17:1b:d4:79:32:95:48:28:68:18:00:11:0e:44:7d:c0:25:ce:
         92:74:f9:06:7d:86:54:de:36:7a:e5:eb:8b:09:dd:51:f4:57:
         c6:42:66:50:d4:ad:0d:d8:29:3b:75:61:5e:14:f6:ca:fd:db:
         99:0e:2e:b0:4e:5b:c6:ac:cc:30:07:30:21:ba:f4:ca:80:ad:
         9e:b8:bd:ab
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUN5NfZI0RLc9Jcofl+Cj/MY+XZHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBCOTQ1MEFBMzlCOUNEOTU4NjA4NUVGQTlFRjc4ODdF
RTYxMzc1OTAeFw0yNjA1MDMwMjQxMDlaFw0yNzA1MDIwMjQ2MDlaMDMxMTAvBgNV
BAMTKEQ4MTAxQTAzODYxQjVCQTk2NzcxQzlEOUQ5QkZFQ0Y0N0Y1OEQwOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx834qbCgR3a18azT7LLe8j05F
Bcl+GTjqlR+XekZh25AjA5bY8ZLmFesdUSfKRRr0sc+VOx9ecDaN2LwYMI6Ypiq+
CrD9bZlHfB93mrjTYe/1KigESX24rBSGZVyDky0E3vFGxvlnz7l/FJwOKmIsjs6n
aZ+JfQzXnSajyzSI2VcZBv2lgZYIMeEf75jEcAf5JtpYrhVoIXYTjclHADakeEnA
dRFtTqAmH89UCuUfAJIAmIYNrMh2Quljqjw57xFNuoI9o0nDk+/yIUE2HAY2qDRu
eLg4JObaT02d3ZLC29nEoAzzE+XL9Vxst5dmOXE3e3d8+P8smv4oD00/Y97XAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2BAaA4YbW6lnccnZ2b/s9H9Y0JQwHwYDVR0j
BBgwFoAUkLlFCqObnNlYYIXvqe94h+5hN1kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2U3NmRiMWUtYmY5YS00OWE4LWJmNzYtOWYzMTRlN2QxZDhlLzAvOTBCOTQ1MEFB
MzlCOUNEOTU4NjA4NUVGQTlFRjc4ODdFRTYxMzc1OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MEI5NDUwQUEzOUI5Q0Q5NTg2MDg1RUZBOUVGNzg4N0VFNjEz
NzU5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdlNzZkYjFlLWJmOWEtNDlhOC1i
Zjc2LTlmMzE0ZTdkMWQ4ZS8wLzMxMzAzMzJlMzEzNTMzMmUzODMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5lSMA0GCSqG
SIb3DQEBCwUAA4IBAQAgRKMHbztDAClwQVvy/nyi2Oi5MY5qV8Tzu3AywgrjF7G5
9ez0ZuBN5U10GnGajuDwGOV4U86pNeWbRoNb/suWQJKgG22R7ZAhKEi1FeTvLnhc
ZmwL3fCD6EZ9coR3s+bXVf+noYgYOGay5eVzd6NXwCAgV750GLITpSuK5xI6MvfT
1vyP/nRRd8ky9mWC1uySpsJgnqUY/grpgrkbrtQ01V0jE9l3UIpI/pXT3Q+ub0bZ
VSQXG9R5MpVIKGgYABEORH3AJc6SdPkGfYZU3jZ65euLCd1R9FfGQmZQ1K0N2Ck7
dWFeFPbK/duZDi6wTlvGrMwwBzAhuvTKgK2euL2r
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:34 2026 by rpki-client