Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39302e302f32332d3234203d3e20313530323232.roa
File:                     3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (raw, json)
Hash identifier:          5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=
Subject key identifier:   3E:7F:4D:48:41:FF:10:8F:07:70:4B:CC:08:2A:A6:D3:24:4B:F9:DC
Certificate issuer:       /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C
Certificate serial:       3C68142191691822FFBCAAB809342FBE51D2F81D
Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39302e302f32332d3234203d3e20313530323232.roa
Signing time:             Sun 03 May 2026 02:46:13 +0000
ROA not before:           Sun 03 May 2026 02:41:13 +0000
ROA not after:            Sun 02 May 2027 02:46:13 +0000
asID:                     150222
IP address blocks:        103.88.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl
                          rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:68:14:21:91:69:18:22:ff:bc:aa:b8:09:34:2f:be:51:d2:f8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C
        Validity
            Not Before: May  3 02:41:13 2026 GMT
            Not After : May  2 02:46:13 2027 GMT
        Subject: CN=3E7F4D4841FF108F07704BCC082AA6D3244BF9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:7f:2b:8c:fa:22:83:7e:45:ab:62:c3:d4:
                    c4:2a:62:72:a2:8f:63:05:f3:3a:07:a1:e5:fb:9f:
                    95:0b:50:76:3f:5a:bd:d8:30:98:e7:31:00:3d:c2:
                    f9:2b:6a:12:6c:28:9c:d1:a5:36:e8:e9:55:72:ff:
                    bc:a5:db:63:fb:19:bd:88:14:00:3e:7f:75:7b:ff:
                    dc:1c:a1:28:9d:25:f1:31:1a:7a:37:cd:d0:77:59:
                    d6:18:6f:69:85:8c:71:33:77:29:e1:d8:03:fa:4f:
                    27:c1:14:f8:c0:66:64:1e:93:31:d5:85:f4:1a:6b:
                    a1:66:1a:f4:d3:7d:57:7d:35:47:8f:ac:ab:24:4d:
                    5f:93:60:02:4d:9b:fc:9e:22:e9:30:33:ab:b2:b5:
                    a5:fd:2f:09:32:e7:6a:14:65:a1:c2:a5:9f:11:ae:
                    b7:b7:0c:39:a7:8a:d8:d1:2d:f2:ff:6e:52:87:bc:
                    21:5b:4a:2a:7a:3e:cf:34:fb:c3:94:80:58:e8:93:
                    3f:c2:31:62:4f:6e:b6:e9:fc:82:67:49:e0:9e:17:
                    00:d7:88:bb:da:75:6a:ce:b5:55:ac:bf:23:00:cb:
                    bf:be:8b:9c:38:18:3c:a0:9b:33:ce:e5:18:d4:8f:
                    ac:ea:a1:59:7d:ab:29:11:0c:04:e7:06:6e:cd:ea:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7F:4D:48:41:FF:10:8F:07:70:4B:CC:08:2A:A6:D3:24:4B:F9:DC
            X509v3 Authority Key Identifier:
                keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39302e302f32332d3234203d3e20313530323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:03:3d:ad:fa:bd:d2:f7:ee:df:6e:de:8c:ba:3b:8b:10:
         d7:1d:17:88:7f:c0:1a:4e:78:ef:d9:05:47:1a:8f:cf:3c:a1:
         04:3b:63:c4:f9:cc:20:7d:5c:1f:5f:dc:29:ea:f3:0d:37:37:
         0b:44:eb:b4:54:7c:53:d6:e0:98:89:10:60:a3:70:cc:0b:21:
         69:9b:93:13:be:c4:2e:1c:bc:8f:fe:37:23:ab:2f:6a:8e:39:
         fa:1a:fc:d1:0d:ff:33:2f:6d:80:70:37:c4:b4:fc:14:29:70:
         19:16:3f:15:90:8c:4e:1d:26:46:4d:8d:c4:fc:a4:40:9e:e9:
         05:8d:8c:f6:16:40:6b:54:ef:87:88:b8:f1:d4:b4:2f:c4:85:
         3b:d5:15:41:c1:08:f8:fb:28:ce:1a:c0:aa:01:93:8e:08:5e:
         04:b7:41:6a:8f:95:7b:6b:ed:92:00:58:56:27:8d:4d:8b:e4:
         00:2b:57:a6:f5:e4:55:83:3d:1e:18:92:e1:98:96:f6:eb:31:
         14:fa:71:ae:87:41:bf:9e:dc:4e:1b:06:1c:e7:43:c1:ff:04:
         0c:27:90:f9:50:26:dd:eb:61:eb:45:38:40:19:5f:7e:a3:20:
         8c:b8:fc:69:8f:65:5d:90:f5:11:83:dc:40:d2:b8:7e:6c:22:
         9d:d3:7f:a9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPGgUIZFpGCL/vKq4CTQvvlHS+B0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIz
OTczNkQ3QzAeFw0yNjA1MDMwMjQxMTNaFw0yNzA1MDIwMjQ2MTNaMDMxMTAvBgNV
BAMTKDNFN0Y0RDQ4NDFGRjEwOEYwNzcwNEJDQzA4MkFBNkQzMjQ0QkY5REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2on8rjPoig35Fq2LD1MQqYnKi
j2MF8zoHoeX7n5ULUHY/Wr3YMJjnMQA9wvkrahJsKJzRpTbo6VVy/7yl22P7Gb2I
FAA+f3V7/9wcoSidJfExGno3zdB3WdYYb2mFjHEzdynh2AP6TyfBFPjAZmQekzHV
hfQaa6FmGvTTfVd9NUePrKskTV+TYAJNm/yeIukwM6uytaX9Lwky52oUZaHCpZ8R
rre3DDmnitjRLfL/blKHvCFbSip6Ps80+8OUgFjokz/CMWJPbrbp/IJnSeCeFwDX
iLvadWrOtVWsvyMAy7++i5w4GDygmzPO5RjUj6zqoVl9qykRDATnBm7N6laTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUPn9NSEH/EI8HcEvMCCqm0yRL+dwwHwYDVR0j
BBgwFoAUvtkL5+Q/cL6i5ohrE+BG+zlzbXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2U5MTgwOWUtZGQ0OS00YzUyLWIxMWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdF
NDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIzOTczNkQ3Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CRUQ5MEJFN0U0M0Y3MEJFQTJFNjg4NkIxM0UwNDZGQjM5NzM2
RDdDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdlOTE4MDllLWRkNDktNGM1Mi1i
MTFmLTJhNTE4YzNhYTg1Ni8wLzMxMzAzMzJlMzgzODJlMzkzMDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdYWjANBgkqhkiG
9w0BAQsFAAOCAQEAJQsDPa36vdL37t9u3oy6O4sQ1x0XiH/AGk5479kFRxqPzzyh
BDtjxPnMIH1cH1/cKerzDTc3C0TrtFR8U9bgmIkQYKNwzAshaZuTE77ELhy8j/43
I6svao45+hr80Q3/My9tgHA3xLT8FClwGRY/FZCMTh0mRk2NxPykQJ7pBY2M9hZA
a1Tvh4i48dS0L8SFO9UVQcEI+PsozhrAqgGTjgheBLdBao+Ve2vtkgBYVieNTYvk
ACtXpvXkVYM9HhiS4ZiW9usxFPpxrodBv57cThsGHOdDwf8EDCeQ+VAm3eth60U4
QBlffqMgjLj8aY9lXZD1EYPcQNK4fmwindN/qQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:49:06 2026 by rpki-client