Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa
File:                     3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (raw, json)
Hash identifier:          869cfXhcvOlyh0uB1ikVriiCxFRRijRoXRyS0ETdNZQ=
Subject key identifier:   41:B7:16:DB:C9:9E:1A:BC:4D:B7:FD:6A:46:99:F9:C0:6A:D5:2C:2C
Certificate issuer:       /CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D
Certificate serial:       73EBC65D6C173A3880B08EC2C48BC467DA96F101
Authority key identifier: 4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa
Signing time:             Sun 03 May 2026 02:46:52 +0000
ROA not before:           Sun 03 May 2026 02:41:52 +0000
ROA not after:            Sun 02 May 2027 02:46:52 +0000
asID:                     151000
IP address blocks:        103.153.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl
                          rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:eb:c6:5d:6c:17:3a:38:80:b0:8e:c2:c4:8b:c4:67:da:96:f1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D
        Validity
            Not Before: May  3 02:41:52 2026 GMT
            Not After : May  2 02:46:52 2027 GMT
        Subject: CN=41B716DBC99E1ABC4DB7FD6A4699F9C06AD52C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:b8:77:3d:b0:13:8b:d2:b2:1c:04:a6:54:
                    74:9c:96:b2:05:d6:20:7a:63:70:d5:58:cf:c8:4c:
                    13:86:10:b1:8f:5d:31:27:d6:81:3d:50:f0:ea:2f:
                    52:65:dd:1e:49:f1:3a:e7:eb:15:32:69:7e:64:e3:
                    ae:e5:d8:21:ab:95:76:46:45:d5:c9:14:df:c9:19:
                    3c:a1:1b:5b:ce:12:20:8f:e0:51:b3:e4:c6:69:38:
                    cd:ff:4d:1d:d7:52:07:2a:dc:bc:04:c7:51:73:e7:
                    6d:43:9d:1c:bb:b2:e2:bf:85:ee:65:b7:90:54:ac:
                    dc:8b:93:70:d2:76:57:15:cb:92:fb:c6:cb:54:81:
                    67:ed:5d:e7:1f:17:b6:41:8d:f5:6a:95:a7:f9:32:
                    58:60:25:62:21:fb:b8:49:3f:73:84:27:66:f0:e0:
                    ae:a8:4c:eb:c0:e3:b0:67:b2:c4:08:0f:fb:47:ca:
                    cf:35:45:f0:14:af:29:aa:5e:de:f2:09:eb:f3:b2:
                    10:47:da:ae:08:e1:dc:b9:76:df:50:b2:e7:c6:99:
                    4f:78:e3:fd:0a:60:83:43:ac:a3:fe:39:25:1a:e1:
                    2d:13:b2:46:26:31:80:77:51:ad:5f:64:e5:39:c6:
                    d6:22:af:a1:e1:1c:e7:88:cb:bd:1a:b7:82:9d:b8:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B7:16:DB:C9:9E:1A:BC:4D:B7:FD:6A:46:99:F9:C0:6A:D5:2C:2C
            X509v3 Authority Key Identifier:
                keyid:4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:a4:bb:98:cf:f5:71:14:59:1e:ba:a5:3e:e4:70:3e:44:d0:
         42:66:6b:a3:ef:a6:d6:ec:c1:42:f5:c4:83:3d:c0:58:57:47:
         ac:44:7d:78:79:0a:58:f9:26:f9:09:78:90:14:b9:27:57:c6:
         59:90:92:c5:eb:99:6d:7d:0e:14:6e:fd:69:24:a4:88:f2:a6:
         0f:9c:98:6b:84:8a:d4:4a:0c:dd:8e:2d:8a:ff:7b:9e:ee:c5:
         ac:d0:37:26:57:c0:cb:7c:c1:3a:6b:90:32:b6:d3:16:97:cd:
         51:6e:73:6e:cf:e3:e0:33:ed:24:63:39:60:2c:fe:c7:3a:7c:
         fd:ca:5c:51:e5:19:6f:82:14:12:5a:de:08:6f:f1:dd:b0:8d:
         4c:ab:71:f0:5c:4b:37:af:0c:b0:cf:df:87:77:ce:fd:d8:78:
         db:a0:5c:a8:b7:ac:fc:b3:5b:1a:6b:7e:90:9a:08:c4:32:7a:
         35:4a:ea:e9:d1:a2:d9:43:52:0b:58:17:70:c3:6d:71:9c:4d:
         64:7c:5a:9e:5e:78:61:c2:fd:5f:ae:22:4d:43:c1:39:c2:3e:
         18:f2:01:51:78:eb:3e:bf:28:c9:14:2e:f1:5f:97:34:a3:6c:
         09:60:45:f4:e7:41:13:45:d4:fa:17:97:aa:27:ca:9c:2b:1f:
         82:0d:29:cd
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUc+vGXWwXOjiAsI7CxIvEZ9qW8QEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY0MEJENzA5RDAzNDBCN0U4OENERjlEODAxMDlBOTM1
QzU3M0Q0RDAeFw0yNjA1MDMwMjQxNTJaFw0yNzA1MDIwMjQ2NTJaMDMxMTAvBgNV
BAMTKDQxQjcxNkRCQzk5RTFBQkM0REI3RkQ2QTQ2OTlGOUMwNkFENTJDMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1bh3PbATi9KyHASmVHSclrIF
1iB6Y3DVWM/ITBOGELGPXTEn1oE9UPDqL1Jl3R5J8Trn6xUyaX5k467l2CGrlXZG
RdXJFN/JGTyhG1vOEiCP4FGz5MZpOM3/TR3XUgcq3LwEx1Fz521DnRy7suK/he5l
t5BUrNyLk3DSdlcVy5L7xstUgWftXecfF7ZBjfVqlaf5MlhgJWIh+7hJP3OEJ2bw
4K6oTOvA47BnssQID/tHys81RfAUrymqXt7yCevzshBH2q4I4dy5dt9QsufGmU94
4/0KYINDrKP+OSUa4S0TskYmMYB3Ua1fZOU5xtYir6HhHOeIy70at4KduCEhAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUQbcW28meGrxNt/1qRpn5wGrVLCwwHwYDVR0j
BBgwFoAUT0C9cJ0DQLfojN+dgBCak1xXPU0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODBmNjIxNzYtZTE2NC00OTJjLThhNzItOTljMWUxNjFiMmRmLzAvNEY0MEJENzA5
RDAzNDBCN0U4OENERjlEODAxMDlBOTM1QzU3M0Q0RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RjQwQkQ3MDlEMDM0MEI3RTg4Q0RGOUQ4MDEwOUE5MzVDNTcz
RDRELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgwZjYyMTc2LWUxNjQtNDkyYy04
YTcyLTk5YzFlMTYxYjJkZi8wLzMxMzAzMzJlMzEzNTMzMmUzMTM4MzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzEzMDMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmbwwDQYJ
KoZIhvcNAQELBQADggEBACyku5jP9XEUWR66pT7kcD5E0EJma6PvptbswUL1xIM9
wFhXR6xEfXh5Clj5JvkJeJAUuSdXxlmQksXrmW19DhRu/WkkpIjypg+cmGuEitRK
DN2OLYr/e57uxazQNyZXwMt8wTprkDK20xaXzVFuc27P4+Az7SRjOWAs/sc6fP3K
XFHlGW+CFBJa3ghv8d2wjUyrcfBcSzevDLDP34d3zv3YeNugXKi3rPyzWxprfpCa
CMQyejVK6unRotlDUgtYF3DDbXGcTWR8Wp5eeGHC/V+uIk1DwTnCPhjyAVF46z6/
KMkULvFflzSjbAlgRfTnQRNF1PoXl6onypwrH4INKc0=
-----END CERTIFICATE-----
Generated at Wed May 13 06:47:59 2026 by rpki-client