Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa
File:                     3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (raw, json)
Hash identifier:          TTP/IyS3Nws7WQbB4mb0u1b9tLXn20HyAh2jtbcNLlc=
Subject key identifier:   0F:3C:AE:07:76:22:7D:FB:4F:0F:C5:F1:64:02:19:23:71:C2:CA:34
Certificate issuer:       /CN=521B83183A9325633BB6ADA03FF17A79CADB35DF
Certificate serial:       D6EFC9D301C125BC1F853F980CB7369BC23CFE
Authority key identifier: 52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa
Signing time:             Sun 03 May 2026 02:47:31 +0000
ROA not before:           Sun 03 May 2026 02:42:31 +0000
ROA not after:            Sun 02 May 2027 02:47:31 +0000
asID:                     149353
IP address blocks:        103.177.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl
                          rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d6:ef:c9:d3:01:c1:25:bc:1f:85:3f:98:0c:b7:36:9b:c2:3c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521B83183A9325633BB6ADA03FF17A79CADB35DF
        Validity
            Not Before: May  3 02:42:31 2026 GMT
            Not After : May  2 02:47:31 2027 GMT
        Subject: CN=0F3CAE0776227DFB4F0FC5F16402192371C2CA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:85:4b:09:b8:e4:5f:52:49:31:61:ac:dd:
                    5f:5a:bb:29:9c:3d:8c:c2:e5:f2:63:c1:08:67:8c:
                    6f:aa:5b:cb:61:f8:bf:8b:d9:d2:b0:36:36:96:13:
                    87:12:09:0a:b4:2b:f4:eb:9e:dd:52:b9:1e:e0:05:
                    da:de:e6:2e:74:ed:2c:f4:0c:95:f2:92:1a:f7:bf:
                    e8:ab:fd:b6:0f:b3:10:76:b0:54:65:23:5e:1b:77:
                    1c:b5:3c:6e:dd:6e:34:af:9e:02:a5:74:cd:2b:a2:
                    ee:2f:ae:73:9f:0a:0c:f3:35:28:ea:2d:1c:fc:57:
                    8d:d2:df:7e:ae:b6:c8:64:4a:36:9b:95:9e:f5:ac:
                    79:33:1c:f8:5a:de:a6:be:31:7c:31:36:ee:2d:ce:
                    36:d1:a9:c0:28:2f:90:2f:de:73:c7:81:35:be:32:
                    38:95:12:03:e5:52:65:1d:e6:0b:cf:17:e0:7a:13:
                    9a:d9:6a:6e:10:26:c8:11:33:e1:f5:e3:1e:78:be:
                    ec:74:0c:5f:42:93:4d:e1:d6:cc:0b:59:2b:43:bc:
                    90:d7:ca:17:7c:3b:2d:2c:8c:18:da:8c:ea:5d:ab:
                    22:6a:88:e3:97:02:12:72:ed:50:f5:22:e7:ff:39:
                    49:dc:2d:92:ea:09:e3:2d:aa:0a:df:80:f7:02:a1:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3C:AE:07:76:22:7D:FB:4F:0F:C5:F1:64:02:19:23:71:C2:CA:34
            X509v3 Authority Key Identifier:
                keyid:52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:29:2f:ab:9e:c2:16:6d:cd:e5:06:c9:97:0a:14:26:0f:65:
         80:a6:b4:c6:7f:a6:bf:02:a6:9e:3d:1d:5d:84:cc:e0:25:cc:
         84:13:bd:a8:26:3c:57:66:c4:21:41:0f:83:c1:40:8f:22:b3:
         1e:1e:5e:c2:14:55:52:3b:60:fe:bf:0e:f1:c6:4a:ef:d3:4b:
         51:36:87:92:bb:e0:05:13:a7:ed:24:ab:cb:14:15:2d:a0:65:
         72:ff:23:f3:ff:31:56:c1:49:ce:51:aa:da:ed:ac:86:43:f9:
         72:f9:ac:5d:79:b7:df:10:56:08:e9:99:e9:b6:50:d4:98:0e:
         73:a2:d0:d9:35:0a:f2:6d:65:34:36:34:99:e6:4a:ef:c7:8b:
         87:5e:7e:3e:cd:9c:79:b7:18:60:eb:bc:b0:0c:08:2b:90:b3:
         ef:1d:20:5d:97:34:8a:87:32:55:bc:9e:64:49:5f:96:1e:8b:
         e2:89:71:b7:4d:35:66:ab:c4:09:80:6e:6f:8c:c3:21:5b:3d:
         7b:c0:ed:84:58:77:19:c9:42:0f:39:85:4a:12:22:89:c2:49:
         4b:49:44:be:c5:6a:c5:75:a8:2d:3e:26:37:cb:19:6f:ae:44:
         36:97:4e:bc:5c:ee:2c:c1:7b:8f:9a:7d:65:35:19:9f:ce:1a:
         b0:24:65:16
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUANbvydMBwSW8H4U/mAy3NpvCPP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIxQjgzMTgzQTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlD
QURCMzVERjAeFw0yNjA1MDMwMjQyMzFaFw0yNzA1MDIwMjQ3MzFaMDMxMTAvBgNV
BAMTKDBGM0NBRTA3NzYyMjdERkI0RjBGQzVGMTY0MDIxOTIzNzFDMkNBMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNIVLCbjkX1JJMWGs3V9auymc
PYzC5fJjwQhnjG+qW8th+L+L2dKwNjaWE4cSCQq0K/Trnt1SuR7gBdre5i507Sz0
DJXykhr3v+ir/bYPsxB2sFRlI14bdxy1PG7dbjSvngKldM0rou4vrnOfCgzzNSjq
LRz8V43S336utshkSjablZ71rHkzHPha3qa+MXwxNu4tzjbRqcAoL5Av3nPHgTW+
MjiVEgPlUmUd5gvPF+B6E5rZam4QJsgRM+H14x54vux0DF9Ck03h1swLWStDvJDX
yhd8Oy0sjBjajOpdqyJqiOOXAhJy7VD1Iuf/OUncLZLqCeMtqgrfgPcCobthAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUDzyuB3YifftPD8XxZAIZI3HCyjQwHwYDVR0j
BBgwFoAUUhuDGDqTJWM7tq2gP/F6ecrbNd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODM5MmY4OTktZTgzYy00NzA2LWE5YTEtODIyNTZiZDQ4MjM2LzAvNTIxQjgzMTgz
QTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlDQURCMzVERi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MjFCODMxODNBOTMyNTYzM0JCNkFEQTAzRkYxN0E3OUNBREIz
NURGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgzOTJmODk5LWU4M2MtNDcwNi1h
OWExLTgyMjU2YmQ0ODIzNi8wLzMxMzAzMzJlMzEzNzM3MmUzMTM4MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM1MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsb0wDQYJ
KoZIhvcNAQELBQADggEBALopL6uewhZtzeUGyZcKFCYPZYCmtMZ/pr8Cpp49HV2E
zOAlzIQTvagmPFdmxCFBD4PBQI8isx4eXsIUVVI7YP6/DvHGSu/TS1E2h5K74AUT
p+0kq8sUFS2gZXL/I/P/MVbBSc5RqtrtrIZD+XL5rF15t98QVgjpmem2UNSYDnOi
0Nk1CvJtZTQ2NJnmSu/Hi4defj7NnHm3GGDrvLAMCCuQs+8dIF2XNIqHMlW8nmRJ
X5Yei+KJcbdNNWarxAmAbm+MwyFbPXvA7YRYdxnJQg85hUoSIonCSUtJRL7FasV1
qC0+JjfLGW+uRDaXTrxc7izBe4+afWU1GZ/OGrAkZRY=
-----END CERTIFICATE-----
Generated at Wed May 13 12:02:13 2026 by rpki-client