Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
File:                     3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          BFoAAOYL5cXcuIYHdcG6m2LVE3HWh1vuQutXqW1gBIM=
Subject key identifier:   65:5E:22:8C:36:51:65:59:D2:B4:61:F3:7A:9E:1E:7F:5E:B9:2A:32
Certificate issuer:       /CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570
Certificate serial:       7756F77D585CAA64E2A3DD155B2B17F83BDC9AEA
Authority key identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
Signing time:             Sun 03 May 2026 02:49:13 +0000
ROA not before:           Sun 03 May 2026 02:44:13 +0000
ROA not after:            Sun 02 May 2027 02:49:13 +0000
asID:                     139982
IP address blocks:        103.148.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl
                          rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:56:f7:7d:58:5c:aa:64:e2:a3:dd:15:5b:2b:17:f8:3b:dc:9a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570
        Validity
            Not Before: May  3 02:44:13 2026 GMT
            Not After : May  2 02:49:13 2027 GMT
        Subject: CN=655E228C36516559D2B461F37A9E1E7F5EB92A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:7d:a0:df:12:4d:d7:7f:83:a6:97:1b:f5:
                    ba:13:04:d8:46:3d:a8:e5:32:59:b6:98:a4:d7:34:
                    aa:db:10:8d:72:b6:b8:2d:97:7f:83:f3:be:74:1e:
                    69:d2:3b:d0:37:91:0d:2f:f7:2d:74:f6:19:67:df:
                    d0:12:cc:0d:c1:7f:31:5b:81:8c:b5:72:6c:26:78:
                    c6:4a:47:86:bb:ec:b7:a5:4d:0a:ce:d3:1e:cc:7c:
                    df:fa:ad:ca:04:0a:cc:00:fd:e5:4d:73:78:75:12:
                    12:42:93:81:c8:5e:e7:f7:7e:45:bf:1a:0e:45:1e:
                    7b:38:76:d9:e5:11:2e:19:c5:d1:4c:dd:d5:04:1b:
                    4d:c7:40:a1:9c:ba:26:8a:ad:38:0c:5f:a0:c5:7e:
                    ae:77:e8:8a:85:1b:07:b0:1e:3b:94:50:64:b7:7f:
                    46:ee:b7:d2:05:e3:93:98:b1:43:11:b8:ab:ac:02:
                    65:69:b4:54:fd:52:08:2d:98:1b:19:9d:ef:a3:26:
                    07:68:71:11:3c:4f:d0:b2:d0:7d:09:9d:08:fa:7b:
                    a5:28:6c:10:c2:c4:b2:60:66:71:41:58:5a:cc:8b:
                    0f:a6:d2:07:6c:ed:e3:36:b3:15:f3:3c:c3:72:81:
                    91:88:2d:59:67:29:1f:a6:86:e6:27:74:81:43:95:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5E:22:8C:36:51:65:59:D2:B4:61:F3:7A:9E:1E:7F:5E:B9:2A:32
            X509v3 Authority Key Identifier:
                keyid:B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:d2:4d:ba:1b:82:38:6e:e8:0e:9f:08:10:23:c9:96:de:
         99:f6:ca:97:5a:dc:3c:fa:96:e9:c7:29:5d:d6:21:8e:f5:f4:
         0b:9a:73:3b:ee:b6:f5:d0:bb:13:3b:2e:3b:db:ac:22:46:9f:
         8b:a6:24:41:b6:48:11:28:c5:b1:c9:e7:68:5e:b5:82:d1:ba:
         1b:09:1e:4a:52:9d:d7:16:99:45:1c:10:5b:4d:b8:f8:45:5a:
         33:90:0d:71:4c:b3:0e:1c:0d:67:fe:4b:19:e4:78:50:89:69:
         fe:51:bc:06:00:be:ee:98:77:d3:e4:65:31:01:a7:e7:20:8a:
         43:8c:44:d4:f7:27:bd:db:f5:bd:17:ec:a1:3f:c7:81:3b:c9:
         cd:83:f8:62:ff:23:42:46:bf:a5:cb:91:f1:5a:e9:84:88:ac:
         97:28:18:75:ab:09:62:76:5c:f2:dd:8b:d9:4f:ad:76:a0:22:
         29:04:6f:45:14:68:a9:23:e0:fe:ad:3b:d5:44:bd:59:02:73:
         79:62:4e:4a:67:6a:23:d2:eb:e4:81:a3:ae:32:8c:73:9a:9e:
         39:f6:82:76:cc:76:9d:40:80:84:2a:40:ac:2f:b4:ef:3e:a3:
         d6:37:a5:25:22:9f:cc:c6:9d:e6:61:a3:0f:c9:a7:45:0d:34:
         ed:cb:d6:bd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUd1b3fVhcqmTio90VWysX+DvcmuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1
RkU1QTU3MDAeFw0yNjA1MDMwMjQ0MTNaFw0yNzA1MDIwMjQ5MTNaMDMxMTAvBgNV
BAMTKDY1NUUyMjhDMzY1MTY1NTlEMkI0NjFGMzdBOUUxRTdGNUVCOTJBMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc5H2g3xJN13+Dppcb9boTBNhG
PajlMlm2mKTXNKrbEI1ytrgtl3+D8750HmnSO9A3kQ0v9y109hln39ASzA3BfzFb
gYy1cmwmeMZKR4a77LelTQrO0x7MfN/6rcoECswA/eVNc3h1EhJCk4HIXuf3fkW/
Gg5FHns4dtnlES4ZxdFM3dUEG03HQKGcuiaKrTgMX6DFfq536IqFGwewHjuUUGS3
f0but9IF45OYsUMRuKusAmVptFT9UggtmBsZne+jJgdocRE8T9Cy0H0JnQj6e6Uo
bBDCxLJgZnFBWFrMiw+m0gds7eM2sxXzPMNygZGILVlnKR+mhuYndIFDlSKhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZV4ijDZRZVnStGHzep4ef165KjIwHwYDVR0j
BBgwFoAUuC/fxibnPLImj1se/vV2cV/lpXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODlmMjZmYjgtNzJjNC00OWQ5LTljYmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYy
NkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1RkU1QTU3MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CODJGREZDNjI2RTczQ0IyMjY4RjVCMUVGRUY1NzY3MTVGRTVB
NTcwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg5ZjI2ZmI4LTcyYzQtNDlkOS05
Y2JlLTgyMjYzOTcyNzFhMi8wLzMxMzAzMzJlMzEzNDM4MmUzNDM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5QtMA0GCSqG
SIb3DQEBCwUAA4IBAQB7+dJNuhuCOG7oDp8IECPJlt6Z9sqXWtw8+pbpxyld1iGO
9fQLmnM77rb10LsTOy4726wiRp+LpiRBtkgRKMWxyedoXrWC0bobCR5KUp3XFplF
HBBbTbj4RVozkA1xTLMOHA1n/ksZ5HhQiWn+UbwGAL7umHfT5GUxAafnIIpDjETU
9ye92/W9F+yhP8eBO8nNg/hi/yNCRr+ly5HxWumEiKyXKBh1qwlidlzy3YvZT612
oCIpBG9FFGipI+D+rTvVRL1ZAnN5Yk5KZ2oj0uvkgaOuMoxzmp459oJ2zHadQICE
KkCsL7TvPqPWN6UlIp/Mxp3mYaMPyadFDTTty9a9
-----END CERTIFICATE-----
Generated at Wed May 13 10:26:26 2026 by rpki-client