Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa
File:                     3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=
Subject key identifier:   E7:46:3C:CB:7B:59:38:AC:AA:81:F5:08:57:25:FB:D4:A3:E6:02:8B
Certificate issuer:       /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269
Certificate serial:       78F35ED809A332064C059A26F44584546DB36246
Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa
Signing time:             Sun 03 May 2026 02:49:26 +0000
ROA not before:           Sun 03 May 2026 02:44:26 +0000
ROA not after:            Sun 02 May 2027 02:49:26 +0000
asID:                     140443
IP address blocks:        103.149.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl
                          rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f3:5e:d8:09:a3:32:06:4c:05:9a:26:f4:45:84:54:6d:b3:62:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269
        Validity
            Not Before: May  3 02:44:26 2026 GMT
            Not After : May  2 02:49:26 2027 GMT
        Subject: CN=E7463CCB7B5938ACAA81F5085725FBD4A3E6028B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:5d:8e:4f:d4:f9:90:33:d9:03:9f:50:aa:
                    7c:fd:0c:1b:8c:9a:a2:7f:03:45:1f:06:2c:b3:24:
                    c7:02:21:ba:a9:f7:35:14:ac:bf:42:8d:bd:c4:3d:
                    e8:64:8e:cc:92:01:f2:e8:3d:38:75:a2:97:3e:60:
                    c1:b5:f1:e3:81:99:ad:2a:18:f2:d5:34:21:62:1a:
                    51:a2:fd:1b:a1:ee:99:12:99:f6:ca:e7:dc:9e:5f:
                    9c:be:d4:d0:8d:b9:1c:1e:73:a2:f3:78:48:c5:a9:
                    a3:23:47:a2:e3:2c:df:3b:32:d9:d8:ee:04:d8:1a:
                    ef:e7:d1:c3:6f:7a:e5:2e:64:72:7c:bf:bc:87:a6:
                    b8:88:2e:aa:29:45:2d:81:90:1c:04:01:a3:ef:da:
                    10:ff:87:9e:f0:a1:55:7d:e1:61:1d:59:3a:95:e9:
                    94:fd:47:04:07:61:d5:a9:56:c3:e2:b9:97:6d:07:
                    78:01:6b:6d:46:7b:f1:56:bb:99:9d:17:9e:38:4a:
                    71:6a:27:d8:e1:a6:6d:4b:56:b4:2e:83:b7:f1:02:
                    20:e0:41:84:6a:f6:e7:ae:58:5e:f0:01:3c:95:c1:
                    1e:2f:a1:6d:af:2a:f1:80:23:5c:2c:31:45:9c:52:
                    48:eb:91:64:ff:76:89:d1:5a:8a:bc:60:b4:39:7d:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:3C:CB:7B:59:38:AC:AA:81:F5:08:57:25:FB:D4:A3:E6:02:8B
            X509v3 Authority Key Identifier:
                keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:12:a5:74:a2:e3:ba:56:c5:28:ab:7f:f5:4e:8e:a3:f5:9e:
         3a:7d:52:fc:60:cc:82:69:7c:b4:75:ae:e3:ef:b1:aa:b9:8f:
         30:11:94:e6:88:50:26:0b:a9:ac:af:bc:0d:4e:cd:b2:a4:71:
         46:4e:37:bd:a8:d2:11:35:a4:c2:1d:3f:96:86:c4:75:fe:72:
         30:1e:b0:19:1b:b3:11:ba:d1:b4:ff:60:3a:18:02:be:e0:99:
         cf:6b:c5:60:40:f8:e9:20:57:44:92:a7:7f:7e:3d:6b:2d:21:
         e9:de:15:b6:78:ba:6c:e7:73:f5:36:5f:0d:41:1c:6e:60:b9:
         6f:1d:87:57:36:30:0d:3d:a5:16:6e:28:53:e0:98:ea:93:b8:
         56:28:b4:91:44:81:ab:e4:68:2e:f3:76:2f:92:00:44:f1:bc:
         93:f4:c4:db:ea:2e:b8:c8:47:08:05:63:af:d2:10:1d:ea:d6:
         46:a1:51:e2:99:93:0e:ff:ec:fc:18:88:69:ad:f8:50:f6:86:
         5b:3b:79:65:89:9e:a9:c5:a2:7a:43:99:e8:02:4f:eb:b7:2c:
         4d:7a:9d:c8:7e:9d:fd:61:67:b8:3b:84:95:4a:a9:fe:93:0b:
         52:00:b0:93:ed:17:ba:9c:64:b8:c0:a5:99:fa:c2:41:8b:9f:
         3b:5f:02:6a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUePNe2AmjMgZMBZom9EWEVG2zYkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy
MjgzRTI2OTAeFw0yNjA1MDMwMjQ0MjZaFw0yNzA1MDIwMjQ5MjZaMDMxMTAvBgNV
BAMTKEU3NDYzQ0NCN0I1OTM4QUNBQTgxRjUwODU3MjVGQkQ0QTNFNjAyOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtd12OT9T5kDPZA59Qqnz9DBuM
mqJ/A0UfBiyzJMcCIbqp9zUUrL9Cjb3EPehkjsySAfLoPTh1opc+YMG18eOBma0q
GPLVNCFiGlGi/Ruh7pkSmfbK59yeX5y+1NCNuRwec6LzeEjFqaMjR6LjLN87MtnY
7gTYGu/n0cNveuUuZHJ8v7yHpriILqopRS2BkBwEAaPv2hD/h57woVV94WEdWTqV
6ZT9RwQHYdWpVsPiuZdtB3gBa21Ge/FWu5mdF544SnFqJ9jhpm1LVrQug7fxAiDg
QYRq9ueuWF7wATyVwR4voW2vKvGAI1wsMUWcUkjrkWT/donRWoq8YLQ5fSn1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU50Y8y3tZOKyqgfUIVyX71KPmAoswHwYDVR0j
BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0
QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF
MjY5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhhZThkYjM4LTYzYTgtNDEzYy1h
OWY2LWNjMjIzYWZhNGE3NS8wLzMxMzAzMzJlMzEzNDM5MmUzMTM3MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlbAwDQYJ
KoZIhvcNAQELBQADggEBAGESpXSi47pWxSirf/VOjqP1njp9UvxgzIJpfLR1ruPv
saq5jzARlOaIUCYLqayvvA1OzbKkcUZON72o0hE1pMIdP5aGxHX+cjAesBkbsxG6
0bT/YDoYAr7gmc9rxWBA+OkgV0SSp39+PWstIeneFbZ4umznc/U2Xw1BHG5guW8d
h1c2MA09pRZuKFPgmOqTuFYotJFEgavkaC7zdi+SAETxvJP0xNvqLrjIRwgFY6/S
EB3q1kahUeKZkw7/7PwYiGmt+FD2hls7eWWJnqnFonpDmegCT+u3LE16nch+nf1h
Z7g7hJVKqf6TC1IAsJPtF7qcZLjApZn6wkGLnztfAmo=
-----END CERTIFICATE-----
Generated at Wed May 13 09:12:50 2026 by rpki-client