Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa
File:                     3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (raw, json)
Hash identifier:          Q63O5LgByYAATkaug4pVt8bzE+ZHKwWLFzPYd2unh+E=
Subject key identifier:   E1:A0:98:18:76:23:FD:B5:41:D4:BD:7C:07:49:59:97:7C:04:87:B1
Certificate issuer:       /CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2
Certificate serial:       147F2878F498F96EAD431B6F7D9A832BEAA02EB6
Authority key identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa
Signing time:             Sun 03 May 2026 02:51:33 +0000
ROA not before:           Sun 03 May 2026 02:46:33 +0000
ROA not after:            Sun 02 May 2027 02:51:33 +0000
asID:                     141074
IP address blocks:        103.155.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl
                          rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7f:28:78:f4:98:f9:6e:ad:43:1b:6f:7d:9a:83:2b:ea:a0:2e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2
        Validity
            Not Before: May  3 02:46:33 2026 GMT
            Not After : May  2 02:51:33 2027 GMT
        Subject: CN=E1A098187623FDB541D4BD7C074959977C0487B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:ca:e5:00:7a:06:d7:1f:f0:71:68:4a:e6:
                    57:5c:87:a3:83:5a:be:f8:ea:10:b0:10:ab:2c:d8:
                    ba:50:a3:75:1d:c1:38:1d:e6:68:98:7c:f9:ff:13:
                    e3:0c:78:73:1f:50:eb:83:80:4f:52:86:23:2c:75:
                    d8:f7:46:a2:0f:28:2b:74:64:5f:b9:72:89:98:92:
                    b0:82:e5:ea:a7:7f:4f:73:ed:7f:0a:60:9d:c4:92:
                    19:52:f4:0b:20:dd:53:32:0e:0d:a5:4d:4f:c3:14:
                    04:df:09:87:d3:d8:90:38:ab:b4:3a:fd:dc:60:52:
                    85:da:d0:b4:5e:52:7e:26:8b:4d:d9:17:a1:07:61:
                    4e:7d:57:4e:ca:b5:5b:07:30:57:f5:77:fc:1c:42:
                    85:0f:e7:60:27:f9:cd:37:00:b0:65:19:3e:a5:2e:
                    76:91:15:39:2d:4f:8a:6c:43:6d:12:9d:ac:45:bc:
                    57:40:c1:fc:3c:e8:29:e3:1c:35:9c:31:70:82:ed:
                    5a:bd:5b:4a:24:a6:ae:ff:aa:4f:03:9c:0e:00:bf:
                    bf:cc:7e:68:01:9d:c2:9b:ce:a9:71:9e:02:de:72:
                    7e:cd:36:b1:a1:0e:09:a6:ce:b8:1f:78:54:3f:7a:
                    52:43:14:68:6c:d9:f4:53:44:6d:13:2f:71:cc:d3:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A0:98:18:76:23:FD:B5:41:D4:BD:7C:07:49:59:97:7C:04:87:B1
            X509v3 Authority Key Identifier:
                keyid:31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:16:34:17:00:f2:2a:83:44:8d:bb:49:47:fd:56:23:d1:64:
         a8:61:b7:eb:18:be:6b:8c:93:f8:a5:26:3f:eb:34:ed:ce:86:
         ee:d7:27:1d:55:10:a2:fa:6f:73:7b:fa:8c:8d:cd:63:4b:22:
         e3:5c:00:49:be:8f:7c:01:83:3f:db:87:e5:30:26:1b:fb:90:
         3a:dc:57:81:3f:c7:af:5a:11:42:bd:59:5c:fa:d3:ca:9d:5b:
         09:a4:2e:fd:c9:c7:8d:4f:ec:9b:7b:09:58:c1:4a:54:78:b2:
         fa:89:a7:79:be:a9:d0:fc:7a:a8:47:63:15:aa:e7:2c:12:50:
         65:e5:4a:e1:17:f0:41:fc:f6:f1:0d:59:20:0f:c8:5b:cb:26:
         cb:d1:b2:a0:fc:89:fb:3b:0e:b5:3d:79:fa:59:4a:e3:57:98:
         17:4f:7c:21:0e:00:ff:b5:47:06:bb:42:82:02:88:69:9a:b2:
         43:4d:9f:20:2c:6b:4f:1b:a4:37:1f:a4:4f:ce:8e:a8:f9:28:
         2b:08:d6:6d:f0:be:9f:74:79:9e:08:c7:57:03:1c:1d:fb:97:
         7f:cb:6d:ce:f8:67:ae:8e:7a:3f:54:5e:a2:66:ef:82:4f:31:
         7d:b6:b4:46:27:3f:39:91:9e:40:df:d1:00:5c:52:3e:4e:37:
         44:d9:12:20
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFH8oePSY+W6tQxtvfZqDK+qgLrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEy
RkVFM0ZBMjAeFw0yNjA1MDMwMjQ2MzNaFw0yNzA1MDIwMjUxMzNaMDMxMTAvBgNV
BAMTKEUxQTA5ODE4NzYyM0ZEQjU0MUQ0QkQ3QzA3NDk1OTk3N0MwNDg3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3srlAHoG1x/wcWhK5ldch6OD
Wr746hCwEKss2LpQo3UdwTgd5miYfPn/E+MMeHMfUOuDgE9ShiMsddj3RqIPKCt0
ZF+5comYkrCC5eqnf09z7X8KYJ3EkhlS9Asg3VMyDg2lTU/DFATfCYfT2JA4q7Q6
/dxgUoXa0LReUn4mi03ZF6EHYU59V07KtVsHMFf1d/wcQoUP52An+c03ALBlGT6l
LnaRFTktT4psQ20SnaxFvFdAwfw86CnjHDWcMXCC7Vq9W0okpq7/qk8DnA4Av7/M
fmgBncKbzqlxngLecn7NNrGhDgmmzrgfeFQ/elJDFGhs2fRTRG0TL3HM0+L9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4aCYGHYj/bVB1L18B0lZl3wEh7EwHwYDVR0j
BBgwFoAUMRT+ooIGFLbov+MPs+Dk4S/uP6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTA3NjA4Y2UtYzNmOC00NGViLWFlZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4
MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEyRkVFM0ZBMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMTE0RkVBMjgyMDYxNEI2RThCRkUzMEZCM0UwRTRFMTJGRUUz
RkEyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwNzYwOGNlLWMzZjgtNDRlYi1h
ZWU3LWI3ODRhZTIwYzljNy8wLzMxMzAzMzJlMzEzNTM1MmUzMjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5sZMA0GCSqG
SIb3DQEBCwUAA4IBAQAjFjQXAPIqg0SNu0lH/VYj0WSoYbfrGL5rjJP4pSY/6zTt
zobu1ycdVRCi+m9ze/qMjc1jSyLjXABJvo98AYM/24flMCYb+5A63FeBP8evWhFC
vVlc+tPKnVsJpC79yceNT+ybewlYwUpUeLL6iad5vqnQ/HqoR2MVqucsElBl5Urh
F/BB/PbxDVkgD8hbyybL0bKg/In7Ow61PXn6WUrjV5gXT3whDgD/tUcGu0KCAohp
mrJDTZ8gLGtPG6Q3H6RPzo6o+SgrCNZt8L6fdHmeCMdXAxwd+5d/y23O+Geujno/
VF6iZu+CTzF9trRGJz85kZ5A39EAXFI+TjdE2RIg
-----END CERTIFICATE-----
Generated at Wed May 13 08:39:24 2026 by rpki-client