Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa
File:                     3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          NS29Duq3Ad0Oay5mRumCSue0EKVMXVW+d3uV6la1Mk4=
Subject key identifier:   51:5D:A5:D1:3D:30:77:B6:17:61:47:CB:D9:21:47:7B:FA:B0:A5:8D
Certificate issuer:       /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial:       7DFFDBCC9C602AC216C00909C598CC94020DAB42
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa
Signing time:             Sun 03 May 2026 02:52:13 +0000
ROA not before:           Sun 03 May 2026 02:47:13 +0000
ROA not after:            Sun 02 May 2027 02:52:13 +0000
asID:                     131736
IP address blocks:        103.132.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
                          rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ff:db:cc:9c:60:2a:c2:16:c0:09:09:c5:98:cc:94:02:0d:ab:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
        Validity
            Not Before: May  3 02:47:13 2026 GMT
            Not After : May  2 02:52:13 2027 GMT
        Subject: CN=515DA5D13D3077B6176147CBD921477BFAB0A58D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:5b:fe:72:fe:d9:f9:e3:c9:a5:1d:f2:6a:
                    09:f1:f5:94:03:2a:14:2d:22:c7:93:d0:76:15:80:
                    f5:35:8f:c7:96:fa:e7:33:f9:48:03:89:41:7e:5c:
                    a7:d5:2b:81:66:3f:52:04:1d:ce:40:d6:b8:6e:28:
                    5b:65:38:8e:6a:f0:53:3f:2b:d6:4d:d6:a6:95:e4:
                    7f:d9:80:0c:41:39:39:a2:4e:c0:fd:38:ee:99:73:
                    3f:b6:64:6f:b6:67:a3:ee:10:e9:c0:6a:a1:83:d3:
                    96:0f:4e:63:56:a1:9a:b3:8b:0a:9c:5b:d1:cd:79:
                    95:72:8a:b2:1c:f1:3c:02:dc:b8:56:52:9e:4f:33:
                    0a:46:23:00:44:28:ee:d8:21:12:84:b7:34:c8:37:
                    b8:8c:a1:b0:0d:fc:1b:f3:36:bc:dd:96:8c:80:8a:
                    9b:ea:39:d1:70:1d:80:dd:89:9f:79:bd:4f:6f:12:
                    f7:a9:fc:14:60:1c:38:73:27:d6:88:c0:ff:35:3f:
                    c1:fe:a1:d2:00:42:35:f2:d8:dc:a7:ce:5e:c3:b4:
                    72:16:b3:44:40:ca:3a:c0:d9:89:c4:d6:48:24:6c:
                    d1:5e:85:43:8b:f1:ee:47:60:fa:fe:59:60:41:92:
                    8c:c7:5c:b8:6e:ed:b6:98:d5:da:00:d3:b4:0a:35:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5D:A5:D1:3D:30:77:B6:17:61:47:CB:D9:21:47:7B:FA:B0:A5:8D
            X509v3 Authority Key Identifier:
                keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:45:f2:65:d3:62:53:b6:12:4d:a8:f5:f7:4a:c7:20:10:d9:
         35:b0:cc:58:9f:55:7e:34:61:c2:dc:1b:88:31:f0:e8:15:93:
         51:03:4c:bb:14:9c:65:7f:44:27:37:8a:78:b7:e0:98:ab:d5:
         38:69:ed:a2:37:ed:63:33:f4:65:aa:de:73:f7:11:a4:9c:43:
         19:dc:f8:7e:ed:f3:00:2e:9a:af:d1:f3:4c:d4:d8:30:17:aa:
         e9:8f:c5:c7:a6:25:58:51:0e:89:2b:3a:ad:86:99:db:d3:72:
         09:bd:03:93:d9:98:f1:ea:3b:b9:1c:e7:24:b9:44:de:8f:fd:
         e2:07:bd:e9:59:77:4b:87:b0:7d:2b:4e:88:3d:a2:9b:a4:de:
         9e:40:e8:d4:8e:46:1c:c6:ab:c3:8d:bf:96:20:59:13:6b:2f:
         2e:b1:6e:8d:66:ae:ed:42:1c:13:f9:06:42:d6:a9:54:7a:1c:
         8c:c7:e4:1e:d3:88:5e:1c:80:9d:5e:c2:91:3d:25:1a:3b:95:
         64:41:29:f6:64:d8:d1:d6:60:09:fe:48:5b:9f:06:2c:72:85:
         70:26:01:24:4d:1c:65:e9:c8:73:d1:67:f4:6e:f9:38:72:08:
         60:c3:b0:2f:b8:ac:9c:5a:0f:3d:52:a0:88:71:ff:c7:6b:e1:
         90:28:db:32
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUff/bzJxgKsIWwAkJxZjMlAINq0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVBQjIyREVEQTE3Qzg2MzM1MjBDNzY1QzFCRUNFNjg1
MkI4QkQ3MDAeFw0yNjA1MDMwMjQ3MTNaFw0yNzA1MDIwMjUyMTNaMDMxMTAvBgNV
BAMTKDUxNURBNUQxM0QzMDc3QjYxNzYxNDdDQkQ5MjE0NzdCRkFCMEE1OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXEFv+cv7Z+ePJpR3yagnx9ZQD
KhQtIseT0HYVgPU1j8eW+ucz+UgDiUF+XKfVK4FmP1IEHc5A1rhuKFtlOI5q8FM/
K9ZN1qaV5H/ZgAxBOTmiTsD9OO6Zcz+2ZG+2Z6PuEOnAaqGD05YPTmNWoZqziwqc
W9HNeZVyirIc8TwC3LhWUp5PMwpGIwBEKO7YIRKEtzTIN7iMobAN/BvzNrzdloyA
ipvqOdFwHYDdiZ95vU9vEvep/BRgHDhzJ9aIwP81P8H+odIAQjXy2Nynzl7DtHIW
s0RAyjrA2YnE1kgkbNFehUOL8e5HYPr+WWBBkozHXLhu7baY1doA07QKNYeNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUUV2l0T0wd7YXYUfL2SFHe/qwpY0wHwYDVR0j
BBgwFoAULqsi3toXyGM1IMdlwb7OaFK4vXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTI1Y2RhMzYtNjkzYS00YzFhLWJhOWUtZTBlMTc4MTEyMTQwLzAvMkVBQjIyREVE
QTE3Qzg2MzM1MjBDNzY1QzFCRUNFNjg1MkI4QkQ3MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yRUFCMjJERURBMTdDODYzMzUyMEM3NjVDMUJFQ0U2ODUyQjhC
RDcwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkyNWNkYTM2LTY5M2EtNGMxYS1i
YTllLWUwZTE3ODExMjE0MC8wLzMxMzAzMzJlMzEzMzMyMmUzMTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4QNMA0GCSqG
SIb3DQEBCwUAA4IBAQCyRfJl02JTthJNqPX3SscgENk1sMxYn1V+NGHC3BuIMfDo
FZNRA0y7FJxlf0QnN4p4t+CYq9U4ae2iN+1jM/Rlqt5z9xGknEMZ3Ph+7fMALpqv
0fNM1NgwF6rpj8XHpiVYUQ6JKzqthpnb03IJvQOT2Zjx6ju5HOckuUTej/3iB73p
WXdLh7B9K06IPaKbpN6eQOjUjkYcxqvDjb+WIFkTay8usW6NZq7tQhwT+QZC1qlU
ehyMx+Qe04heHICdXsKRPSUaO5VkQSn2ZNjR1mAJ/khbnwYscoVwJgEkTRxl6chz
0Wf0bvk4cghgw7AvuKycWg89UqCIcf/Ha+GQKNsy
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:15 2026 by rpki-client