Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa
File:                     3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (raw, json)
Hash identifier:          LhpVOA5UL4JEuPKJJ4uKvkLQntRaGiyJu2Bj9BsH2z8=
Subject key identifier:   DC:EC:4D:75:D6:83:E5:EF:00:39:52:F2:49:75:64:D7:60:2B:D3:CE
Certificate issuer:       /CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
Certificate serial:       65528C7B0945D759E9A2C8C25763B609C2970AB2
Authority key identifier: 18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa
Signing time:             Sun 03 May 2026 02:52:44 +0000
ROA not before:           Sun 03 May 2026 02:47:44 +0000
ROA not after:            Sun 02 May 2027 02:52:44 +0000
asID:                     138129
IP address blocks:        103.132.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl
                          rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:52:8c:7b:09:45:d7:59:e9:a2:c8:c2:57:63:b6:09:c2:97:0a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
        Validity
            Not Before: May  3 02:47:44 2026 GMT
            Not After : May  2 02:52:44 2027 GMT
        Subject: CN=DCEC4D75D683E5EF003952F2497564D7602BD3CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:87:02:da:54:67:b2:c8:87:c7:2b:d5:d4:
                    f0:45:01:cb:d3:7d:cb:1a:44:05:8b:d0:b7:80:06:
                    3c:bc:83:d9:58:5b:d9:6c:c2:93:55:87:25:bb:54:
                    32:29:fc:31:7d:ec:2f:f7:66:55:74:18:d4:32:bf:
                    10:43:c4:c0:5d:ba:b7:02:0e:26:83:94:ce:52:d3:
                    c8:e4:82:6d:f1:39:51:58:78:fa:03:26:3c:ae:14:
                    9f:14:e5:ca:f3:81:66:35:01:2c:fe:18:ba:30:97:
                    d0:fd:6f:43:69:63:04:1e:8d:a5:5b:43:63:ed:7c:
                    64:17:dd:e1:83:4d:c4:d4:e5:68:75:f2:05:25:8a:
                    d2:8a:53:e1:ac:94:7a:26:eb:b2:db:c4:5c:6a:96:
                    cd:44:1d:72:34:88:15:42:61:35:ad:ec:5f:ea:23:
                    cf:f6:75:17:41:49:c9:37:67:1e:2c:b7:8a:5f:fc:
                    90:92:97:71:83:60:cf:4b:48:ed:73:9e:d5:5d:7f:
                    95:1b:67:13:d1:f8:37:9a:da:ca:cd:f4:58:42:ec:
                    71:7f:c7:a7:b5:3e:ba:00:9e:0f:f0:df:cb:4f:aa:
                    2e:b6:af:03:bc:6b:94:27:d6:76:4d:b8:4d:56:6b:
                    c1:cc:d6:83:68:04:4a:49:f2:87:ac:58:6f:ac:e3:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EC:4D:75:D6:83:E5:EF:00:39:52:F2:49:75:64:D7:60:2B:D3:CE
            X509v3 Authority Key Identifier:
                keyid:18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:5f:0c:9e:e6:2b:61:24:03:10:f7:f4:5d:dd:6b:ca:44:65:
         93:73:dd:bb:6f:78:c3:9e:74:ba:b0:93:9e:29:c3:38:5b:74:
         05:7c:b8:bb:7b:7a:f4:3d:8d:9f:60:38:f0:85:51:b7:7a:b1:
         c8:8d:0a:1b:05:8d:8c:0c:a0:a3:70:7c:04:ff:0c:81:c5:9d:
         30:63:96:90:e4:40:ac:99:21:56:7a:30:f6:c5:44:45:df:c1:
         f2:7c:35:f1:fc:7c:51:f2:e8:e6:19:bb:99:ce:60:c5:a3:27:
         03:b6:64:0c:ae:c0:0d:88:e7:5b:7c:20:3c:be:fa:31:f5:12:
         f9:81:b6:4b:93:e1:a4:bf:5c:69:c3:60:ca:aa:23:8f:e7:93:
         70:52:6c:24:6f:c7:e0:7d:d6:1b:4a:fc:28:ea:80:47:7a:98:
         7a:12:c7:73:3e:93:82:3e:74:1a:04:20:c4:d2:d6:c5:1b:bb:
         c7:7c:f5:ea:54:fa:44:26:06:8e:3c:30:4c:47:55:47:c8:44:
         28:97:92:a4:18:40:d8:58:26:62:05:62:8a:00:4f:30:0c:01:
         4c:f1:6e:b0:e9:69:87:9c:a2:8e:e2:55:58:51:42:3a:15:cc:
         3d:11:38:55:00:04:43:0c:86:cd:17:07:1b:2b:c6:ca:fe:f2:
         5c:30:84:07
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZVKMewlF11nposjCV2O2CcKXCrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgyQkY4Nzk4MkU4Q0NGRkY4NzhBMTJGNjBDMzYxMEEy
N0VCNjM3NDAeFw0yNjA1MDMwMjQ3NDRaFw0yNzA1MDIwMjUyNDRaMDMxMTAvBgNV
BAMTKERDRUM0RDc1RDY4M0U1RUYwMDM5NTJGMjQ5NzU2NEQ3NjAyQkQzQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7YcC2lRnssiHxyvV1PBFAcvT
fcsaRAWL0LeABjy8g9lYW9lswpNVhyW7VDIp/DF97C/3ZlV0GNQyvxBDxMBdurcC
DiaDlM5S08jkgm3xOVFYePoDJjyuFJ8U5crzgWY1ASz+GLowl9D9b0NpYwQejaVb
Q2PtfGQX3eGDTcTU5Wh18gUlitKKU+GslHom67LbxFxqls1EHXI0iBVCYTWt7F/q
I8/2dRdBSck3Zx4st4pf/JCSl3GDYM9LSO1zntVdf5UbZxPR+Dea2srN9FhC7HF/
x6e1ProAng/w38tPqi62rwO8a5Qn1nZNuE1Wa8HM1oNoBEpJ8oesWG+s42ibAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU3OxNddaD5e8AOVLySXVk12Ar084wHwYDVR0j
BBgwFoAUGCv4eYLozP/4eKEvYMNhCifrY3QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTQ5Yzg2ODAtYmQwZi00YTRmLTk5NmQtMjEwMmEwNTM1Mzc0LzAvMTgyQkY4Nzk4
MkU4Q0NGRkY4NzhBMTJGNjBDMzYxMEEyN0VCNjM3NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xODJCRjg3OTgyRThDQ0ZGRjg3OEExMkY2MEMzNjEwQTI3RUI2
Mzc0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk0OWM4NjgwLWJkMGYtNGE0Zi05
OTZkLTIxMDJhMDUzNTM3NC8wLzMxMzAzMzJlMzEzMzMyMmUzMjMzMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnhO0wDQYJ
KoZIhvcNAQELBQADggEBAD9fDJ7mK2EkAxD39F3da8pEZZNz3btveMOedLqwk54p
wzhbdAV8uLt7evQ9jZ9gOPCFUbd6sciNChsFjYwMoKNwfAT/DIHFnTBjlpDkQKyZ
IVZ6MPbFREXfwfJ8NfH8fFHy6OYZu5nOYMWjJwO2ZAyuwA2I51t8IDy++jH1EvmB
tkuT4aS/XGnDYMqqI4/nk3BSbCRvx+B91htK/CjqgEd6mHoSx3M+k4I+dBoEIMTS
1sUbu8d89epU+kQmBo48MExHVUfIRCiXkqQYQNhYJmIFYooATzAMAUzxbrDpaYec
oo7iVVhRQjoVzD0ROFUABEMMhs0XBxsrxsr+8lwwhAc=
-----END CERTIFICATE-----
Generated at Wed May 13 11:58:40 2026 by rpki-client