Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa
File:                     3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (raw, json)
Hash identifier:          XIXVE3WxFWnkjGptM8+qV7znYXNR6ug7ahxtLFcMw2U=
Subject key identifier:   6E:0F:B8:17:36:32:71:A2:CE:EC:A4:D3:31:90:82:0A:63:06:24:78
Certificate issuer:       /CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Certificate serial:       41E9F98F30CA37B7B7A63ABFD52E87DD219F58F3
Authority key identifier: 12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa
Signing time:             Sun 03 May 2026 02:54:41 +0000
ROA not before:           Sun 03 May 2026 02:49:41 +0000
ROA not after:            Sun 02 May 2027 02:54:41 +0000
asID:                     141062
IP address blocks:        103.155.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
                          rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e9:f9:8f:30:ca:37:b7:b7:a6:3a:bf:d5:2e:87:dd:21:9f:58:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
        Validity
            Not Before: May  3 02:49:41 2026 GMT
            Not After : May  2 02:54:41 2027 GMT
        Subject: CN=6E0FB817363271A2CEECA4D33190820A63062478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:a0:e6:1f:24:84:48:2e:81:73:e8:18:6b:
                    21:81:03:d2:b9:9f:03:7f:1d:1c:8c:4a:67:dd:b7:
                    2a:2d:07:f3:9d:10:0d:b7:b6:a8:ad:3d:de:71:75:
                    f4:e8:a8:54:f4:3e:bd:fc:88:d9:86:6e:a0:ea:13:
                    3b:64:3c:a6:6d:ac:6d:0b:03:06:5f:3b:f2:00:4e:
                    c6:31:68:1e:fc:b7:00:f9:ad:4a:32:c4:73:0b:ee:
                    28:bb:e8:12:8c:68:54:9e:2b:fa:b7:d7:38:d2:20:
                    13:a3:e0:da:72:0d:04:90:0c:d2:b9:10:fc:4e:bc:
                    c5:7a:ca:bc:ec:17:3d:fa:08:5c:7c:63:20:ba:9a:
                    14:ab:d0:ea:16:de:1c:5c:23:76:b4:f3:4c:2c:3b:
                    1b:5c:8f:e1:6b:78:82:4f:9d:d3:79:8d:c9:b9:4c:
                    21:ed:e4:42:12:be:b7:4c:6f:1e:ec:e5:d1:74:e5:
                    8b:bb:d0:89:b8:0f:a0:32:75:bd:69:dc:34:ab:9d:
                    e3:09:9d:59:0a:c1:1a:30:3b:13:f2:ef:4c:b0:61:
                    79:dc:f7:92:4c:0c:94:07:2c:94:e9:ff:9e:d1:94:
                    c6:a7:7b:32:cb:65:2c:c1:16:0f:7f:02:89:08:17:
                    c3:0a:1c:a3:32:a1:4b:a6:a2:72:c7:01:6d:33:50:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:B8:17:36:32:71:A2:CE:EC:A4:D3:31:90:82:0A:63:06:24:78
            X509v3 Authority Key Identifier:
                keyid:12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c7:ea:b5:ec:49:a3:f6:5e:e5:e7:43:8b:a8:2a:62:c0:b4:
         63:ae:ea:07:0d:9b:7b:30:2a:2b:3f:09:7f:fa:fb:8e:16:96:
         ab:0f:ab:92:ca:c3:5d:6b:ff:ad:e7:3d:e4:84:df:2c:b3:47:
         92:63:ed:fa:3e:a0:5c:7a:97:db:c4:39:fe:10:3e:78:1b:d8:
         e3:dd:ef:9f:ac:0d:b2:78:ef:58:6f:8b:75:ee:30:7d:d9:2d:
         93:60:5c:e8:26:f6:1f:13:17:1d:88:64:9f:64:6a:b6:f0:6c:
         1b:57:16:6b:ac:65:28:a5:b6:8c:ba:05:14:12:87:a3:17:cb:
         19:16:73:f8:4e:af:de:84:9f:de:39:21:10:ae:03:03:f7:73:
         0d:7a:a6:6f:a4:22:d2:8b:1e:5b:1c:17:4a:eb:e8:8b:a4:36:
         76:1a:eb:ea:dd:71:f0:c2:6c:f0:53:76:ae:09:73:69:d7:cb:
         30:27:76:db:8d:18:22:cb:2e:fc:c9:25:ae:c3:f2:a6:a1:de:
         73:60:68:76:7d:bf:ee:d9:2d:56:28:03:3a:93:98:a6:27:b2:
         36:6a:44:52:5a:20:6a:f6:aa:4a:e0:9e:08:f6:a7:c8:23:a4:
         d8:86:c3:22:8b:b1:80:b7:6b:76:a6:59:c7:5e:bb:c2:0f:99:
         7f:bf:8b:9b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQen5jzDKN7e3pjq/1S6H3SGfWPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyNEY2N0ZGRTM4QkNFQTM4N0UyREYzRTY2MkQ2RjY4
NzdGNjM0NjAeFw0yNjA1MDMwMjQ5NDFaFw0yNzA1MDIwMjU0NDFaMDMxMTAvBgNV
BAMTKDZFMEZCODE3MzYzMjcxQTJDRUVDQTREMzMxOTA4MjBBNjMwNjI0NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFKDmHySESC6Bc+gYayGBA9K5
nwN/HRyMSmfdtyotB/OdEA23tqitPd5xdfToqFT0Pr38iNmGbqDqEztkPKZtrG0L
AwZfO/IATsYxaB78twD5rUoyxHML7ii76BKMaFSeK/q31zjSIBOj4NpyDQSQDNK5
EPxOvMV6yrzsFz36CFx8YyC6mhSr0OoW3hxcI3a080wsOxtcj+FreIJPndN5jcm5
TCHt5EISvrdMbx7s5dF05Yu70Im4D6Aydb1p3DSrneMJnVkKwRowOxPy70ywYXnc
95JMDJQHLJTp/57RlManezLLZSzBFg9/AokIF8MKHKMyoUumonLHAW0zUHxXAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUbg+4FzYycaLO7KTTMZCCCmMGJHgwHwYDVR0j
BBgwFoAUEiT2f/44vOo4fi3z5mLW9od/Y0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWQxNjE5Y2ItYzAxYy00NjE0LTg2M2UtY2UyODhkN2JhNzY1LzAvMTIyNEY2N0ZG
RTM4QkNFQTM4N0UyREYzRTY2MkQ2RjY4NzdGNjM0Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMjI0RjY3RkZFMzhCQ0VBMzg3RTJERjNFNjYyRDZGNjg3N0Y2
MzQ2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlkMTYxOWNiLWMwMWMtNDYxNC04
NjNlLWNlMjg4ZDdiYTc2NS8wLzMxMzAzMzJlMzEzNTM1MmUzMTM1MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM2MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm5wwDQYJ
KoZIhvcNAQELBQADggEBAH/H6rXsSaP2XuXnQ4uoKmLAtGOu6gcNm3swKis/CX/6
+44WlqsPq5LKw11r/63nPeSE3yyzR5Jj7fo+oFx6l9vEOf4QPngb2OPd75+sDbJ4
71hvi3XuMH3ZLZNgXOgm9h8TFx2IZJ9karbwbBtXFmusZSiltoy6BRQSh6MXyxkW
c/hOr96En945IRCuAwP3cw16pm+kItKLHlscF0rr6IukNnYa6+rdcfDCbPBTdq4J
c2nXyzAndtuNGCLLLvzJJa7D8qah3nNgaHZ9v+7ZLVYoAzqTmKYnsjZqRFJaIGr2
qkrgngj2p8gjpNiGwyKLsYC3a3amWcdeu8IPmX+/i5s=
-----END CERTIFICATE-----
Generated at Wed May 13 10:33:13 2026 by rpki-client