Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa
File:                     3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (raw, json)
Hash identifier:          Hle+4/omyQJGw064p/2S0vWmrSmYohlDTLgvhyHQKlg=
Subject key identifier:   FF:B3:32:BC:EB:FD:DD:CA:E5:88:8F:E4:79:B9:AC:99:AD:54:03:E7
Certificate issuer:       /CN=F6354755B734FD4C86834DEEDCB911BEE9694CE5
Certificate serial:       65542E2982E80EEC24A7A868C9A110BD208D30FC
Authority key identifier: F6:35:47:55:B7:34:FD:4C:86:83:4D:EE:DC:B9:11:BE:E9:69:4C:E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F6354755B734FD4C86834DEEDCB911BEE9694CE5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa
Signing time:             Sun 03 May 2026 02:55:01 +0000
ROA not before:           Sun 03 May 2026 02:50:01 +0000
ROA not after:            Sun 02 May 2027 02:55:01 +0000
asID:                     138117
IP address blocks:        103.120.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/F6354755B734FD4C86834DEEDCB911BEE9694CE5.crl
                          rsync://rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/F6354755B734FD4C86834DEEDCB911BEE9694CE5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F6354755B734FD4C86834DEEDCB911BEE9694CE5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:54:2e:29:82:e8:0e:ec:24:a7:a8:68:c9:a1:10:bd:20:8d:30:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6354755B734FD4C86834DEEDCB911BEE9694CE5
        Validity
            Not Before: May  3 02:50:01 2026 GMT
            Not After : May  2 02:55:01 2027 GMT
        Subject: CN=FFB332BCEBFDDDCAE5888FE479B9AC99AD5403E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:ba:fb:29:87:37:0b:1a:28:ea:eb:c7:89:
                    02:e8:a2:1a:6e:03:7f:61:b5:7c:f9:ad:06:f6:52:
                    a4:25:14:2d:9a:1a:17:5c:1d:d2:e4:68:0f:aa:a9:
                    0e:ea:7e:c3:c1:84:c1:d0:e7:a1:a4:5d:81:9a:ab:
                    60:7d:b6:09:e3:5e:a6:6a:71:b5:6a:31:9a:6d:d5:
                    e7:a0:ec:96:b7:a1:00:0c:92:33:50:91:50:52:ed:
                    2c:b6:60:dc:1d:7c:df:e6:81:fa:86:45:6a:d2:0d:
                    04:84:05:ce:5b:5a:8e:d7:f6:2a:00:66:c2:e8:2c:
                    17:7a:6e:cd:78:cf:4c:9e:08:f1:16:0d:00:5d:61:
                    b6:fe:1e:24:40:c9:39:ed:4c:12:09:df:3e:ea:20:
                    ca:34:e3:7b:18:6d:27:9b:95:c4:3c:5d:2a:c2:10:
                    7c:dc:ca:85:90:68:9e:2b:08:07:30:6a:3d:34:28:
                    87:e2:fe:5b:58:49:28:c6:6a:51:92:7c:e1:43:cd:
                    cc:8c:89:5c:35:36:93:01:c4:13:34:1a:56:3f:33:
                    39:d4:71:79:26:3e:b5:8d:dd:00:06:75:74:e5:d4:
                    42:69:40:91:52:3c:b2:51:48:a2:5f:d2:30:24:00:
                    89:c5:7c:4d:c9:37:26:ee:fa:3b:a5:42:06:ba:cd:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B3:32:BC:EB:FD:DD:CA:E5:88:8F:E4:79:B9:AC:99:AD:54:03:E7
            X509v3 Authority Key Identifier:
                keyid:F6:35:47:55:B7:34:FD:4C:86:83:4D:EE:DC:B9:11:BE:E9:69:4C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/F6354755B734FD4C86834DEEDCB911BEE9694CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F6354755B734FD4C86834DEEDCB911BEE9694CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:49:c6:fc:41:98:10:af:c1:e1:91:8a:75:ba:b8:42:b2:c7:
         80:a2:ce:04:e0:b1:6f:7b:11:7c:ba:8e:f3:c4:ce:42:93:03:
         5f:93:5f:50:fe:a9:4e:57:d4:36:1e:35:13:31:ee:d0:e7:7c:
         55:73:cb:ba:f1:d3:08:77:c8:94:94:08:25:7c:cd:69:ca:d4:
         34:02:e9:fe:be:86:51:50:17:9e:78:c8:69:18:8b:99:f5:5c:
         59:3c:ec:c4:13:3e:f4:db:6e:6c:7d:20:24:04:dc:95:95:e2:
         3a:e8:a3:3e:5d:fa:21:3b:81:f2:f6:32:c7:b3:a9:e5:3d:60:
         27:07:4c:32:e4:90:43:d9:f4:3e:1b:fd:6e:01:f1:a4:80:a7:
         2b:a8:94:45:b7:53:2b:84:b9:4c:4e:49:6a:89:b1:b8:69:2c:
         67:0f:71:5b:b7:9a:6f:9a:21:89:47:26:c5:fa:83:25:28:d1:
         7d:19:51:9a:6b:df:08:1d:ce:36:03:16:bb:f8:f5:f6:e0:06:
         e9:e2:47:d9:4e:6a:7f:8f:1c:b4:90:0a:e5:c6:c3:c2:d0:41:
         83:5d:5a:71:cf:05:1c:dd:4c:f3:fa:10:8b:a5:17:54:71:25:
         6d:28:1c:b6:35:35:f2:0b:a0:90:6e:88:53:2d:3f:70:59:e4:
         49:fd:31:fc
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZVQuKYLoDuwkp6hoyaEQvSCNMPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzNTQ3NTVCNzM0RkQ0Qzg2ODM0REVFRENCOTExQkVF
OTY5NENFNTAeFw0yNjA1MDMwMjUwMDFaFw0yNzA1MDIwMjU1MDFaMDMxMTAvBgNV
BAMTKEZGQjMzMkJDRUJGREREQ0FFNTg4OEZFNDc5QjlBQzk5QUQ1NDAzRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9X7r7KYc3Cxoo6uvHiQLoohpu
A39htXz5rQb2UqQlFC2aGhdcHdLkaA+qqQ7qfsPBhMHQ56GkXYGaq2B9tgnjXqZq
cbVqMZpt1eeg7Ja3oQAMkjNQkVBS7Sy2YNwdfN/mgfqGRWrSDQSEBc5bWo7X9ioA
ZsLoLBd6bs14z0yeCPEWDQBdYbb+HiRAyTntTBIJ3z7qIMo043sYbSeblcQ8XSrC
EHzcyoWQaJ4rCAcwaj00KIfi/ltYSSjGalGSfOFDzcyMiVw1NpMBxBM0GlY/MznU
cXkmPrWN3QAGdXTl1EJpQJFSPLJRSKJf0jAkAInFfE3JNybu+julQga6zRqvAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU/7MyvOv93crliI/kebmsma1UA+cwHwYDVR0j
BBgwFoAU9jVHVbc0/UyGg03u3LkRvulpTOUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWU1MDYwYjgtZjU3MC00MmQ2LTg2ZmYtMzNlYTdmZGYyNTE1LzAvRjYzNTQ3NTVC
NzM0RkQ0Qzg2ODM0REVFRENCOTExQkVFOTY5NENFNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNjM1NDc1NUI3MzRGRDRDODY4MzRERUVEQ0I5MTFCRUU5Njk0
Q0U1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzllNTA2MGI4LWY1NzAtNDJkNi04
NmZmLTMzZWE3ZmRmMjUxNS8wLzMxMzAzMzJlMzEzMjMwMmUzMTMyMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMxMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFneHwwDQYJ
KoZIhvcNAQELBQADggEBAARJxvxBmBCvweGRinW6uEKyx4CizgTgsW97EXy6jvPE
zkKTA1+TX1D+qU5X1DYeNRMx7tDnfFVzy7rx0wh3yJSUCCV8zWnK1DQC6f6+hlFQ
F554yGkYi5n1XFk87MQTPvTbbmx9ICQE3JWV4jrooz5d+iE7gfL2MsezqeU9YCcH
TDLkkEPZ9D4b/W4B8aSApyuolEW3UyuEuUxOSWqJsbhpLGcPcVu3mm+aIYlHJsX6
gyUo0X0ZUZpr3wgdzjYDFrv49fbgBuniR9lOan+PHLSQCuXGw8LQQYNdWnHPBRzd
TPP6EIulF1RxJW0oHLY1NfILoJBuiFMtP3BZ5En9Mfw=
-----END CERTIFICATE-----
Generated at Wed May 13 08:29:12 2026 by rpki-client