Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e203435333035.roa
File:                     3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=
Subject key identifier:   88:32:C3:9F:2F:23:9C:3D:7F:55:0B:29:5E:F6:4E:F0:B0:4B:9B:A8
Certificate issuer:       /CN=02A914400077F3E213C8972280DBD775A6B4C27C
Certificate serial:       387D01513175291B0635E3E69473EDD88B3077F3
Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 02:56:28 +0000
ROA not before:           Sun 03 May 2026 02:51:28 +0000
ROA not after:            Sun 02 May 2027 02:56:28 +0000
asID:                     45305
IP address blocks:        103.189.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
                          rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7d:01:51:31:75:29:1b:06:35:e3:e6:94:73:ed:d8:8b:30:77:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C
        Validity
            Not Before: May  3 02:51:28 2026 GMT
            Not After : May  2 02:56:28 2027 GMT
        Subject: CN=8832C39F2F239C3D7F550B295EF64EF0B04B9BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:20:f7:90:36:54:78:79:00:77:4d:6b:a4:
                    16:67:52:34:26:18:e8:06:4c:f3:6c:74:0a:0c:aa:
                    78:9e:a7:d4:c0:75:25:59:7b:43:ec:ce:3f:7d:7d:
                    77:5d:db:77:30:29:df:75:9e:43:18:2c:2a:4d:8b:
                    81:13:5c:e4:2c:bb:b3:80:72:31:07:78:9d:02:5b:
                    07:1f:ef:99:f4:25:71:9a:0b:fd:12:0a:bc:64:c8:
                    fa:05:1b:40:57:a2:73:28:f0:52:ab:5f:cf:1f:e6:
                    49:3f:0b:3d:ee:2c:f1:49:22:4f:0f:07:0c:cf:1b:
                    67:2e:3e:19:cb:09:d7:28:a6:4f:55:f7:c0:a8:d0:
                    88:48:a9:f7:30:88:2d:7b:db:69:33:c9:97:c8:da:
                    88:d3:2c:75:f6:16:80:1f:40:e9:0d:30:f9:3d:6b:
                    87:73:ee:3f:e3:41:d9:49:28:e1:4e:4e:a5:d1:8d:
                    13:e8:d5:cc:af:c3:e7:92:9c:c7:73:9f:d1:77:f3:
                    27:b9:70:3a:19:0f:d4:c1:6d:c2:00:8b:05:12:09:
                    e0:90:2b:f1:ae:81:ad:73:4c:1d:1b:01:da:93:d3:
                    fa:3a:34:55:c4:08:98:37:83:b3:0f:21:f1:fd:0e:
                    da:76:a0:f2:05:70:88:a8:83:0a:8a:ec:fe:79:9a:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:32:C3:9F:2F:23:9C:3D:7F:55:0B:29:5E:F6:4E:F0:B0:4B:9B:A8
            X509v3 Authority Key Identifier:
                keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:6e:a3:8e:99:5a:61:ef:fb:9a:67:87:04:53:6d:b7:ad:
         48:b2:c8:c8:84:fd:ec:d1:91:dc:23:fa:9d:30:17:20:c3:34:
         56:e4:40:f3:d7:0d:88:67:fb:f1:7a:7e:f1:c1:41:d3:f5:ef:
         64:b1:c0:c1:2e:05:7e:11:27:c7:c3:f0:f2:5d:c3:69:8e:26:
         a3:43:0a:eb:ea:a2:e5:ea:36:7b:4b:97:d5:67:f3:ac:c7:33:
         13:ce:06:8a:a7:c1:ca:47:13:21:bf:95:9c:49:80:ee:02:5c:
         47:33:77:b5:ee:95:d8:d9:1b:4d:75:4c:67:b6:33:dc:1e:26:
         d9:e8:25:0f:4c:99:44:47:a0:4d:0a:12:5b:79:e5:fc:06:7b:
         b6:da:2e:a4:2e:b7:eb:83:89:be:f5:6f:bb:33:9c:3c:9b:e5:
         b2:68:ca:2d:de:48:22:fe:5d:2a:3d:5f:ca:1b:6c:c3:e7:cb:
         19:dd:cb:d9:f7:e1:3c:48:5e:a0:56:c0:5b:0f:8a:a9:be:df:
         22:91:ae:71:41:25:3c:f2:e1:76:1b:2c:47:06:c2:2e:c4:54:
         91:88:72:7b:3c:21:8e:e6:51:29:d2:9f:ea:91:14:9a:d5:02:
         3f:81:60:79:d9:da:52:13:22:1a:57:96:38:65:15:1c:ac:0c:
         87:3b:17:1e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOH0BUTF1KRsGNePmlHPt2Iswd/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVB
NkI0QzI3QzAeFw0yNjA1MDMwMjUxMjhaFw0yNzA1MDIwMjU2MjhaMDMxMTAvBgNV
BAMTKDg4MzJDMzlGMkYyMzlDM0Q3RjU1MEIyOTVFRjY0RUYwQjA0QjlCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qCD3kDZUeHkAd01rpBZnUjQm
GOgGTPNsdAoMqniep9TAdSVZe0Pszj99fXdd23cwKd91nkMYLCpNi4ETXOQsu7OA
cjEHeJ0CWwcf75n0JXGaC/0SCrxkyPoFG0BXonMo8FKrX88f5kk/Cz3uLPFJIk8P
BwzPG2cuPhnLCdcopk9V98Co0IhIqfcwiC1722kzyZfI2ojTLHX2FoAfQOkNMPk9
a4dz7j/jQdlJKOFOTqXRjRPo1cyvw+eSnMdzn9F38ye5cDoZD9TBbcIAiwUSCeCQ
K/Guga1zTB0bAdqT0/o6NFXECJg3g7MPIfH9Dtp2oPIFcIiogwqK7P55moYDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUiDLDny8jnD1/VQspXvZO8LBLm6gwHwYDVR0j
BBgwFoAUAqkUQAB38+ITyJcigNvXdaa0wnwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTQzMzM2ZjgtZTU0Ni00NjJjLTg0MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAw
MDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVBNkI0QzI3Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMkE5MTQ0MDAwNzdGM0UyMTNDODk3MjI4MERCRDc3NUE2QjRD
MjdDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E0MzMzNmY4LWU1NDYtNDYyYy04
NDEwLWI3NzMyYjZjODAxNS8wLzMxMzAzMzJlMzEzODM5MmUzOTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe9YTANBgkqhkiG
9w0BAQsFAAOCAQEAho5uo46ZWmHv+5pnhwRTbbetSLLIyIT97NGR3CP6nTAXIMM0
VuRA89cNiGf78Xp+8cFB0/XvZLHAwS4FfhEnx8Pw8l3DaY4mo0MK6+qi5eo2e0uX
1WfzrMczE84GiqfBykcTIb+VnEmA7gJcRzN3te6V2NkbTXVMZ7Yz3B4m2eglD0yZ
REegTQoSW3nl/AZ7ttoupC6364OJvvVvuzOcPJvlsmjKLd5IIv5dKj1fyhtsw+fL
Gd3L2ffhPEheoFbAWw+Kqb7fIpGucUElPPLhdhssRwbCLsRUkYhyezwhjuZRKdKf
6pEUmtUCP4FgednaUhMiGleWOGUVHKwMhzsXHg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:07 2026 by rpki-client