Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa
File:                     3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (raw, json)
Hash identifier:          lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=
Subject key identifier:   7A:11:EA:44:B0:64:43:FE:79:98:8C:4B:6A:81:12:DD:68:27:EC:36
Certificate issuer:       /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC
Certificate serial:       1541C731D492A5C05FB09F3F6064CD9EE1541AB2
Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa
Signing time:             Sun 03 May 2026 02:56:44 +0000
ROA not before:           Sun 03 May 2026 02:51:44 +0000
ROA not after:            Sun 02 May 2027 02:56:44 +0000
asID:                     136856
IP address blocks:        103.102.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl
                          rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:41:c7:31:d4:92:a5:c0:5f:b0:9f:3f:60:64:cd:9e:e1:54:1a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC
        Validity
            Not Before: May  3 02:51:44 2026 GMT
            Not After : May  2 02:56:44 2027 GMT
        Subject: CN=7A11EA44B06443FE79988C4B6A8112DD6827EC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:64:ad:f0:27:c5:f8:1d:01:38:a4:6a:90:
                    dd:77:6f:29:39:63:a8:61:94:44:36:ae:54:5a:1a:
                    c7:ad:fd:40:83:3e:1e:88:83:22:6a:92:1f:91:32:
                    73:aa:50:26:39:57:e6:d8:3f:d5:12:87:57:50:5e:
                    9f:e8:72:a5:33:2c:3b:70:1c:77:1d:30:0b:dd:e3:
                    72:cb:33:94:f3:c7:b6:2e:ac:f5:c4:22:39:af:0d:
                    5c:1a:90:59:72:5a:0a:d1:f4:7e:fa:e9:6e:24:a1:
                    44:dc:df:c5:9a:37:55:e0:b3:f0:fa:5c:76:6c:1d:
                    15:b7:f4:97:e0:ed:9c:92:80:7d:f9:f5:83:54:38:
                    9a:33:7b:97:b4:c6:7b:08:e6:bc:b3:aa:f9:d1:5b:
                    50:94:dc:3a:93:23:83:f7:b7:a0:76:ac:73:f8:4e:
                    6f:0f:1f:69:b4:c5:e9:a6:ec:72:0c:6c:d5:f7:09:
                    b5:b3:e0:26:92:f8:49:a0:45:22:01:0e:ee:a0:93:
                    71:5b:11:d6:77:61:e8:e1:54:54:c8:c6:3a:a7:39:
                    26:14:6a:83:8e:e2:6e:9b:0e:5b:64:7f:56:0d:b8:
                    8e:7a:c6:9f:57:d5:57:50:48:98:4c:db:2c:5c:cf:
                    ed:93:e6:b6:97:e7:d4:6c:ff:1c:01:41:69:33:ff:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:11:EA:44:B0:64:43:FE:79:98:8C:4B:6A:81:12:DD:68:27:EC:36
            X509v3 Authority Key Identifier:
                keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ed:f1:7f:3b:45:3b:3e:b4:06:11:dc:d6:61:be:f4:be:73:
         f9:0e:45:bb:bd:29:d5:95:fa:c6:f4:1c:19:fd:cf:34:c2:80:
         f4:07:6a:cd:1f:65:3c:a9:d5:22:82:34:76:5c:a0:e7:51:e4:
         ea:94:de:a0:52:82:6d:ad:ae:5e:64:d4:ed:6d:58:25:24:23:
         fe:00:95:28:f7:81:d6:f5:a6:f5:68:23:ba:8d:39:3c:81:7d:
         9e:b3:7c:de:71:f4:8e:31:d3:35:9b:c7:c2:d0:ec:d7:ad:d0:
         0e:f9:31:28:1c:b9:9e:a7:74:9f:5d:08:70:94:ec:60:f0:fa:
         81:18:47:b3:08:70:f4:b2:34:07:ad:93:fe:cc:d9:22:b7:64:
         22:ff:a4:19:e2:47:25:a6:d8:18:d2:69:5a:83:a8:60:e5:62:
         d2:a8:1c:86:98:bd:50:11:c0:0e:9d:2a:f0:b7:c2:93:0c:47:
         9f:24:3c:95:58:5c:47:01:6d:72:a8:2e:73:4f:b5:2f:db:05:
         88:57:b8:f7:73:1f:3c:70:e3:10:72:63:57:f0:44:d9:62:95:
         5b:d7:7b:86:0a:ee:f5:a3:6a:13:ea:79:86:ef:36:07:c3:c9:
         96:55:c6:e3:28:39:f3:01:20:0a:64:b9:bb:bb:f4:c7:b5:c4:
         69:a9:6e:11
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUFUHHMdSSpcBfsJ8/YGTNnuFUGrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0
RTNBRTZFQzAeFw0yNjA1MDMwMjUxNDRaFw0yNzA1MDIwMjU2NDRaMDMxMTAvBgNV
BAMTKDdBMTFFQTQ0QjA2NDQzRkU3OTk4OEM0QjZBODExMkRENjgyN0VDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryGSt8CfF+B0BOKRqkN13byk5
Y6hhlEQ2rlRaGset/UCDPh6IgyJqkh+RMnOqUCY5V+bYP9USh1dQXp/ocqUzLDtw
HHcdMAvd43LLM5Tzx7YurPXEIjmvDVwakFlyWgrR9H766W4koUTc38WaN1Xgs/D6
XHZsHRW39Jfg7ZySgH359YNUOJoze5e0xnsI5ryzqvnRW1CU3DqTI4P3t6B2rHP4
Tm8PH2m0xemm7HIMbNX3CbWz4CaS+EmgRSIBDu6gk3FbEdZ3YejhVFTIxjqnOSYU
aoOO4m6bDltkf1YNuI56xp9X1VdQSJhM2yxcz+2T5raX59Rs/xwBQWkz/y2TAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUehHqRLBkQ/55mIxLaoES3Wgn7DYwHwYDVR0j
BBgwFoAUjuNZiH7UeUfnTsw9Etfdh0465uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTVjN2E0MDQtZWIzZi00Y2YxLTk5ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3
RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0RTNBRTZFQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84RUUzNTk4ODdFRDQ3OTQ3RTc0RUNDM0QxMkQ3REQ4NzRFM0FF
NkVDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E1YzdhNDA0LWViM2YtNGNmMS05
OWY5LTgyNzk2MTY2MWYzMS8wLzMxMzAzMzJlMzEzMDMyMmUzMTMxMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZnIwDQYJ
KoZIhvcNAQELBQADggEBAEft8X87RTs+tAYR3NZhvvS+c/kORbu9KdWV+sb0HBn9
zzTCgPQHas0fZTyp1SKCNHZcoOdR5OqU3qBSgm2trl5k1O1tWCUkI/4AlSj3gdb1
pvVoI7qNOTyBfZ6zfN5x9I4x0zWbx8LQ7Net0A75MSgcuZ6ndJ9dCHCU7GDw+oEY
R7MIcPSyNAetk/7M2SK3ZCL/pBniRyWm2BjSaVqDqGDlYtKoHIaYvVARwA6dKvC3
wpMMR58kPJVYXEcBbXKoLnNPtS/bBYhXuPdzHzxw4xByY1fwRNlilVvXe4YK7vWj
ahPqeYbvNgfDyZZVxuMoOfMBIApkubu79Me1xGmpbhE=
-----END CERTIFICATE-----
Generated at Wed May 13 06:57:51 2026 by rpki-client