Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa
File:                     3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (raw, json)
Hash identifier:          sTfiDvuvbkVeyTPfpKYSFsI9nMpAT34o8x5bhe0xkFw=
Subject key identifier:   7F:33:84:15:67:5C:37:3C:18:12:36:6D:BC:B3:46:2C:7B:61:EE:6F
Certificate issuer:       /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685
Certificate serial:       05E845446166A207E1F0F089B1AC95701BAC2E97
Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa
Signing time:             Sun 03 May 2026 02:56:50 +0000
ROA not before:           Sun 03 May 2026 02:51:50 +0000
ROA not after:            Sun 02 May 2027 02:56:50 +0000
asID:                     149728
IP address blocks:        103.187.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl
                          rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e8:45:44:61:66:a2:07:e1:f0:f0:89:b1:ac:95:70:1b:ac:2e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685
        Validity
            Not Before: May  3 02:51:50 2026 GMT
            Not After : May  2 02:56:50 2027 GMT
        Subject: CN=7F338415675C373C1812366DBCB3462C7B61EE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:33:d8:5e:e9:67:75:4a:c2:c5:bf:61:bc:
                    1e:ae:e6:64:81:13:ac:7a:a0:9e:ee:94:74:16:df:
                    59:b3:e3:60:9d:f9:9b:5f:5d:97:ad:dd:14:9c:50:
                    94:ae:81:a6:3a:ed:1b:cc:f1:b2:f6:8e:5b:03:89:
                    2a:48:54:c7:fa:e3:a6:60:62:bd:54:4d:92:4b:04:
                    a0:13:99:0f:39:fc:18:9c:2f:e6:54:77:dc:f1:d2:
                    77:67:88:ba:0c:c6:d1:0b:2d:fa:b5:50:74:3f:e6:
                    73:61:b3:8b:5f:70:a0:4e:7c:12:f1:1a:9d:4c:9c:
                    cc:6f:8f:00:5a:eb:1b:39:bb:4f:1f:95:1b:94:ea:
                    e1:41:52:47:99:ba:af:56:18:db:a9:a2:36:d6:0a:
                    8d:74:ee:25:33:b1:aa:89:bb:33:ed:d5:6b:fc:92:
                    64:de:64:15:30:a5:ce:8a:8e:f8:63:1c:d0:66:96:
                    75:2e:86:d0:1b:e5:fc:04:2a:ba:d3:cd:4a:bf:4f:
                    cb:9c:ea:92:81:31:48:6b:36:4a:71:41:71:18:dd:
                    10:f0:99:14:5f:29:fe:6f:ce:55:0a:72:d5:60:b9:
                    fb:cf:77:e9:95:ec:c7:bb:34:33:e4:05:7f:d7:4f:
                    44:0e:98:b4:3a:84:c2:0e:f8:06:de:24:b9:2a:24:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:33:84:15:67:5C:37:3C:18:12:36:6D:BC:B3:46:2C:7B:61:EE:6F
            X509v3 Authority Key Identifier:
                keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:65:76:e7:c3:91:3b:22:fa:c0:74:7b:43:ee:61:27:ea:93:
         e3:01:db:a5:45:2b:19:7c:1e:72:c9:80:4c:7f:b1:c5:88:ee:
         51:3b:a2:88:bc:83:72:d8:48:95:d6:83:e8:f5:b0:4f:18:94:
         a1:13:a9:69:80:c3:4b:c6:09:f4:98:5b:ff:8b:28:de:27:cf:
         d3:14:db:57:ef:af:25:e9:e1:00:df:6d:91:ff:4f:9d:96:fc:
         35:58:57:2a:86:e3:50:9c:e3:de:33:42:9b:2b:5e:f6:ae:37:
         c5:35:99:67:11:d0:95:3f:b3:f1:21:54:93:a9:ce:1c:47:38:
         03:3a:e0:08:7d:15:a6:33:c3:09:96:22:a2:a3:7d:a3:d6:48:
         a7:d0:0b:8d:e5:2d:c6:06:a4:e8:e3:19:77:20:82:0d:e2:67:
         e8:38:b9:45:01:cb:1f:ef:ec:93:6e:1b:75:03:63:0c:4a:87:
         cd:c9:86:6a:10:aa:d6:d0:90:63:0b:7e:ce:cf:40:a6:fb:4b:
         9a:22:ba:7d:ec:d2:43:42:ca:2f:bf:2f:7a:b1:95:e6:84:03:
         ea:3f:ea:64:c2:ff:b8:51:f1:e7:ab:be:99:fc:3d:5b:55:ac:
         26:00:f1:6e:e6:af:3d:06:e2:24:88:c9:e8:9f:68:47:36:20:
         0e:d4:6d:a0
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBehFRGFmogfh8PCJsayVcBusLpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3
M0RBMTY4NTAeFw0yNjA1MDMwMjUxNTBaFw0yNzA1MDIwMjU2NTBaMDMxMTAvBgNV
BAMTKDdGMzM4NDE1Njc1QzM3M0MxODEyMzY2REJDQjM0NjJDN0I2MUVFNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGzPYXulndUrCxb9hvB6u5mSB
E6x6oJ7ulHQW31mz42Cd+ZtfXZet3RScUJSugaY67RvM8bL2jlsDiSpIVMf646Zg
Yr1UTZJLBKATmQ85/BicL+ZUd9zx0ndniLoMxtELLfq1UHQ/5nNhs4tfcKBOfBLx
Gp1MnMxvjwBa6xs5u08flRuU6uFBUkeZuq9WGNupojbWCo107iUzsaqJuzPt1Wv8
kmTeZBUwpc6KjvhjHNBmlnUuhtAb5fwEKrrTzUq/T8uc6pKBMUhrNkpxQXEY3RDw
mRRfKf5vzlUKctVgufvPd+mV7Me7NDPkBX/XT0QOmLQ6hMIO+AbeJLkqJGB3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfzOEFWdcNzwYEjZtvLNGLHth7m8wHwYDVR0j
BBgwFoAUsrSKnASLUc0TOtCu5vX563PaFoUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTYzMDk3ZjAtMzk3OC00OWNlLWI2OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMw
NDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3M0RBMTY4NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMkI0OEE5QzA0OEI1MUNEMTMzQUQwQUVFNkY1RjlFQjczREEx
Njg1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2MzA5N2YwLTM5NzgtNDljZS1i
NjljLTRiMjBiNGRjZmI3ZS8wLzMxMzAzMzJlMzEzODM3MmUzMjMyMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnu+IwDQYJ
KoZIhvcNAQELBQADggEBAKxldufDkTsi+sB0e0PuYSfqk+MB26VFKxl8HnLJgEx/
scWI7lE7ooi8g3LYSJXWg+j1sE8YlKETqWmAw0vGCfSYW/+LKN4nz9MU21fvryXp
4QDfbZH/T52W/DVYVyqG41Cc494zQpsrXvauN8U1mWcR0JU/s/EhVJOpzhxHOAM6
4Ah9FaYzwwmWIqKjfaPWSKfQC43lLcYGpOjjGXcggg3iZ+g4uUUByx/v7JNuG3UD
YwxKh83JhmoQqtbQkGMLfs7PQKb7S5oiun3s0kNCyi+/L3qxleaEA+o/6mTC/7hR
8eervpn8PVtVrCYA8W7mrz0G4iSIyeifaEc2IA7UbaA=
-----END CERTIFICATE-----
Generated at Wed May 13 08:35:25 2026 by rpki-client