Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa
File:                     3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (raw, json)
Hash identifier:          gtZNev9cMMORIviikpj/urAy+yvYIWDnCmncjDmI/0s=
Subject key identifier:   15:41:AF:4D:D2:AA:6B:3A:00:21:44:6F:12:AC:55:90:08:E3:C3:94
Certificate issuer:       /CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
Certificate serial:       152B067BAA6B59CBFE4971073957438B1C949BAD
Authority key identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa
Signing time:             Sun 03 May 2026 02:57:20 +0000
ROA not before:           Sun 03 May 2026 02:52:20 +0000
ROA not after:            Sun 02 May 2027 02:57:20 +0000
asID:                     150489
IP address blocks:        103.55.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl
                          rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2b:06:7b:aa:6b:59:cb:fe:49:71:07:39:57:43:8b:1c:94:9b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
        Validity
            Not Before: May  3 02:52:20 2026 GMT
            Not After : May  2 02:57:20 2027 GMT
        Subject: CN=1541AF4DD2AA6B3A0021446F12AC559008E3C394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:3a:4a:08:27:ec:7b:0b:22:fd:52:8d:5c:
                    03:03:0a:e3:66:c2:64:67:98:1d:46:1a:8b:65:5a:
                    4c:83:4a:dd:a2:f5:08:cd:f6:c2:1e:1e:a3:2c:4c:
                    bf:32:37:64:20:fd:1e:91:df:96:6c:ca:0c:00:b4:
                    5d:ca:28:03:fa:f8:b0:cf:7b:53:9f:37:b7:92:ac:
                    54:16:6d:cb:2d:48:01:e8:05:a3:fc:7a:6c:b2:c0:
                    d1:70:95:17:2a:92:57:2b:11:c0:94:c1:eb:5c:cd:
                    ba:f9:53:82:81:93:ab:02:46:92:09:21:3f:2e:0d:
                    e2:86:37:a0:01:de:c6:f3:99:3e:f5:36:25:e6:13:
                    a5:4e:ae:6c:85:23:af:80:6c:a8:4c:3b:28:da:38:
                    f1:60:9a:ea:a8:a8:fb:f5:f5:4c:10:bc:9f:b9:da:
                    78:b9:e2:49:be:c7:77:1d:34:30:6e:0e:cd:56:83:
                    a6:1e:37:f0:ff:f8:62:94:b7:01:25:9d:2e:5c:a7:
                    90:67:fb:b4:73:91:ec:bf:9c:57:17:85:39:2e:cd:
                    67:c5:de:40:47:ae:a8:f1:ce:25:60:80:70:ab:74:
                    64:06:68:44:26:a5:f8:a8:37:77:85:12:b7:08:97:
                    92:d2:e3:ea:4d:f2:1c:12:c9:06:e1:af:fe:38:20:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:41:AF:4D:D2:AA:6B:3A:00:21:44:6F:12:AC:55:90:08:E3:C3:94
            X509v3 Authority Key Identifier:
                keyid:80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:f0:3c:a1:1e:6e:b0:dd:5d:7b:f0:99:78:d4:e3:16:a5:9b:
         19:92:e1:db:48:8f:53:d8:8b:c4:b5:a3:a8:c5:fd:a5:ec:14:
         f3:43:3f:15:a1:94:22:d1:64:43:4b:69:4e:c5:26:87:fb:32:
         e6:3f:fb:5f:a7:e1:6b:1c:17:ec:1f:68:e0:13:bb:79:24:9b:
         40:d7:cf:8b:d1:f5:89:2e:89:cb:a8:bd:a7:85:e4:ad:83:dc:
         ba:53:83:39:53:a8:2c:1e:44:17:63:0a:a0:0f:32:1f:b3:46:
         1e:c4:9f:27:96:04:5a:d1:c0:2e:2b:5d:91:b2:e9:ca:39:f1:
         0e:36:04:b5:fb:ff:1e:e3:ed:f6:c3:a7:d5:84:e8:68:f1:0f:
         7e:b2:ad:5f:d4:ed:27:58:17:df:d5:60:c1:60:83:5c:e8:58:
         21:05:dc:7e:76:d5:7e:3e:e1:cc:83:78:1e:bd:bb:66:89:56:
         8a:7f:a7:7b:18:3d:90:6c:ba:73:cc:8b:38:17:65:3a:69:c2:
         1a:6f:87:8d:ae:2c:aa:97:4b:f5:d8:c2:6c:36:0d:5a:1c:9b:
         c5:c6:64:2a:5e:28:24:67:f9:43:1b:7c:90:6f:b4:d1:3b:52:
         0f:7c:bf:ab:1b:58:c9:07:f3:1c:5f:00:9c:04:50:a2:5d:fb:
         f0:cc:e0:dd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFSsGe6prWcv+SXEHOVdDixyUm60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAyQzJDQjFBNTQ4NjY0NDM0MDlFM0ZERTEyRjc3RUM2
RkI4N0Y1NTAeFw0yNjA1MDMwMjUyMjBaFw0yNzA1MDIwMjU3MjBaMDMxMTAvBgNV
BAMTKDE1NDFBRjRERDJBQTZCM0EwMDIxNDQ2RjEyQUM1NTkwMDhFM0MzOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8TpKCCfsewsi/VKNXAMDCuNm
wmRnmB1GGotlWkyDSt2i9QjN9sIeHqMsTL8yN2Qg/R6R35ZsygwAtF3KKAP6+LDP
e1OfN7eSrFQWbcstSAHoBaP8emyywNFwlRcqklcrEcCUwetczbr5U4KBk6sCRpIJ
IT8uDeKGN6AB3sbzmT71NiXmE6VOrmyFI6+AbKhMOyjaOPFgmuqoqPv19UwQvJ+5
2ni54km+x3cdNDBuDs1Wg6YeN/D/+GKUtwElnS5cp5Bn+7Rzkey/nFcXhTkuzWfF
3kBHrqjxziVggHCrdGQGaEQmpfioN3eFErcIl5LS4+pN8hwSyQbhr/44IGiLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFUGvTdKqazoAIURvEqxVkAjjw5QwHwYDVR0j
BBgwFoAUgCwssaVIZkQ0CeP94S937G+4f1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTZlM2RkOTUtMmE4NS00MzllLTg0ZjItOTcyYTIzZTMyNzFlLzAvODAyQzJDQjFB
NTQ4NjY0NDM0MDlFM0ZERTEyRjc3RUM2RkI4N0Y1NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MDJDMkNCMUE1NDg2NjQ0MzQwOUUzRkRFMTJGNzdFQzZGQjg3
RjU1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2ZTNkZDk1LTJhODUtNDM5ZS04
NGYyLTk3MmEyM2UzMjcxZS8wLzMxMzAzMzJlMzUzNTJlMzIzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzfiMA0GCSqG
SIb3DQEBCwUAA4IBAQCD8DyhHm6w3V178Jl41OMWpZsZkuHbSI9T2IvEtaOoxf2l
7BTzQz8VoZQi0WRDS2lOxSaH+zLmP/tfp+FrHBfsH2jgE7t5JJtA18+L0fWJLonL
qL2nheStg9y6U4M5U6gsHkQXYwqgDzIfs0YexJ8nlgRa0cAuK12RsunKOfEONgS1
+/8e4+32w6fVhOho8Q9+sq1f1O0nWBff1WDBYINc6FghBdx+dtV+PuHMg3gevbtm
iVaKf6d7GD2QbLpzzIs4F2U6acIab4eNriyql0v12MJsNg1aHJvFxmQqXigkZ/lD
G3yQb7TRO1IPfL+rG1jJB/McXwCcBFCiXfvwzODd
-----END CERTIFICATE-----
Generated at Wed May 13 05:44:09 2026 by rpki-client