Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa
File:                     3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (raw, json)
Hash identifier:          oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=
Subject key identifier:   E2:1B:53:5E:73:F1:57:28:8D:4D:A2:2B:23:99:B2:06:3F:07:C4:BE
Certificate issuer:       /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128
Certificate serial:       0B59B9BAFA5058DB07DDF9641E7646AE4FE4F645
Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa
Signing time:             Sun 03 May 2026 02:59:41 +0000
ROA not before:           Sun 03 May 2026 02:54:41 +0000
ROA not after:            Sun 02 May 2027 02:59:41 +0000
asID:                     150226
IP address blocks:        103.17.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl
                          rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:59:b9:ba:fa:50:58:db:07:dd:f9:64:1e:76:46:ae:4f:e4:f6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128
        Validity
            Not Before: May  3 02:54:41 2026 GMT
            Not After : May  2 02:59:41 2027 GMT
        Subject: CN=E21B535E73F157288D4DA22B2399B2063F07C4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:51:74:1d:9f:81:aa:62:0c:0b:44:f7:9b:
                    ce:81:5b:64:c4:7f:b8:b0:1c:c2:56:bf:f1:31:df:
                    44:65:72:f6:c7:b5:bb:bb:66:20:9e:56:a2:0d:da:
                    1d:09:4a:ac:27:43:00:b7:a8:29:99:7e:34:92:55:
                    ac:30:9b:57:a8:4b:0b:34:15:76:e8:79:0b:47:16:
                    4b:c2:7b:1d:28:53:0c:33:9f:47:f1:19:4c:ea:63:
                    3e:cd:5f:2e:d7:2d:98:95:b0:b4:32:06:f1:fe:1f:
                    37:15:f9:4e:ec:ca:0c:c1:0d:72:06:59:09:ed:dc:
                    40:01:2d:00:db:bd:7a:f2:cc:49:e4:e0:e5:1b:a2:
                    04:e7:32:c4:f4:39:9e:47:17:d1:56:88:78:fc:ad:
                    ff:cc:ea:66:b0:27:e3:2f:67:44:7d:a8:1e:86:13:
                    d5:80:cb:6f:56:5e:a4:ff:f6:9e:e4:40:cc:65:be:
                    6a:6e:05:f9:41:45:60:52:0d:bb:f4:fc:1d:e8:1c:
                    2b:a0:5e:fc:9e:72:7f:34:8d:64:2b:3d:51:a4:a5:
                    ba:73:c9:ee:4e:23:23:f4:f3:6c:e2:60:14:c4:ce:
                    14:29:6a:c2:dc:9b:27:e5:84:ce:f4:fc:7a:cd:e2:
                    8b:cd:a1:34:40:53:e3:b3:4a:7d:e0:07:f7:e3:b0:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1B:53:5E:73:F1:57:28:8D:4D:A2:2B:23:99:B2:06:3F:07:C4:BE
            X509v3 Authority Key Identifier:
                keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c4:55:74:98:46:46:af:a5:91:4c:9a:68:59:ed:1c:c0:cd:
         23:6f:22:a2:37:9e:b5:76:76:47:01:f9:c4:68:ca:45:50:e3:
         54:f0:ed:cc:6f:1d:98:26:e8:78:2c:d5:e7:13:a3:e7:2b:cc:
         ff:88:bb:3e:f9:e8:e8:a9:bb:aa:37:24:05:48:9d:31:9d:b8:
         c9:81:87:83:d6:28:b6:ac:36:d9:1f:69:53:c0:3e:e4:14:29:
         c5:1a:5e:6a:8f:61:01:5f:eb:b2:2c:93:08:c3:a9:73:40:e1:
         98:30:ea:8c:dc:53:f6:b3:d3:ef:5f:e4:8f:5a:ed:cd:65:4f:
         ab:f2:61:a7:6d:41:21:de:40:0a:2f:70:42:ae:4e:4e:f2:8e:
         db:a4:90:60:d1:f1:8f:e4:a4:37:0b:fb:7f:6d:90:3e:71:74:
         fa:10:c7:76:23:e0:8c:84:58:48:56:10:c3:c0:b1:87:bf:ba:
         d9:ce:56:dc:1d:b9:a3:5a:35:74:dd:0c:6f:4e:7f:a6:a8:5c:
         36:fc:56:40:65:46:0c:6c:91:e3:0c:51:77:66:f2:de:69:3b:
         47:8f:e0:61:09:af:81:74:2c:5a:6e:c6:3a:f2:f9:f5:ec:09:
         e7:bd:23:c9:bc:ce:aa:87:83:42:f4:12:23:80:3d:2b:58:91:
         cf:53:bb:9c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUC1m5uvpQWNsH3flkHnZGrk/k9kUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx
MzMzQjEyODAeFw0yNjA1MDMwMjU0NDFaFw0yNzA1MDIwMjU5NDFaMDMxMTAvBgNV
BAMTKEUyMUI1MzVFNzNGMTU3Mjg4RDREQTIyQjIzOTlCMjA2M0YwN0M0QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgVlF0HZ+BqmIMC0T3m86BW2TE
f7iwHMJWv/Ex30RlcvbHtbu7ZiCeVqIN2h0JSqwnQwC3qCmZfjSSVawwm1eoSws0
FXboeQtHFkvCex0oUwwzn0fxGUzqYz7NXy7XLZiVsLQyBvH+HzcV+U7sygzBDXIG
WQnt3EABLQDbvXryzEnk4OUbogTnMsT0OZ5HF9FWiHj8rf/M6mawJ+MvZ0R9qB6G
E9WAy29WXqT/9p7kQMxlvmpuBflBRWBSDbv0/B3oHCugXvyecn80jWQrPVGkpbpz
ye5OIyP082ziYBTEzhQpasLcmyflhM70/HrN4ovNoTRAU+OzSn3gB/fjsK2LAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4htTXnPxVyiNTaIrI5myBj8HxL4wHwYDVR0j
BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0
Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC
MTI4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FlZjgzN2IzLWRmZDItNDJjYy05
Yjc5LTc0YjZiYWZkNGUyZC8wLzMxMzAzMzJlMzEzNzJlMzEzNzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxGzMA0GCSqG
SIb3DQEBCwUAA4IBAQBMxFV0mEZGr6WRTJpoWe0cwM0jbyKiN561dnZHAfnEaMpF
UONU8O3Mbx2YJuh4LNXnE6PnK8z/iLs++ejoqbuqNyQFSJ0xnbjJgYeD1ii2rDbZ
H2lTwD7kFCnFGl5qj2EBX+uyLJMIw6lzQOGYMOqM3FP2s9PvX+SPWu3NZU+r8mGn
bUEh3kAKL3BCrk5O8o7bpJBg0fGP5KQ3C/t/bZA+cXT6EMd2I+CMhFhIVhDDwLGH
v7rZzlbcHbmjWjV03QxvTn+mqFw2/FZAZUYMbJHjDFF3ZvLeaTtHj+BhCa+BdCxa
bsY68vn17AnnvSPJvM6qh4NC9BIjgD0rWJHPU7uc
-----END CERTIFICATE-----
Generated at Tue May 12 23:45:44 2026 by rpki-client