Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa
File:                     3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (raw, json)
Hash identifier:          TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=
Subject key identifier:   14:4E:EE:B6:E6:51:23:43:5D:2E:5A:CB:F7:1C:92:9A:13:52:89:01
Certificate issuer:       /CN=D69827B97765F94998CEA76A23999571F2BDA426
Certificate serial:       1D0C5FFEE6B51C35CA26A98164AF152B26D1A394
Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa
Signing time:             Sun 03 May 2026 03:01:49 +0000
ROA not before:           Sun 03 May 2026 02:56:49 +0000
ROA not after:            Sun 02 May 2027 03:01:49 +0000
asID:                     139978
IP address blocks:        103.148.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl
                          rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0c:5f:fe:e6:b5:1c:35:ca:26:a9:81:64:af:15:2b:26:d1:a3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426
        Validity
            Not Before: May  3 02:56:49 2026 GMT
            Not After : May  2 03:01:49 2027 GMT
        Subject: CN=144EEEB6E65123435D2E5ACBF71C929A13528901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:71:62:4c:cb:16:96:20:ae:04:fd:66:be:
                    e0:19:ff:9f:86:80:1b:f0:ca:0a:d7:92:6e:e1:45:
                    cf:d4:86:3f:4a:bf:72:06:64:77:93:4d:be:91:ff:
                    e3:b2:c1:20:61:6e:4b:fe:5b:b9:34:d3:04:f7:2e:
                    7a:80:b4:50:a0:25:8e:0b:4e:bf:bd:da:cc:69:35:
                    9b:b5:22:ab:b2:31:19:65:6e:c3:05:fc:0d:26:46:
                    a8:76:cb:ca:2f:55:ee:14:f2:48:af:55:15:b8:9b:
                    7a:40:d3:c5:6a:67:82:83:5d:69:a2:a0:36:99:48:
                    eb:53:a6:32:fe:1d:29:3d:0b:75:e5:4f:e4:ab:9d:
                    f8:1f:27:d0:6b:89:6f:e9:f3:29:3e:1e:7f:9a:07:
                    4b:48:c6:65:2f:7f:15:d0:f8:45:87:4b:8d:ff:98:
                    51:3a:8b:34:34:46:41:dc:f4:91:1f:76:b5:aa:41:
                    5f:b0:bf:e4:a8:ab:a9:45:8b:55:35:b7:0a:2d:ab:
                    7c:25:86:9d:ef:bd:8f:1c:ac:4f:ad:43:73:ab:9a:
                    fa:7f:41:35:5e:c7:c5:5b:9f:8d:e7:59:61:d4:c9:
                    41:24:3c:7f:f4:3d:0a:93:9c:5d:95:7f:b3:ea:38:
                    1a:f2:3e:c7:75:d7:70:70:61:1b:fd:9d:34:f8:79:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4E:EE:B6:E6:51:23:43:5D:2E:5A:CB:F7:1C:92:9A:13:52:89:01
            X509v3 Authority Key Identifier:
                keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:93:bd:49:72:84:d4:a6:ce:41:d6:f8:43:81:ba:a6:b5:07:
         c2:a9:cc:6f:cd:c3:53:97:cb:b1:80:f6:0e:13:c0:c4:c9:78:
         02:0c:8b:03:f7:2c:24:f9:12:e2:f2:8e:20:fb:e6:dc:4a:57:
         a7:05:d9:d4:79:90:b2:f5:74:a5:a4:d1:ec:be:6f:6c:e5:e8:
         4d:c0:2b:8b:c8:70:39:e2:28:79:94:6b:5f:1d:2c:fd:16:5d:
         83:43:ab:1f:25:f3:67:b8:21:86:1e:cb:8b:e6:75:f0:4d:11:
         7f:a0:bb:48:ed:f0:7a:f1:90:b7:bc:56:a0:ec:4e:31:29:0d:
         bd:46:fe:29:33:13:69:99:f9:7d:f8:5e:27:89:9f:8b:bd:f8:
         e8:02:21:1a:00:43:e9:60:75:f2:7f:05:13:74:9a:ed:3f:09:
         cf:93:67:c5:38:53:4a:62:13:7f:cc:91:21:a9:45:ee:cf:b7:
         e2:68:4e:15:51:ca:17:d4:d8:f0:45:a9:27:27:0d:d4:eb:54:
         dd:dc:18:77:31:bb:60:30:dc:4e:ce:69:22:59:f8:9e:0b:a4:
         54:d1:5c:6f:45:a9:3a:0d:c9:78:35:2d:b2:e2:da:d5:9f:6b:
         c0:f0:2b:5d:09:2a:5f:2b:d7:76:19:a5:05:c8:68:4a:61:e5:
         b4:e5:db:fc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHQxf/ua1HDXKJqmBZK8VKybRo5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG
MkJEQTQyNjAeFw0yNjA1MDMwMjU2NDlaFw0yNzA1MDIwMzAxNDlaMDMxMTAvBgNV
BAMTKDE0NEVFRUI2RTY1MTIzNDM1RDJFNUFDQkY3MUM5MjlBMTM1Mjg5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPHFiTMsWliCuBP1mvuAZ/5+G
gBvwygrXkm7hRc/Uhj9Kv3IGZHeTTb6R/+OywSBhbkv+W7k00wT3LnqAtFCgJY4L
Tr+92sxpNZu1IquyMRllbsMF/A0mRqh2y8ovVe4U8kivVRW4m3pA08VqZ4KDXWmi
oDaZSOtTpjL+HSk9C3XlT+SrnfgfJ9BriW/p8yk+Hn+aB0tIxmUvfxXQ+EWHS43/
mFE6izQ0RkHc9JEfdrWqQV+wv+Soq6lFi1U1twotq3wlhp3vvY8crE+tQ3Ormvp/
QTVex8Vbn43nWWHUyUEkPH/0PQqTnF2Vf7PqOBryPsd113BwYRv9nTT4ea3nAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFE7utuZRI0NdLlrL9xySmhNSiQEwHwYDVR0j
BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3
NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB
NDI2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I3Yjg3ZjZkLTI5YTctNGI0Yy04
MWM3LTViNGNiZGIyY2I2YS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzkzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5QSMA0GCSqG
SIb3DQEBCwUAA4IBAQCUk71JcoTUps5B1vhDgbqmtQfCqcxvzcNTl8uxgPYOE8DE
yXgCDIsD9ywk+RLi8o4g++bcSlenBdnUeZCy9XSlpNHsvm9s5ehNwCuLyHA54ih5
lGtfHSz9Fl2DQ6sfJfNnuCGGHsuL5nXwTRF/oLtI7fB68ZC3vFag7E4xKQ29Rv4p
MxNpmfl9+F4niZ+LvfjoAiEaAEPpYHXyfwUTdJrtPwnPk2fFOFNKYhN/zJEhqUXu
z7fiaE4VUcoX1NjwRaknJw3U61Td3Bh3MbtgMNxOzmkiWfieC6RU0VxvRak6Dcl4
NS2y4trVn2vA8CtdCSpfK9d2GaUFyGhKYeW05dv8
-----END CERTIFICATE-----
Generated at Wed May 13 02:19:10 2026 by rpki-client