Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa
File:                     3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (raw, json)
Hash identifier:          3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=
Subject key identifier:   7C:2A:8C:BC:D5:B9:98:5E:45:AC:87:52:23:44:09:A7:C6:3D:68:C9
Certificate issuer:       /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431
Certificate serial:       04A0F35893A1DFAB320F0555A4644F2728651B2C
Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa
Signing time:             Sun 03 May 2026 03:02:01 +0000
ROA not before:           Sun 03 May 2026 02:57:01 +0000
ROA not after:            Sun 02 May 2027 03:02:01 +0000
asID:                     64315
IP address blocks:        103.119.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl
                          rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a0:f3:58:93:a1:df:ab:32:0f:05:55:a4:64:4f:27:28:65:1b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431
        Validity
            Not Before: May  3 02:57:01 2026 GMT
            Not After : May  2 03:02:01 2027 GMT
        Subject: CN=7C2A8CBCD5B9985E45AC8752234409A7C63D68C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:a7:02:14:e2:50:a7:bc:ad:72:55:f0:91:
                    27:eb:ef:18:ff:2c:82:b8:57:92:e3:0f:ae:2d:8d:
                    dd:dc:c8:fc:57:a6:7a:38:b8:95:54:e0:b9:a4:ba:
                    c1:b6:44:0c:66:af:ac:c1:21:94:15:10:9d:74:b4:
                    1e:33:d9:14:b8:65:71:05:3e:e3:3e:9b:b9:2b:26:
                    27:ea:25:9b:83:93:c7:0d:d1:b8:ff:3e:58:91:29:
                    3b:7e:cd:50:0c:86:f4:7f:30:a2:ca:0d:94:d4:67:
                    6c:7b:a8:fb:cd:fd:ed:0b:75:64:f5:fb:b9:6f:95:
                    bf:b0:63:22:5b:cd:0d:53:a6:96:31:c4:a0:25:ee:
                    6c:69:a5:23:21:95:4f:47:fe:c2:b9:e9:fe:b6:2c:
                    5c:1b:48:85:31:e2:82:ae:69:ce:11:c9:1e:64:cd:
                    d0:51:15:ef:0f:ad:af:d5:93:81:a9:06:8d:4f:e0:
                    4f:a1:5c:4f:77:af:36:d7:e3:4f:0f:ef:ef:e8:14:
                    a5:00:d7:44:9a:6a:ce:1b:e9:b1:b5:50:97:46:e8:
                    ee:67:5f:2b:5b:43:89:8e:5c:b1:47:2a:32:46:bf:
                    8a:68:40:df:4e:fd:be:8b:ab:a1:31:9a:38:7e:3f:
                    97:26:eb:c7:65:5b:37:2d:d2:28:8c:0e:08:11:63:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2A:8C:BC:D5:B9:98:5E:45:AC:87:52:23:44:09:A7:C6:3D:68:C9
            X509v3 Authority Key Identifier:
                keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:3f:12:1c:f4:ca:4a:40:49:f2:bc:af:ba:84:18:c7:62:
         5d:d6:28:5f:94:a4:f5:a6:df:07:77:55:9c:82:de:25:51:29:
         e9:e4:69:b6:bb:66:ea:0e:94:25:6f:0a:6a:26:cb:79:59:04:
         c5:85:c7:98:8a:44:2d:19:6b:71:62:22:0d:9d:3f:16:34:d7:
         6b:e5:6d:9c:13:9c:59:31:b7:e2:ec:fd:b0:7e:59:80:f6:29:
         bc:d3:db:18:31:7e:0b:63:c9:f4:5b:b7:47:20:37:3a:26:aa:
         06:72:be:5a:69:ad:79:de:1b:9a:b0:dc:ed:8b:59:89:54:03:
         30:81:a8:ef:2c:d8:93:96:c6:4d:49:94:f1:62:d8:e0:57:43:
         2f:0f:00:2f:83:25:98:1a:93:9a:f4:a9:97:f9:79:34:ba:73:
         3d:93:86:3c:bd:15:e2:3e:8c:00:26:26:6c:66:3a:33:24:6a:
         0a:04:eb:ca:78:8a:de:ad:70:4e:e6:f1:2d:2a:e5:75:21:09:
         f7:7c:13:47:f3:c8:fd:8a:98:3b:7e:28:69:34:5c:15:7f:db:
         2e:46:bc:4a:fc:18:90:22:d6:e2:7c:88:78:71:4c:3b:92:18:
         1f:83:98:72:80:65:3f:b4:9e:c5:19:ac:62:29:f4:a0:bd:6f:
         6c:ea:32:2c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBKDzWJOh36syDwVVpGRPJyhlGywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I5MDJFOEU4QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcy
MTU4QTQzMTAeFw0yNjA1MDMwMjU3MDFaFw0yNzA1MDIwMzAyMDFaMDMxMTAvBgNV
BAMTKDdDMkE4Q0JDRDVCOTk4NUU0NUFDODc1MjIzNDQwOUE3QzYzRDY4QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcW6cCFOJQp7ytclXwkSfr7xj/
LIK4V5LjD64tjd3cyPxXpno4uJVU4LmkusG2RAxmr6zBIZQVEJ10tB4z2RS4ZXEF
PuM+m7krJifqJZuDk8cN0bj/PliRKTt+zVAMhvR/MKLKDZTUZ2x7qPvN/e0LdWT1
+7lvlb+wYyJbzQ1TppYxxKAl7mxppSMhlU9H/sK56f62LFwbSIUx4oKuac4RyR5k
zdBRFe8Pra/Vk4GpBo1P4E+hXE93rzbX408P7+/oFKUA10Saas4b6bG1UJdG6O5n
XytbQ4mOXLFHKjJGv4poQN9O/b6Lq6Exmjh+P5cm68dlWzct0iiMDggRY7WzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfCqMvNW5mF5FrIdSI0QJp8Y9aMkwHwYDVR0j
BBgwFoAUe5AujorQmZexJRpufyvlpyFYpDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yjg4M2UzYmUtNTdlMi00MTI1LWEwYzUtOWE5ZWE1MDFiZjA1LzAvN0I5MDJFOEU4
QUQwOTk5N0IxMjUxQTZFN0YyQkU1QTcyMTU4QTQzMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QjkwMkU4RThBRDA5OTk3QjEyNTFBNkU3RjJCRTVBNzIxNThB
NDMxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I4ODNlM2JlLTU3ZTItNDEyNS1h
MGM1LTlhOWVhNTAxYmYwNS8wLzMxMzAzMzJlMzEzMTM5MmUzMjMyMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNjM0MzMzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ3fkMA0GCSqG
SIb3DQEBCwUAA4IBAQCayT8SHPTKSkBJ8ryvuoQYx2Jd1ihflKT1pt8Hd1Wcgt4l
USnp5Gm2u2bqDpQlbwpqJst5WQTFhceYikQtGWtxYiINnT8WNNdr5W2cE5xZMbfi
7P2wflmA9im809sYMX4LY8n0W7dHIDc6JqoGcr5aaa153huasNzti1mJVAMwgajv
LNiTlsZNSZTxYtjgV0MvDwAvgyWYGpOa9KmX+Xk0unM9k4Y8vRXiPowAJiZsZjoz
JGoKBOvKeIrerXBO5vEtKuV1IQn3fBNH88j9ipg7fihpNFwVf9suRrxK/BiQItbi
fIh4cUw7khgfg5hygGU/tJ7FGaxiKfSgvW9s6jIs
-----END CERTIFICATE-----
Generated at Wed May 13 06:26:32 2026 by rpki-client