Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa
File:                     3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (raw, json)
Hash identifier:          RvtUSv5wWi3n8E8bv7TL5og1sIQ+mOz0JnsESGUYn90=
Subject key identifier:   46:A1:A0:9F:A4:96:EC:14:18:35:20:2B:C5:27:9E:C2:BC:5F:FC:CD
Certificate issuer:       /CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8
Certificate serial:       6827987BAD4D59005DD27D87982831B3F5930778
Authority key identifier: 4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa
Signing time:             Sun 03 May 2026 03:03:21 +0000
ROA not before:           Sun 03 May 2026 02:58:21 +0000
ROA not after:            Sun 02 May 2027 03:03:21 +0000
asID:                     140404
IP address blocks:        103.178.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl
                          rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:27:98:7b:ad:4d:59:00:5d:d2:7d:87:98:28:31:b3:f5:93:07:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8
        Validity
            Not Before: May  3 02:58:21 2026 GMT
            Not After : May  2 03:03:21 2027 GMT
        Subject: CN=46A1A09FA496EC141835202BC5279EC2BC5FFCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:0d:a3:35:d4:42:65:4e:d3:33:c6:ab:6a:
                    0c:9b:06:c2:a4:11:53:e3:5f:53:0e:aa:23:48:5a:
                    e3:5a:d7:32:2a:82:76:4c:73:75:33:40:8d:b6:0d:
                    18:2a:84:65:3b:10:eb:7b:cf:88:7f:74:e8:3c:86:
                    e2:20:54:f5:b6:6e:2c:7a:0c:f8:77:4c:d1:7d:f3:
                    1e:82:26:2c:46:33:c9:a0:c8:06:e7:6d:5c:e4:3c:
                    68:27:3b:e3:fc:a3:2a:d9:e7:91:67:57:be:d4:51:
                    13:fc:da:44:79:db:38:58:34:a2:d3:ce:28:21:f1:
                    3b:4a:f7:6b:d2:0d:42:c9:ac:2b:6f:de:57:bb:8f:
                    9e:3b:97:19:0f:6f:28:ec:7c:1a:24:4c:bc:02:79:
                    e4:fa:cf:8d:82:f0:6a:36:21:e9:97:96:68:25:ea:
                    7e:a2:6a:a7:df:82:af:ca:4c:f1:e0:55:a4:e3:68:
                    c2:d1:36:f8:ce:b3:32:2e:3a:58:5d:84:3c:3a:e8:
                    1d:ec:68:53:a7:ee:90:76:e1:7e:8b:d8:00:b1:f6:
                    b0:2d:7b:f2:6d:b2:93:a3:fb:5e:95:91:5a:24:81:
                    d1:a1:15:9e:3c:81:af:7a:2a:9a:76:18:f7:7f:b2:
                    17:2c:0f:c0:4d:2e:e7:a4:7c:8c:d3:22:d9:38:04:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A1:A0:9F:A4:96:EC:14:18:35:20:2B:C5:27:9E:C2:BC:5F:FC:CD
            X509v3 Authority Key Identifier:
                keyid:4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:96:91:26:1e:cd:61:af:e9:d7:80:ba:c4:ac:6c:83:61:33:
         25:54:0a:36:2d:30:9f:32:83:2a:a4:f6:e6:03:3c:ab:43:72:
         fb:95:83:ec:06:12:23:ac:66:de:14:01:2a:8b:f7:29:c6:14:
         84:1a:01:30:02:f3:26:b5:35:fb:e0:37:a2:6e:07:13:a2:83:
         b8:e4:f2:81:71:03:1c:82:4a:6f:f2:7d:c0:16:8a:29:ab:57:
         63:50:bf:ff:bc:3c:b3:7d:f2:a2:e5:5c:5a:52:1f:18:be:c2:
         85:1e:9b:17:9f:04:21:59:4f:ef:6d:79:57:6d:ac:bf:a7:b5:
         3f:b1:0d:0d:f7:63:53:9a:7d:f2:56:23:50:d8:1d:f3:02:c5:
         aa:45:c3:1b:8c:94:b2:86:76:a1:4d:b0:ae:be:6e:c3:7b:72:
         78:e6:cc:e0:3d:ff:32:5c:44:a0:cb:68:33:10:be:db:f8:e7:
         ae:ad:cb:34:21:bd:03:a8:04:83:43:ce:86:d3:99:41:54:e9:
         3e:db:8c:ab:c7:85:22:fa:cf:23:50:ec:98:aa:33:51:b9:d2:
         c3:18:21:19:09:9e:dc:02:0f:b0:2e:e1:d6:3b:04:2b:ae:fd:
         a4:86:01:bc:93:52:bc:47:a9:49:35:4c:e9:54:74:12:46:f7:
         37:ea:8a:2c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUaCeYe61NWQBd0n2HmCgxs/WTB3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY1N0U3QzY0N0VEQzJBN0Y4OERBMkUwRUQyNzE4Mzcw
NUQxQkVBODAeFw0yNjA1MDMwMjU4MjFaFw0yNzA1MDIwMzAzMjFaMDMxMTAvBgNV
BAMTKDQ2QTFBMDlGQTQ5NkVDMTQxODM1MjAyQkM1Mjc5RUMyQkM1RkZDQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32Q2jNdRCZU7TM8aragybBsKk
EVPjX1MOqiNIWuNa1zIqgnZMc3UzQI22DRgqhGU7EOt7z4h/dOg8huIgVPW2bix6
DPh3TNF98x6CJixGM8mgyAbnbVzkPGgnO+P8oyrZ55FnV77UURP82kR52zhYNKLT
zigh8TtK92vSDULJrCtv3le7j547lxkPbyjsfBokTLwCeeT6z42C8Go2IemXlmgl
6n6iaqffgq/KTPHgVaTjaMLRNvjOszIuOlhdhDw66B3saFOn7pB24X6L2ACx9rAt
e/JtspOj+16VkVokgdGhFZ48ga96Kpp2GPd/shcsD8BNLuekfIzTItk4BD/rAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQURqGgn6SW7BQYNSArxSeewrxf/M0wHwYDVR0j
BBgwFoAUT1fnxkftwqf4jaLg7ScYNwXRvqgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzEzNzM5ZTEtYjVkYi00NzM0LTgzOGEtYjBiNTgwYmViOWYzLzAvNEY1N0U3QzY0
N0VEQzJBN0Y4OERBMkUwRUQyNzE4MzcwNUQxQkVBOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RjU3RTdDNjQ3RURDMkE3Rjg4REEyRTBFRDI3MTgzNzA1RDFC
RUE4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MxMzczOWUxLWI1ZGItNDczNC04
MzhhLWIwYjU4MGJlYjlmMy8wLzMxMzAzMzJlMzEzNzM4MmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7JaMA0GCSqG
SIb3DQEBCwUAA4IBAQA5lpEmHs1hr+nXgLrErGyDYTMlVAo2LTCfMoMqpPbmAzyr
Q3L7lYPsBhIjrGbeFAEqi/cpxhSEGgEwAvMmtTX74DeibgcTooO45PKBcQMcgkpv
8n3AFoopq1djUL//vDyzffKi5VxaUh8YvsKFHpsXnwQhWU/vbXlXbay/p7U/sQ0N
92NTmn3yViNQ2B3zAsWqRcMbjJSyhnahTbCuvm7De3J45szgPf8yXESgy2gzEL7b
+Oeurcs0Ib0DqASDQ86G05lBVOk+24yrx4Ui+s8jUOyYqjNRudLDGCEZCZ7cAg+w
LuHWOwQrrv2khgG8k1K8R6lJNUzpVHQSRvc36oos
-----END CERTIFICATE-----
Generated at Wed May 13 12:46:32 2026 by rpki-client