Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa
File:                     3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (raw, json)
Hash identifier:          kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=
Subject key identifier:   FC:DA:96:61:BE:56:B6:D6:79:4C:8A:8B:DD:AA:7C:D1:77:04:DF:E3
Certificate issuer:       /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC
Certificate serial:       4DE5C35C9F9E970D683CAE7034A60669C8821DE8
Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa
Signing time:             Sun 03 May 2026 03:04:48 +0000
ROA not before:           Sun 03 May 2026 02:59:48 +0000
ROA not after:            Sun 02 May 2027 03:04:48 +0000
asID:                     150521
IP address blocks:        103.75.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl
                          rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e5:c3:5c:9f:9e:97:0d:68:3c:ae:70:34:a6:06:69:c8:82:1d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC
        Validity
            Not Before: May  3 02:59:48 2026 GMT
            Not After : May  2 03:04:48 2027 GMT
        Subject: CN=FCDA9661BE56B6D6794C8A8BDDAA7CD17704DFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:a5:e2:3b:30:78:44:fe:fa:bd:7a:91:c8:
                    3b:4a:1f:d3:ef:fc:56:07:1c:9c:46:f8:c5:a4:f6:
                    2e:01:51:dc:a6:ed:0c:2a:e5:3f:6e:46:41:63:77:
                    c0:7a:fb:f9:02:9a:4b:64:cb:2a:69:59:33:db:f0:
                    be:a1:78:fa:a0:26:3f:f2:a4:02:f9:40:08:dc:af:
                    de:ef:99:a1:b8:ea:d1:fe:ef:75:4b:da:e4:e5:28:
                    f7:b1:7f:39:3e:63:05:29:f4:2f:42:30:11:67:5e:
                    37:bc:fd:a1:98:05:50:25:f7:80:30:f0:e6:30:e5:
                    01:86:bf:4a:88:04:07:ed:84:8f:86:11:58:75:e2:
                    31:75:fc:97:44:1e:3f:38:9b:1e:0e:f1:c4:6c:bc:
                    23:e8:19:75:1a:9e:2d:7d:c8:c1:eb:56:1b:93:4a:
                    9c:9d:8e:80:76:f1:2d:1c:46:91:13:23:f1:cd:72:
                    b5:a1:79:94:70:6b:25:4c:1b:b9:75:29:75:fd:46:
                    53:ce:b0:c0:65:50:20:d5:d6:44:ae:02:69:24:a2:
                    1f:42:f7:f4:09:81:f7:c4:e7:36:92:ae:65:87:f9:
                    76:75:2a:85:db:cd:7b:64:fe:07:41:64:0b:52:62:
                    dc:29:8e:f9:50:0a:c1:51:00:00:74:3d:08:ee:f8:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DA:96:61:BE:56:B6:D6:79:4C:8A:8B:DD:AA:7C:D1:77:04:DF:E3
            X509v3 Authority Key Identifier:
                keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:00:e8:14:fa:9e:38:44:87:24:09:f6:66:fd:91:cf:bc:d3:
         24:17:42:03:86:f7:38:e1:9c:5a:5d:c1:b4:64:50:20:07:ae:
         32:c7:d6:34:ce:9b:41:6a:49:ae:7b:98:85:e8:bb:bf:4f:51:
         2f:57:0c:d1:5d:da:5a:6b:da:8b:52:5b:5e:e7:89:30:7b:f4:
         e5:d2:12:1b:3f:4f:29:df:e2:83:3a:6c:40:5d:9e:25:16:75:
         22:27:85:02:00:0e:cd:42:20:0c:e8:f9:5f:88:f7:85:a6:f7:
         87:79:6a:84:ca:82:2c:60:96:83:90:b8:59:d7:f1:3f:0a:7b:
         49:87:79:d4:32:10:93:82:94:d8:48:27:c2:3a:4d:49:0d:03:
         a4:44:04:ac:fb:9c:ed:88:13:ad:59:78:3a:8c:6c:fa:d3:85:
         40:fe:0e:d0:59:61:67:ed:4f:0d:8f:4a:01:2d:9c:7e:0d:d1:
         d8:24:bf:df:d2:0e:a5:b9:c2:7e:2e:2d:ce:fd:aa:1a:33:0d:
         25:a1:e3:d3:98:f6:17:44:2f:9e:50:a1:1f:00:99:ad:52:cf:
         6e:6e:43:80:2c:dc:5d:95:b9:0d:eb:03:e7:ef:4c:94:7e:be:
         6b:34:70:b4:7a:d0:f6:fa:b9:5b:97:68:4d:66:d7:96:05:10:
         11:aa:d7:70
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTeXDXJ+elw1oPK5wNKYGaciCHegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3
QTBCNjhGQzAeFw0yNjA1MDMwMjU5NDhaFw0yNzA1MDIwMzA0NDhaMDMxMTAvBgNV
BAMTKEZDREE5NjYxQkU1NkI2RDY3OTRDOEE4QkREQUE3Q0QxNzcwNERGRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChe6XiOzB4RP76vXqRyDtKH9Pv
/FYHHJxG+MWk9i4BUdym7Qwq5T9uRkFjd8B6+/kCmktkyyppWTPb8L6hePqgJj/y
pAL5QAjcr97vmaG46tH+73VL2uTlKPexfzk+YwUp9C9CMBFnXje8/aGYBVAl94Aw
8OYw5QGGv0qIBAfthI+GEVh14jF1/JdEHj84mx4O8cRsvCPoGXUani19yMHrVhuT
SpydjoB28S0cRpETI/HNcrWheZRwayVMG7l1KXX9RlPOsMBlUCDV1kSuAmkkoh9C
9/QJgffE5zaSrmWH+XZ1KoXbzXtk/gdBZAtSYtwpjvlQCsFRAAB0PQju+EurAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU/NqWYb5WttZ5TIqL3ap80XcE3+MwHwYDVR0j
BBgwFoAUGXsdyklbudr1ZarRLl42GnoLaPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzNmNzZjNmQtZjg1MC00YzQ5LTg1NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0
OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3QTBCNjhGQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xOTdCMURDQTQ5NUJCOURBRjU2NUFBRDEyRTVFMzYxQTdBMEI2
OEZDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzZjc2YzZkLWY4NTAtNGM0OS04
NTRjLTU1ZjM4Mjg0NGM5Ny8wLzMxMzAzMzJlMzczNTJlMzYzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdLQjANBgkqhkiG
9w0BAQsFAAOCAQEALwDoFPqeOESHJAn2Zv2Rz7zTJBdCA4b3OOGcWl3BtGRQIAeu
MsfWNM6bQWpJrnuYhei7v09RL1cM0V3aWmvai1JbXueJMHv05dISGz9PKd/igzps
QF2eJRZ1IieFAgAOzUIgDOj5X4j3hab3h3lqhMqCLGCWg5C4WdfxPwp7SYd51DIQ
k4KU2EgnwjpNSQ0DpEQErPuc7YgTrVl4Ooxs+tOFQP4O0FlhZ+1PDY9KAS2cfg3R
2CS/39IOpbnCfi4tzv2qGjMNJaHj05j2F0QvnlChHwCZrVLPbm5DgCzcXZW5DesD
5+9MlH6+azRwtHrQ9vq5W5doTWbXlgUQEarXcA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:54:52 2026 by rpki-client