Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa
File:                     3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (raw, json)
Hash identifier:          ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=
Subject key identifier:   B1:54:08:1C:79:A6:28:7B:7E:9A:06:89:D9:D2:11:8D:05:EE:92:9D
Certificate issuer:       /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2
Certificate serial:       53D97ABC40B0C2D2F5AEAE6F047E53D53DA4D2F9
Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa
Signing time:             Sun 03 May 2026 03:05:44 +0000
ROA not before:           Sun 03 May 2026 03:00:44 +0000
ROA not after:            Sun 02 May 2027 03:05:44 +0000
asID:                     139953
IP address blocks:        103.147.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl
                          rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d9:7a:bc:40:b0:c2:d2:f5:ae:ae:6f:04:7e:53:d5:3d:a4:d2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2
        Validity
            Not Before: May  3 03:00:44 2026 GMT
            Not After : May  2 03:05:44 2027 GMT
        Subject: CN=B154081C79A6287B7E9A0689D9D2118D05EE929D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f9:ff:d6:de:71:0a:78:14:39:0f:57:c5:35:
                    db:65:97:9b:e1:74:09:fa:de:57:80:cf:65:2c:cf:
                    ae:f3:a9:47:b8:8a:8d:7b:07:13:23:c1:17:a7:f8:
                    55:49:d0:f6:81:cc:1b:0b:8a:7e:ac:a4:c4:e9:38:
                    99:a5:e1:4e:a9:1d:59:bc:be:65:89:87:e5:99:52:
                    01:15:56:c1:3f:54:87:c6:f3:66:0a:c5:a8:18:ac:
                    ce:95:4b:23:53:3f:cb:71:41:b9:54:54:4f:2a:37:
                    ac:06:ff:e0:ce:99:6b:9c:43:04:49:92:ef:9b:55:
                    2e:11:c8:39:3b:f6:bc:18:75:13:05:69:08:31:a8:
                    8d:71:b9:e7:8c:1c:c2:e7:af:50:63:6a:27:dd:fa:
                    bf:09:81:f8:28:62:7a:82:10:8a:f0:df:57:54:26:
                    68:0e:d8:2c:2d:db:32:60:2b:59:e1:b3:6d:59:26:
                    49:32:9d:14:a7:5a:32:ca:b8:98:9a:4d:0a:c8:bf:
                    fe:96:d2:b6:82:1e:e1:4d:99:62:2b:dc:ca:a6:ef:
                    3a:c7:be:5e:d9:5a:ad:88:1b:22:89:00:f7:6c:b2:
                    5b:aa:6d:0c:34:21:35:4a:a4:85:21:7e:5e:16:1e:
                    8e:04:a5:e2:4e:fc:b7:43:4c:cf:31:cc:c5:92:d7:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:54:08:1C:79:A6:28:7B:7E:9A:06:89:D9:D2:11:8D:05:EE:92:9D
            X509v3 Authority Key Identifier:
                keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e5:88:fc:96:71:54:e3:ba:30:e7:b3:67:7b:33:db:20:6d:
         4a:20:0c:71:7b:bb:29:f9:d3:97:45:4d:fe:2b:63:08:9a:6d:
         c6:49:29:4c:f2:01:b7:1e:ad:c4:a5:1d:65:1a:53:b7:8d:31:
         50:a0:1d:8b:3f:33:1b:a2:6f:73:26:89:ec:25:93:ef:de:8c:
         8a:35:a9:4a:ab:8e:3d:e2:88:96:24:9d:9b:65:0c:cb:98:31:
         2a:7f:56:c0:18:64:e3:b0:5d:95:76:0c:8b:90:96:26:ca:30:
         d2:6d:05:6e:e3:ad:9a:de:4e:af:50:0a:2d:a9:1e:3f:9d:1f:
         a0:84:57:b8:08:02:44:18:59:6d:cd:0a:73:4a:58:aa:12:fb:
         a0:fb:ad:1b:b3:01:92:80:5a:1b:e3:ee:7d:0b:76:0e:37:e3:
         06:b5:9f:13:46:c5:7f:aa:82:16:ef:70:7f:ea:38:38:9c:77:
         c3:d9:f5:d1:e6:92:ea:33:56:11:e4:06:31:81:c0:ef:d4:f7:
         40:67:ab:3a:df:9a:cc:3c:d1:ce:1d:9c:11:89:12:e8:43:e0:
         67:01:d6:f8:e8:35:19:4a:35:33:ff:7b:f6:3b:57:cb:21:02:
         cb:34:08:ad:17:1f:87:55:64:05:ae:3a:fa:82:df:0f:b4:2f:
         d2:c5:5f:d4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUU9l6vECwwtL1rq5vBH5T1T2k0vkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF
Q0ZERkZDMjAeFw0yNjA1MDMwMzAwNDRaFw0yNzA1MDIwMzA1NDRaMDMxMTAvBgNV
BAMTKEIxNTQwODFDNzlBNjI4N0I3RTlBMDY4OUQ5RDIxMThEMDVFRTkyOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+f/W3nEKeBQ5D1fFNdtll5vh
dAn63leAz2Usz67zqUe4io17BxMjwRen+FVJ0PaBzBsLin6spMTpOJml4U6pHVm8
vmWJh+WZUgEVVsE/VIfG82YKxagYrM6VSyNTP8txQblUVE8qN6wG/+DOmWucQwRJ
ku+bVS4RyDk79rwYdRMFaQgxqI1xueeMHMLnr1Bjaifd+r8JgfgoYnqCEIrw31dU
JmgO2Cwt2zJgK1nhs21ZJkkynRSnWjLKuJiaTQrIv/6W0raCHuFNmWIr3Mqm7zrH
vl7ZWq2IGyKJAPdssluqbQw0ITVKpIUhfl4WHo4EpeJO/LdDTM8xzMWS1yR9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUsVQIHHmmKHt+mgaJ2dIRjQXukp0wHwYDVR0j
BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4
ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG
RkMyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2YzU3MGVmLTZlZmQtNGY5Ny1i
ZjMxLTk2ODEyNmFiNTdjMC8wLzMxMzAzMzJlMzEzNDM3MmUzODMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5NRMA0GCSqG
SIb3DQEBCwUAA4IBAQAi5Yj8lnFU47ow57NnezPbIG1KIAxxe7sp+dOXRU3+K2MI
mm3GSSlM8gG3Hq3EpR1lGlO3jTFQoB2LPzMbom9zJonsJZPv3oyKNalKq4494oiW
JJ2bZQzLmDEqf1bAGGTjsF2VdgyLkJYmyjDSbQVu462a3k6vUAotqR4/nR+ghFe4
CAJEGFltzQpzSliqEvug+60bswGSgFob4+59C3YON+MGtZ8TRsV/qoIW73B/6jg4
nHfD2fXR5pLqM1YR5AYxgcDv1PdAZ6s635rMPNHOHZwRiRLoQ+BnAdb46DUZSjUz
/3v2O1fLIQLLNAitFx+HVWQFrjr6gt8PtC/SxV/U
-----END CERTIFICATE-----
Generated at Wed May 13 12:18:11 2026 by rpki-client