Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa
File:                     3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa (raw, json)
Hash identifier:          fbSCqhwvsaol0lBcmUKKDf4ORcQLNjmes/NlWyieIPw=
Subject key identifier:   7A:FD:48:D2:28:AC:CF:7E:79:60:FD:B5:48:86:34:85:68:90:6B:EA
Certificate issuer:       /CN=FD6BC01026034705BA5D14EB31CD23B6C3F86B46
Certificate serial:       5A006E3DC7EF7EE09A54A2802A27FFA689EBC425
Authority key identifier: FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa
Signing time:             Sun 03 May 2026 03:05:51 +0000
ROA not before:           Sun 03 May 2026 03:00:51 +0000
ROA not after:            Sun 02 May 2027 03:05:51 +0000
asID:                     138875
IP address blocks:        103.140.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl
                          rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:00:6e:3d:c7:ef:7e:e0:9a:54:a2:80:2a:27:ff:a6:89:eb:c4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6BC01026034705BA5D14EB31CD23B6C3F86B46
        Validity
            Not Before: May  3 03:00:51 2026 GMT
            Not After : May  2 03:05:51 2027 GMT
        Subject: CN=7AFD48D228ACCF7E7960FDB54886348568906BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:77:f9:0b:0f:46:c3:6f:d8:7f:46:98:d3:
                    77:dd:5f:14:e0:d6:fb:96:74:db:bc:ed:1b:03:c5:
                    f5:c2:76:0f:34:5a:69:20:9d:25:94:72:96:3f:b0:
                    1e:c6:1d:f5:61:57:02:fc:3d:05:84:95:dd:03:1a:
                    40:49:52:9e:57:82:1c:4f:2d:a8:24:d1:a6:65:62:
                    c7:b5:65:33:54:d8:29:fa:5f:dd:a9:d1:7a:33:b7:
                    76:ff:f2:2e:23:e4:83:96:11:0b:68:9a:e6:df:61:
                    3b:da:1e:90:f7:39:95:7e:4a:d0:f4:5f:20:a5:3d:
                    42:ea:b5:54:75:b3:72:43:ff:69:5e:fe:15:13:a0:
                    27:11:29:42:1d:71:03:9f:eb:60:8b:bc:88:95:54:
                    40:19:7b:74:4a:d0:98:57:9a:00:62:60:90:ef:2d:
                    5a:48:f0:1c:ff:fa:fa:c7:51:74:61:88:38:b6:2b:
                    b0:46:66:a5:62:de:a8:ed:58:cb:7e:87:99:76:58:
                    37:18:bd:8f:f8:e1:3e:a0:eb:0e:8f:f3:20:93:a2:
                    0b:c4:dd:7a:51:54:06:98:b4:e5:61:b6:2e:55:8b:
                    3a:07:f9:96:d1:05:38:78:22:69:8c:a5:75:40:b1:
                    f7:8f:8d:bb:1b:bb:20:9c:c8:f2:e3:5f:ec:5b:56:
                    d1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:48:D2:28:AC:CF:7E:79:60:FD:B5:48:86:34:85:68:90:6B:EA
            X509v3 Authority Key Identifier:
                keyid:FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:11:56:19:85:5d:07:e8:a8:de:fa:1d:3a:03:e7:1f:d1:10:
         f1:91:6c:9e:3a:9d:76:3e:82:2c:99:f0:4b:45:ee:78:26:59:
         dd:62:4c:80:09:3a:94:66:a8:11:a8:71:f9:25:53:8d:22:57:
         12:41:5f:3a:0f:81:1f:6a:a7:5c:0c:73:df:fd:6f:e6:94:3c:
         9e:11:44:66:1c:01:30:29:16:05:40:75:4f:b9:82:b1:a3:24:
         df:8c:c4:18:c9:b3:13:a1:2e:8c:a8:27:b2:83:fb:76:3d:1d:
         9c:a2:3c:17:79:47:ef:df:3a:c1:66:71:50:d2:1f:f9:78:8c:
         82:55:29:8c:fb:a5:ea:8a:9c:51:dd:ca:41:db:71:ce:33:d3:
         fc:18:10:50:0a:e5:d2:c4:1d:1e:20:d5:98:2b:1d:1a:34:ee:
         a8:27:a6:40:99:83:d8:e1:c7:df:34:6c:8b:db:7d:70:e8:7c:
         a2:7e:69:09:41:b8:b8:fd:5b:e6:16:80:55:83:a8:ea:27:dd:
         55:e6:e3:a5:78:78:c1:ef:bf:53:e4:5a:a5:09:e9:20:ad:f3:
         87:09:64:a7:b1:59:d2:a3:6d:a7:ca:81:ad:3e:5f:52:8b:16:
         c2:ed:7c:d3:f7:16:d3:c8:98:63:08:47:45:6f:df:b8:56:3d:
         71:ad:8b:4f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWgBuPcfvfuCaVKKAKif/ponrxCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ2QkMwMTAyNjAzNDcwNUJBNUQxNEVCMzFDRDIzQjZD
M0Y4NkI0NjAeFw0yNjA1MDMwMzAwNTFaFw0yNzA1MDIwMzA1NTFaMDMxMTAvBgNV
BAMTKDdBRkQ0OEQyMjhBQ0NGN0U3OTYwRkRCNTQ4ODYzNDg1Njg5MDZCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOHf5Cw9Gw2/Yf0aY03fdXxTg
1vuWdNu87RsDxfXCdg80WmkgnSWUcpY/sB7GHfVhVwL8PQWEld0DGkBJUp5XghxP
Lagk0aZlYse1ZTNU2Cn6X92p0Xozt3b/8i4j5IOWEQtomubfYTvaHpD3OZV+StD0
XyClPULqtVR1s3JD/2le/hUToCcRKUIdcQOf62CLvIiVVEAZe3RK0JhXmgBiYJDv
LVpI8Bz/+vrHUXRhiDi2K7BGZqVi3qjtWMt+h5l2WDcYvY/44T6g6w6P8yCTogvE
3XpRVAaYtOVhti5VizoH+ZbRBTh4ImmMpXVAsfePjbsbuyCcyPLjX+xbVtHzAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUev1I0iisz355YP21SIY0hWiQa+owHwYDVR0j
BBgwFoAU/WvAECYDRwW6XRTrMc0jtsP4a0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yzc0YmNjZDUtMjUyYy00OTQ3LTg3MWItMTU2ZGZmZmU3NzE3LzAvRkQ2QkMwMTAy
NjAzNDcwNUJBNUQxNEVCMzFDRDIzQjZDM0Y4NkI0Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GRDZCQzAxMDI2MDM0NzA1QkE1RDE0RUIzMUNEMjNCNkMzRjg2
QjQ2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M3NGJjY2Q1LTI1MmMtNDk0Ny04
NzFiLTE1NmRmZmZlNzcxNy8wLzMxMzAzMzJlMzEzNDMwMmUzMTMwMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnjGgwDQYJ
KoZIhvcNAQELBQADggEBACcRVhmFXQfoqN76HToD5x/REPGRbJ46nXY+giyZ8EtF
7ngmWd1iTIAJOpRmqBGocfklU40iVxJBXzoPgR9qp1wMc9/9b+aUPJ4RRGYcATAp
FgVAdU+5grGjJN+MxBjJsxOhLoyoJ7KD+3Y9HZyiPBd5R+/fOsFmcVDSH/l4jIJV
KYz7peqKnFHdykHbcc4z0/wYEFAK5dLEHR4g1ZgrHRo07qgnpkCZg9jhx980bIvb
fXDofKJ+aQlBuLj9W+YWgFWDqOon3VXm46V4eMHvv1PkWqUJ6SCt84cJZKexWdKj
bafKga0+X1KLFsLtfNP3FtPImGMIR0Vv37hWPXGti08=
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:52 2026 by rpki-client