Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa
File:                     3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa (raw, json)
Hash identifier:          sWkEHT/FPRJD9U1n5NdrT2f9bf10TfqaTV3YmX7airQ=
Subject key identifier:   DA:DD:6E:74:E9:7E:4E:16:3F:9D:EE:21:22:5F:42:85:B0:1F:6E:2C
Certificate issuer:       /CN=E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E
Certificate serial:       7B651694C95C6E46D6E4546AD7E353ED12DA4082
Authority key identifier: E6:F1:F6:37:A8:FC:EC:86:EE:1E:93:B1:EC:2C:30:51:7A:52:E4:1E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa
Signing time:             Sun 03 May 2026 03:07:35 +0000
ROA not before:           Sun 03 May 2026 03:02:35 +0000
ROA not after:            Sun 02 May 2027 03:07:35 +0000
asID:                     147093
IP address blocks:        103.174.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.crl
                          rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:65:16:94:c9:5c:6e:46:d6:e4:54:6a:d7:e3:53:ed:12:da:40:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E
        Validity
            Not Before: May  3 03:02:35 2026 GMT
            Not After : May  2 03:07:35 2027 GMT
        Subject: CN=DADD6E74E97E4E163F9DEE21225F4285B01F6E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:8e:fd:bf:34:89:27:3a:55:7b:ff:01:6a:
                    d1:60:bc:96:2d:45:0e:bc:ba:dc:89:0f:88:13:db:
                    f6:d9:d0:c9:3e:ea:d9:92:1c:90:14:00:f3:73:08:
                    91:a4:d0:6b:62:6e:82:65:78:05:a6:f5:83:76:0d:
                    78:db:5e:d4:38:76:c8:4f:dd:6b:a3:a4:97:96:7c:
                    db:d2:2e:0b:3a:c4:84:a9:9f:aa:81:5a:08:13:ea:
                    be:25:c0:13:0a:ad:bc:34:72:34:07:f8:39:3a:eb:
                    68:a2:4a:36:63:5c:82:5c:7d:7c:9f:59:e2:ed:0a:
                    f1:df:37:a5:75:25:22:45:1c:6c:10:d3:ce:14:dd:
                    7d:71:7a:da:88:7d:8d:0a:4e:bf:d4:ae:63:d2:d0:
                    7b:3c:2d:49:c6:87:ec:dc:1a:57:34:56:50:83:62:
                    04:44:52:d5:dc:79:ba:03:39:38:f7:ae:23:d0:71:
                    4c:33:d3:5f:37:4f:d1:38:d6:8a:5b:9b:70:3c:d9:
                    5e:45:12:32:f5:c5:53:64:74:a2:5b:63:19:61:60:
                    32:69:73:07:e7:ae:17:68:b4:94:29:04:38:10:ed:
                    61:79:fe:cb:d3:c5:f3:56:ff:46:ea:41:26:b3:a2:
                    9f:45:4d:60:b9:34:aa:46:22:01:2f:75:89:1e:5a:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DD:6E:74:E9:7E:4E:16:3F:9D:EE:21:22:5F:42:85:B0:1F:6E:2C
            X509v3 Authority Key Identifier:
                keyid:E6:F1:F6:37:A8:FC:EC:86:EE:1E:93:B1:EC:2C:30:51:7A:52:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6F1F637A8FCEC86EE1E93B1EC2C30517A52E41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:7d:3a:46:b0:d6:26:fa:db:53:78:7f:4a:9b:9a:b8:c1:b6:
         8e:47:9a:13:a4:60:a0:a3:28:3b:99:47:2a:b4:41:c4:fe:ba:
         f6:ef:35:86:22:b6:1b:26:ea:8e:fb:29:9e:1f:0a:9b:6c:7e:
         7c:5a:d8:f5:2f:f9:2e:d5:5d:b2:ee:50:59:a9:2b:93:b6:8b:
         fa:1a:aa:aa:1c:ef:52:79:3b:12:4a:b6:0a:9f:f3:b2:98:57:
         5e:71:eb:30:64:5e:98:9a:40:bf:9a:40:1f:62:ef:89:b3:98:
         3f:ac:19:c0:21:cf:56:59:77:36:57:ae:87:9b:1b:fb:02:e1:
         3f:cf:70:91:80:e6:38:f7:3c:3c:55:1c:74:ad:36:74:ab:a2:
         14:23:1d:2e:f1:4e:4e:6b:72:dc:25:17:0f:04:5e:79:1a:a2:
         cd:30:ad:ba:f5:d6:a2:35:76:cd:7a:3d:c1:1f:e0:45:a8:3a:
         77:76:40:2d:11:4d:2f:f4:9e:9e:40:b3:28:c1:c7:9f:ad:24:
         93:31:7b:be:41:de:6f:6c:fb:a5:e8:b8:06:96:19:95:56:58:
         41:97:d3:da:c8:86:ef:bf:cc:74:26:39:2b:de:eb:8a:22:79:
         d1:ea:70:07:09:8f:8b:29:5f:fb:56:b8:5b:ad:03:d9:1b:24:
         54:ea:f8:0f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUe2UWlMlcbkbW5FRq1+NT7RLaQIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZGMUY2MzdBOEZDRUM4NkVFMUU5M0IxRUMyQzMwNTE3
QTUyRTQxRTAeFw0yNjA1MDMwMzAyMzVaFw0yNzA1MDIwMzA3MzVaMDMxMTAvBgNV
BAMTKERBREQ2RTc0RTk3RTRFMTYzRjlERUUyMTIyNUY0Mjg1QjAxRjZFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBI79vzSJJzpVe/8BatFgvJYt
RQ68utyJD4gT2/bZ0Mk+6tmSHJAUAPNzCJGk0GtiboJleAWm9YN2DXjbXtQ4dshP
3WujpJeWfNvSLgs6xISpn6qBWggT6r4lwBMKrbw0cjQH+Dk662iiSjZjXIJcfXyf
WeLtCvHfN6V1JSJFHGwQ084U3X1xetqIfY0KTr/UrmPS0Hs8LUnGh+zcGlc0VlCD
YgREUtXceboDOTj3riPQcUwz0183T9E41opbm3A82V5FEjL1xVNkdKJbYxlhYDJp
cwfnrhdotJQpBDgQ7WF5/svTxfNW/0bqQSazop9FTWC5NKpGIgEvdYkeWtivAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2t1udOl+ThY/ne4hIl9ChbAfbiwwHwYDVR0j
BBgwFoAU5vH2N6j87IbuHpOx7CwwUXpS5B4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2U0ODJhZGEtZDBjOC00NjRiLWEwMDctODUxOTQ4OWNiMWM0LzAvRTZGMUY2MzdB
OEZDRUM4NkVFMUU5M0IxRUMyQzMwNTE3QTUyRTQxRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNkYxRjYzN0E4RkNFQzg2RUUxRTkzQjFFQzJDMzA1MTdBNTJF
NDFFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NlNDgyYWRhLWQwYzgtNDY0Yi1h
MDA3LTg1MTk0ODljYjFjNC8wLzMxMzAzMzJlMzEzNzM0MmUzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ64RMA0GCSqG
SIb3DQEBCwUAA4IBAQCOfTpGsNYm+ttTeH9Km5q4wbaOR5oTpGCgoyg7mUcqtEHE
/rr27zWGIrYbJuqO+ymeHwqbbH58Wtj1L/ku1V2y7lBZqSuTtov6GqqqHO9SeTsS
SrYKn/OymFdeceswZF6YmkC/mkAfYu+Js5g/rBnAIc9WWXc2V66Hmxv7AuE/z3CR
gOY49zw8VRx0rTZ0q6IUIx0u8U5Oa3LcJRcPBF55GqLNMK269daiNXbNej3BH+BF
qDp3dkAtEU0v9J6eQLMowcefrSSTMXu+Qd5vbPul6LgGlhmVVlhBl9PayIbvv8x0
Jjkr3uuKInnR6nAHCY+LKV/7VrhbrQPZGyRU6vgP
-----END CERTIFICATE-----
Generated at Wed May 13 07:38:30 2026 by rpki-client