Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3130332e3135312e39322e302f32332d3234203d3e203435323935.roa
File:                     3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (raw, json)
Hash identifier:          l97XL+b3anmLCwyyq3iPYCEWOtlJt1r4AiG3G4acaMc=
Subject key identifier:   14:9A:56:BC:7D:C0:B2:AB:C3:20:00:58:99:81:02:06:76:BC:50:E3
Certificate issuer:       /CN=EBF23572810F8726C4B72E50589964A910C50B4B
Certificate serial:       11182BE576520FE6CF2823429FDC4D9029D48B27
Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3130332e3135312e39322e302f32332d3234203d3e203435323935.roa
Signing time:             Sun 03 May 2026 03:09:41 +0000
ROA not before:           Sun 03 May 2026 03:04:41 +0000
ROA not after:            Sun 02 May 2027 03:09:41 +0000
asID:                     45295
IP address blocks:        103.151.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:18:2b:e5:76:52:0f:e6:cf:28:23:42:9f:dc:4d:90:29:d4:8b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B
        Validity
            Not Before: May  3 03:04:41 2026 GMT
            Not After : May  2 03:09:41 2027 GMT
        Subject: CN=149A56BC7DC0B2ABC32000589981020676BC50E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9b:41:bb:52:12:7d:6e:50:d6:33:44:02:2b:
                    35:85:d6:8a:74:65:88:7c:ad:cf:20:36:d7:5b:9a:
                    0b:99:9c:7f:e0:ac:c7:b6:25:4e:a5:7e:c2:6f:dc:
                    38:ae:e0:a6:7c:f7:2f:15:45:16:97:67:49:4d:1c:
                    97:84:b1:f8:d9:0d:cf:be:44:a0:e5:d5:cc:5b:7b:
                    bd:dc:fe:68:f2:10:53:ea:ea:b9:7d:bf:9a:36:59:
                    3d:96:f6:05:3c:76:26:c9:54:b5:01:cf:25:bc:4c:
                    1f:23:b9:cb:e4:4c:ae:bd:08:b3:26:86:8a:b4:2c:
                    bb:27:d3:52:4a:1d:f2:af:f1:ae:1c:74:7f:e5:cc:
                    de:e2:f7:a6:48:99:cc:66:3a:aa:cd:df:cd:8d:75:
                    51:41:32:8e:63:eb:51:5a:fa:16:cd:87:07:fe:b5:
                    4a:c1:cf:50:7b:46:7c:71:07:44:f3:c8:e7:11:df:
                    74:f3:21:d2:2f:27:13:8c:5f:b4:31:d6:eb:4a:90:
                    4d:b0:64:d3:f4:70:d6:3c:e2:d7:10:b2:52:b0:03:
                    ef:47:bf:3e:fd:c7:d4:ea:52:01:e7:ce:3f:44:81:
                    54:0c:50:f3:ba:d9:10:09:1c:91:1f:4b:a0:f0:6f:
                    03:92:af:82:47:d4:b9:44:d0:7a:a8:a3:ed:ad:2f:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9A:56:BC:7D:C0:B2:AB:C3:20:00:58:99:81:02:06:76:BC:50:E3
            X509v3 Authority Key Identifier:
                keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3130332e3135312e39322e302f32332d3234203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:61:76:4a:47:bd:d8:ff:8b:36:1c:4b:05:a1:28:3a:dd:
         f2:a8:1a:05:41:49:6e:14:b6:66:33:f9:d6:f2:32:bd:23:ec:
         6b:90:69:23:8b:4c:0f:da:ac:8b:3a:77:57:78:b3:77:9a:73:
         d3:f7:8a:f5:51:8c:3d:26:5a:79:80:d5:2b:99:3d:17:20:2c:
         90:92:94:d7:11:45:7d:62:bc:ac:9a:b1:b7:48:71:06:dd:ac:
         c5:16:4c:5e:fd:b0:b8:e8:9b:3c:c8:6f:99:62:43:ab:a2:da:
         43:25:f0:7c:f7:11:c2:af:28:af:ae:73:93:f5:a6:0e:0b:c2:
         6d:22:f9:5d:f1:79:47:51:13:f9:32:a6:58:47:51:82:18:e9:
         31:5d:07:37:af:b0:ec:e5:2b:f1:4c:cc:47:ac:13:16:f6:b1:
         a8:2e:34:ec:28:d5:6b:78:e8:b1:21:b0:51:9a:bf:0c:d2:58:
         ba:4f:97:9d:5d:c3:ad:b6:46:b3:6c:d4:27:ae:1f:f8:8e:39:
         94:e4:aa:21:8c:fa:93:58:7d:c0:4c:27:24:48:5d:35:1c:fa:
         8b:af:dd:c0:6c:8a:ce:2d:fd:8a:95:63:01:2c:63:23:f3:1b:
         26:da:dc:50:35:c9:ce:2b:0b:a0:d9:02:5d:19:0f:8a:d3:cc:
         70:36:48:1a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUERgr5XZSD+bPKCNCn9xNkCnUiycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkx
MEM1MEI0QjAeFw0yNjA1MDMwMzA0NDFaFw0yNzA1MDIwMzA5NDFaMDMxMTAvBgNV
BAMTKDE0OUE1NkJDN0RDMEIyQUJDMzIwMDA1ODk5ODEwMjA2NzZCQzUwRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfm0G7UhJ9blDWM0QCKzWF1op0
ZYh8rc8gNtdbmguZnH/grMe2JU6lfsJv3Diu4KZ89y8VRRaXZ0lNHJeEsfjZDc++
RKDl1cxbe73c/mjyEFPq6rl9v5o2WT2W9gU8dibJVLUBzyW8TB8jucvkTK69CLMm
hoq0LLsn01JKHfKv8a4cdH/lzN7i96ZImcxmOqrN382NdVFBMo5j61Fa+hbNhwf+
tUrBz1B7RnxxB0TzyOcR33TzIdIvJxOMX7Qx1utKkE2wZNP0cNY84tcQslKwA+9H
vz79x9TqUgHnzj9EgVQMUPO62RAJHJEfS6DwbwOSr4JH1LlE0Hqoo+2tL6yFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUFJpWvH3AsqvDIABYmYECBna8UOMwHwYDVR0j
BBgwFoAU6/I1coEPhybEty5QWJlkqRDFC0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDRmNDhhODktOTBjNS00ZjVhLTgwMTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4
MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkxMEM1MEI0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQkYyMzU3MjgxMEY4NzI2QzRCNzJFNTA1ODk5NjRBOTEwQzUw
QjRCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q0ZjQ4YTg5LTkwYzUtNGY1YS04
MDE1LTM2ZjExOTZhNzFjOC8wLzMxMzAzMzJlMzEzNTMxMmUzOTMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeXXDANBgkqhkiG
9w0BAQsFAAOCAQEAP1BhdkpHvdj/izYcSwWhKDrd8qgaBUFJbhS2ZjP51vIyvSPs
a5BpI4tMD9qsizp3V3izd5pz0/eK9VGMPSZaeYDVK5k9FyAskJKU1xFFfWK8rJqx
t0hxBt2sxRZMXv2wuOibPMhvmWJDq6LaQyXwfPcRwq8or65zk/WmDgvCbSL5XfF5
R1ET+TKmWEdRghjpMV0HN6+w7OUr8UzMR6wTFvaxqC407CjVa3josSGwUZq/DNJY
uk+XnV3DrbZGs2zUJ64f+I45lOSqIYz6k1h9wEwnJEhdNRz6i6/dwGyKzi39ipVj
ASxjI/MbJtrcUDXJzisLoNkCXRkPitPMcDZIGg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:21 2026 by rpki-client