Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa
File:                     3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          ZyYg2y6us1LQrG7diwKFALUA9hvUN3acAbNTmnkm8fU=
Subject key identifier:   35:DC:67:60:AA:54:BC:7E:7C:52:28:DB:EE:B5:02:0F:F0:1F:8F:50
Certificate issuer:       /CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0
Certificate serial:       66880D4F3CF4413741DAC44886E7B46934D0260A
Authority key identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa
Signing time:             Sun 03 May 2026 03:10:01 +0000
ROA not before:           Sun 03 May 2026 03:05:01 +0000
ROA not after:            Sun 02 May 2027 03:10:01 +0000
asID:                     135477
IP address blocks:        103.15.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl
                          rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:88:0d:4f:3c:f4:41:37:41:da:c4:48:86:e7:b4:69:34:d0:26:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0
        Validity
            Not Before: May  3 03:05:01 2026 GMT
            Not After : May  2 03:10:01 2027 GMT
        Subject: CN=35DC6760AA54BC7E7C5228DBEEB5020FF01F8F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:a3:13:5d:d2:52:af:70:94:79:60:b5:36:
                    77:6e:85:43:ae:ab:0c:ab:86:a5:0d:d4:9f:73:4b:
                    1c:0d:4c:2e:cb:ac:a7:7a:bc:a6:15:f2:07:de:8d:
                    c8:54:77:55:25:cd:be:f4:94:ec:60:b5:35:b3:0d:
                    6c:e7:f1:00:6d:e2:00:f1:f4:f6:e9:6e:43:8d:76:
                    48:b8:b2:b0:af:a7:f5:fb:f9:65:0a:e4:a5:2d:9b:
                    50:04:06:a4:f7:ca:16:96:eb:51:95:1c:3b:1d:5f:
                    c0:58:c7:ce:39:94:9a:6f:2a:de:f4:cc:ee:bd:d9:
                    fe:f7:50:ba:6f:b0:a0:c7:bb:44:2a:bb:dc:36:e7:
                    76:2d:aa:8c:7b:eb:d6:d7:ca:61:27:b2:a8:bc:9a:
                    4a:29:7c:d8:d2:0a:72:21:af:0c:c7:ff:a7:bd:93:
                    69:e8:6d:bc:f7:77:d2:4a:de:99:01:90:ce:92:1b:
                    6b:0c:b6:3f:0a:2d:e6:18:6c:89:f3:7e:b0:49:77:
                    55:93:7b:f9:59:4e:6d:c9:97:e5:05:41:e0:2f:4b:
                    16:e8:da:10:ed:36:69:aa:e1:3a:0d:40:9a:8a:60:
                    d3:c3:8d:c8:81:57:1b:03:9c:88:7c:c7:91:44:7f:
                    9b:dd:3b:c3:68:5c:2c:96:96:cf:fb:b1:5a:1a:30:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DC:67:60:AA:54:BC:7E:7C:52:28:DB:EE:B5:02:0F:F0:1F:8F:50
            X509v3 Authority Key Identifier:
                keyid:26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:a3:e7:49:56:03:67:a7:54:43:e4:86:ae:a7:6b:6c:86:b4:
         ef:2d:aa:cf:29:54:63:0c:60:af:e8:b0:de:8e:23:84:15:69:
         c1:e2:7f:ff:d6:dd:ec:6e:36:51:59:c5:bc:c0:86:ca:8d:7f:
         85:e5:b1:b8:37:b9:7f:35:1a:a1:21:38:39:b5:c5:68:80:88:
         ae:bc:d6:fe:cb:75:63:91:35:0a:c1:da:86:6d:ff:9e:c2:c9:
         b1:90:cd:d1:40:e0:f3:23:d5:74:e1:67:8b:90:92:0c:24:e5:
         17:b7:86:fd:8a:17:b0:fa:fc:f2:f5:81:22:95:cf:31:80:ed:
         6f:2d:cf:fe:b9:7e:41:5f:67:a4:91:54:93:6c:f7:cb:89:49:
         6e:fc:bd:98:ea:f3:70:41:1e:e3:08:ec:7d:a6:61:09:c9:9a:
         82:45:35:1f:f2:c6:c0:6c:b8:f3:d2:c7:76:b8:ef:0a:6a:d7:
         17:31:fc:97:c2:ae:c3:e3:1f:79:c4:ac:24:49:49:03:12:3c:
         9f:e2:56:c0:33:4c:d4:85:a8:38:25:dd:bc:3d:4a:01:6d:10:
         be:b8:03:ab:08:0c:da:5b:5e:24:b6:8b:61:bc:c8:35:e3:6a:
         03:3e:46:1d:7f:1c:26:13:da:52:dc:8a:3b:72:ae:be:1e:70:
         55:ec:a1:88
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZogNTzz0QTdB2sRIhue0aTTQJgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2
OThGRDhCMDAeFw0yNjA1MDMwMzA1MDFaFw0yNzA1MDIwMzEwMDFaMDMxMTAvBgNV
BAMTKDM1REM2NzYwQUE1NEJDN0U3QzUyMjhEQkVFQjUwMjBGRjAxRjhGNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrqMTXdJSr3CUeWC1NnduhUOu
qwyrhqUN1J9zSxwNTC7LrKd6vKYV8gfejchUd1Ulzb70lOxgtTWzDWzn8QBt4gDx
9PbpbkONdki4srCvp/X7+WUK5KUtm1AEBqT3yhaW61GVHDsdX8BYx845lJpvKt70
zO692f73ULpvsKDHu0Qqu9w253Ytqox769bXymEnsqi8mkopfNjSCnIhrwzH/6e9
k2nobbz3d9JK3pkBkM6SG2sMtj8KLeYYbInzfrBJd1WTe/lZTm3Jl+UFQeAvSxbo
2hDtNmmq4ToNQJqKYNPDjciBVxsDnIh8x5FEf5vdO8NoXCyWls/7sVoaMCVzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNdxnYKpUvH58Uijb7rUCD/Afj1AwHwYDVR0j
BBgwFoAUJnOBI03mfNjn/MUyVAwLGmmP2LAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDZmNDc2N2QtZTg0Zi00MjEwLTg0MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0
REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2OThGRDhCMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNjczODEyMzRERTY3Q0Q4RTdGQ0M1MzI1NDBDMEIxQTY5OEZE
OEIwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q2ZjQ3NjdkLWU4NGYtNDIxMC04
NDIzLTQwNjk2NjE4ZjM3Ny8wLzMxMzAzMzJlMzEzNTJlMzIzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw/WMA0GCSqG
SIb3DQEBCwUAA4IBAQCQo+dJVgNnp1RD5Iaup2tshrTvLarPKVRjDGCv6LDejiOE
FWnB4n//1t3sbjZRWcW8wIbKjX+F5bG4N7l/NRqhITg5tcVogIiuvNb+y3VjkTUK
wdqGbf+ewsmxkM3RQODzI9V04WeLkJIMJOUXt4b9ihew+vzy9YEilc8xgO1vLc/+
uX5BX2ekkVSTbPfLiUlu/L2Y6vNwQR7jCOx9pmEJyZqCRTUf8sbAbLjz0sd2uO8K
atcXMfyXwq7D4x95xKwkSUkDEjyf4lbAM0zUhag4Jd28PUoBbRC+uAOrCAzaW14k
tothvMg142oDPkYdfxwmE9pS3Io7cq6+HnBV7KGI
-----END CERTIFICATE-----
Generated at Wed May 13 03:15:31 2026 by rpki-client