Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa
File:                     3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (raw, json)
Hash identifier:          5PA+RoFsU/KO7v+L0x7qbIvSiKy1qc9c1F5T1nVZmHM=
Subject key identifier:   EC:C3:51:AF:1C:05:DA:4D:78:29:4B:4A:D5:28:28:AD:46:33:B1:D6
Certificate issuer:       /CN=01B748FE9E379A963DF80DAA39E554231A002AB4
Certificate serial:       4EB3BCA5F8E3A3148148442B917B082D428F617F
Authority key identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa
Signing time:             Sun 03 May 2026 03:13:08 +0000
ROA not before:           Sun 03 May 2026 03:08:08 +0000
ROA not after:            Sun 02 May 2027 03:13:08 +0000
asID:                     142375
IP address blocks:        103.171.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl
                          rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b3:bc:a5:f8:e3:a3:14:81:48:44:2b:91:7b:08:2d:42:8f:61:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B748FE9E379A963DF80DAA39E554231A002AB4
        Validity
            Not Before: May  3 03:08:08 2026 GMT
            Not After : May  2 03:13:08 2027 GMT
        Subject: CN=ECC351AF1C05DA4D78294B4AD52828AD4633B1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:fa:47:4a:70:9a:bd:f9:1f:cd:75:7e:bd:
                    35:e9:0f:b0:5a:fc:ee:50:3b:7d:72:22:7c:f4:17:
                    85:e9:09:6c:2b:f3:e3:42:c8:f4:fd:35:3c:cd:6a:
                    ad:4c:e9:4a:ac:64:97:e8:23:15:a1:ee:34:7f:d0:
                    14:d2:be:89:aa:0d:cd:74:51:4f:d4:7c:2a:4a:b1:
                    98:d4:4a:29:1e:8c:5a:40:27:33:51:d2:e8:81:f0:
                    32:92:25:93:43:5c:10:bd:6a:55:ef:7e:a4:ea:58:
                    3f:c5:ac:13:0b:3c:46:d5:ed:21:ff:86:47:a9:4b:
                    bf:d5:87:52:f9:a6:37:6a:73:17:9a:28:8a:c6:41:
                    f8:0f:de:51:60:bf:78:c9:cf:fd:0f:d2:c6:ad:fe:
                    9d:28:c6:20:68:5d:ec:af:cb:fa:9b:31:2a:0f:b2:
                    78:c3:52:c6:e9:bc:a0:58:de:d8:7c:0c:ca:94:0f:
                    3b:27:3e:de:b3:1e:66:e6:57:ff:3b:89:1d:fe:36:
                    2b:2c:00:11:0d:36:8f:77:2e:0b:51:5b:00:8c:ab:
                    53:38:97:ad:4c:a5:51:a3:49:25:67:eb:a9:f1:0d:
                    9a:19:4c:8a:aa:d3:e2:00:5f:ea:d4:be:f6:77:f5:
                    89:26:34:a2:ea:d1:da:41:57:60:13:31:e8:83:f1:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C3:51:AF:1C:05:DA:4D:78:29:4B:4A:D5:28:28:AD:46:33:B1:D6
            X509v3 Authority Key Identifier:
                keyid:01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:61:af:e3:b9:15:33:05:66:50:5e:bd:f1:c3:dc:6c:52:da:
         a3:49:db:a4:4f:c8:4f:1a:82:6c:75:88:03:d0:3a:99:cf:f4:
         1e:3f:04:91:2d:50:32:a0:17:0a:4a:0f:c3:cd:c4:e0:97:31:
         0c:14:be:50:30:95:b9:99:b1:eb:6f:61:f6:90:9d:21:10:23:
         a8:e6:48:39:6d:ba:08:80:42:32:41:96:b4:5f:3b:df:10:03:
         4c:28:af:ea:a7:e3:e8:00:e3:f5:84:8c:31:df:05:9f:d4:f9:
         cb:82:a8:62:94:b0:05:0a:14:30:49:41:c7:8d:a6:7d:f7:83:
         b0:50:c4:1e:5b:9c:43:bd:02:0d:4b:06:15:6e:5c:f2:e7:67:
         45:0c:44:83:14:48:97:9d:a4:e4:1d:76:5b:9d:3b:e5:8e:50:
         e9:75:24:ef:20:7c:4c:c4:c5:63:79:1b:33:cd:1f:43:af:c0:
         c8:1e:8a:30:20:e3:46:61:b5:0a:f5:fa:1b:02:89:64:27:68:
         a7:bc:b7:a4:6b:da:8f:36:63:e3:75:75:a6:fc:ba:25:d4:80:
         a6:c1:3b:fe:0a:84:9f:77:01:e8:32:0b:4b:57:f8:6e:ec:d7:
         1f:1d:85:4a:09:9a:25:1f:4d:7a:b2:56:c6:b0:71:e9:7f:cd:
         ec:fe:21:76
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTrO8pfjjoxSBSEQrkXsILUKPYX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFCNzQ4RkU5RTM3OUE5NjNERjgwREFBMzlFNTU0MjMx
QTAwMkFCNDAeFw0yNjA1MDMwMzA4MDhaFw0yNzA1MDIwMzEzMDhaMDMxMTAvBgNV
BAMTKEVDQzM1MUFGMUMwNURBNEQ3ODI5NEI0QUQ1MjgyOEFENDYzM0IxRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnD/pHSnCavfkfzXV+vTXpD7Ba
/O5QO31yInz0F4XpCWwr8+NCyPT9NTzNaq1M6UqsZJfoIxWh7jR/0BTSvomqDc10
UU/UfCpKsZjUSikejFpAJzNR0uiB8DKSJZNDXBC9alXvfqTqWD/FrBMLPEbV7SH/
hkepS7/Vh1L5pjdqcxeaKIrGQfgP3lFgv3jJz/0P0sat/p0oxiBoXeyvy/qbMSoP
snjDUsbpvKBY3th8DMqUDzsnPt6zHmbmV/87iR3+NissABENNo93LgtRWwCMq1M4
l61MpVGjSSVn66nxDZoZTIqq0+IAX+rUvvZ39YkmNKLq0dpBV2ATMeiD8aDdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU7MNRrxwF2k14KUtK1SgorUYzsdYwHwYDVR0j
BBgwFoAUAbdI/p43mpY9+A2qOeVUIxoAKrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTM1MDVjYjMtYjU1ZS00MGU0LWFjNzktNjM2NTYwNmY0ZWY5LzAvMDFCNzQ4RkU5
RTM3OUE5NjNERjgwREFBMzlFNTU0MjMxQTAwMkFCNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMUI3NDhGRTlFMzc5QTk2M0RGODBEQUEzOUU1NTQyMzFBMDAy
QUI0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UzNTA1Y2IzLWI1NWUtNDBlNC1h
Yzc5LTYzNjU2MDZmNGVmOS8wLzMxMzAzMzJlMzEzNzMxMmUzMTM4MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnq7YwDQYJ
KoZIhvcNAQELBQADggEBABhhr+O5FTMFZlBevfHD3GxS2qNJ26RPyE8agmx1iAPQ
OpnP9B4/BJEtUDKgFwpKD8PNxOCXMQwUvlAwlbmZsetvYfaQnSEQI6jmSDltugiA
QjJBlrRfO98QA0wor+qn4+gA4/WEjDHfBZ/U+cuCqGKUsAUKFDBJQceNpn33g7BQ
xB5bnEO9Ag1LBhVuXPLnZ0UMRIMUSJedpOQddludO+WOUOl1JO8gfEzExWN5GzPN
H0OvwMgeijAg40ZhtQr1+hsCiWQnaKe8t6Rr2o82Y+N1dab8uiXUgKbBO/4KhJ93
AegyC0tX+G7s1x8dhUoJmiUfTXqyVsawcel/zez+IXY=
-----END CERTIFICATE-----
Generated at Wed May 13 06:58:08 2026 by rpki-client