Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa
File:                     3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (raw, json)
Hash identifier:          cszw5piIkmysL+SZS8lElBtByo5QIz3Wp1PoZt/A7vY=
Subject key identifier:   FE:7F:4C:F2:3E:48:B8:02:77:17:3F:2F:5B:20:F5:0C:E5:33:6F:EF
Certificate issuer:       /CN=0D2802EC43905EEA387602B994B8B579041C8507
Certificate serial:       15BDF8F9E287CA5D9B253793C5F0B515943CE485
Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa
Signing time:             Sun 03 May 2026 03:13:13 +0000
ROA not before:           Sun 03 May 2026 03:08:13 +0000
ROA not after:            Sun 02 May 2027 03:13:13 +0000
asID:                     138822
IP address blocks:        103.137.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl
                          rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bd:f8:f9:e2:87:ca:5d:9b:25:37:93:c5:f0:b5:15:94:3c:e4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507
        Validity
            Not Before: May  3 03:08:13 2026 GMT
            Not After : May  2 03:13:13 2027 GMT
        Subject: CN=FE7F4CF23E48B80277173F2F5B20F50CE5336FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:c5:07:dd:c1:59:b5:22:5d:a0:9e:dc:58:
                    1b:1c:18:e8:d9:ca:1a:09:a4:e0:84:54:9a:e2:cb:
                    68:07:4f:f2:81:74:97:29:e5:86:70:69:87:d9:be:
                    ec:e1:dc:d8:26:a9:0c:3d:f8:1c:f1:79:d6:5f:68:
                    7b:9a:92:25:98:2f:b0:83:79:e0:12:d9:bd:ab:e1:
                    74:ab:fa:bb:68:d7:28:bb:09:4c:33:65:ec:8b:bb:
                    ab:e0:bb:5a:34:3a:46:64:e5:09:7e:9e:fc:7a:4a:
                    8b:75:30:f7:17:1d:fb:ce:13:3a:d9:31:39:d8:95:
                    50:aa:c0:3d:b0:8b:96:5a:01:46:2e:42:0d:19:0f:
                    80:21:7d:73:38:26:ba:ac:b7:c0:19:cc:cf:93:9f:
                    e7:09:cf:b3:a3:55:04:3e:c3:f7:8d:66:f6:e3:88:
                    81:a3:3a:7b:f3:8f:2c:82:87:89:a9:7d:73:58:9b:
                    78:05:07:56:6f:64:23:4b:42:31:46:a2:59:75:18:
                    c4:5b:35:64:f5:25:1c:1c:5c:68:6b:ea:1d:c1:8e:
                    60:4a:87:f8:74:98:40:5b:f0:3c:e4:21:08:d5:57:
                    fe:c9:cb:a3:22:54:1e:7b:68:3d:43:23:fa:9d:70:
                    d2:93:cd:88:a4:c4:c7:28:db:97:d0:b7:a5:4e:21:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7F:4C:F2:3E:48:B8:02:77:17:3F:2F:5B:20:F5:0C:E5:33:6F:EF
            X509v3 Authority Key Identifier:
                keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:bd:63:5e:52:a3:9d:2b:16:22:7f:84:8d:fb:7c:30:07:ed:
         d4:5e:66:77:7a:c8:fc:72:7e:d9:9a:63:9b:0f:5f:d1:aa:20:
         04:d5:da:84:6f:9b:12:22:ff:7f:1c:9a:52:8c:25:bb:3e:de:
         95:9c:50:76:8c:d0:5a:fa:cd:cd:ea:f8:21:b7:c5:35:e0:22:
         ec:8c:39:dc:3e:4e:0c:d8:b5:e1:0f:51:01:84:6c:ad:98:1d:
         c0:f6:16:7b:14:35:3a:e3:46:c5:bb:0a:85:bb:c3:18:74:92:
         94:f7:83:95:20:d6:e7:ad:af:01:16:aa:10:a8:27:e9:03:73:
         08:d1:f9:5f:4d:35:e5:9a:0f:72:a0:98:8c:dd:7e:18:26:b0:
         d8:7d:f9:9a:b3:2f:bf:af:7c:07:d4:99:71:61:61:04:29:71:
         42:ad:9b:c4:18:3b:cb:61:91:37:3e:7c:8c:89:7f:9a:e2:01:
         e6:c1:fe:5f:f8:60:39:9a:08:f2:3c:30:a1:4e:99:8e:9e:94:
         e8:24:79:e9:97:03:a7:ca:da:16:db:3e:e8:04:a1:be:b6:36:
         18:ab:1f:c8:54:23:7b:61:44:42:3c:37:6c:d3:04:dd:a3:4e:
         72:ef:e4:7f:82:1c:95:bc:ca:89:4c:63:7d:7f:7d:f1:0b:f3:
         70:d1:0e:bc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFb34+eKHyl2bJTeTxfC1FZQ85IUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1Nzkw
NDFDODUwNzAeFw0yNjA1MDMwMzA4MTNaFw0yNzA1MDIwMzEzMTNaMDMxMTAvBgNV
BAMTKEZFN0Y0Q0YyM0U0OEI4MDI3NzE3M0YyRjVCMjBGNTBDRTUzMzZGRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3cUH3cFZtSJdoJ7cWBscGOjZ
yhoJpOCEVJriy2gHT/KBdJcp5YZwaYfZvuzh3NgmqQw9+BzxedZfaHuakiWYL7CD
eeAS2b2r4XSr+rto1yi7CUwzZeyLu6vgu1o0OkZk5Ql+nvx6Sot1MPcXHfvOEzrZ
MTnYlVCqwD2wi5ZaAUYuQg0ZD4AhfXM4Jrqst8AZzM+Tn+cJz7OjVQQ+w/eNZvbj
iIGjOnvzjyyCh4mpfXNYm3gFB1ZvZCNLQjFGoll1GMRbNWT1JRwcXGhr6h3BjmBK
h/h0mEBb8DzkIQjVV/7Jy6MiVB57aD1DI/qdcNKTzYikxMco25fQt6VOIWpzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/n9M8j5IuAJ3Fz8vWyD1DOUzb+8wHwYDVR0j
BBgwFoAUDSgC7EOQXuo4dgK5lLi1eQQchQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTNiYmYxZGEtZTMxNy00OGVmLWFkNmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0
MzkwNUVFQTM4NzYwMkI5OTRCOEI1NzkwNDFDODUwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wRDI4MDJFQzQzOTA1RUVBMzg3NjAyQjk5NEI4QjU3OTA0MUM4
NTA3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UzYmJmMWRhLWUzMTctNDhlZi1h
ZDZkLWZlOGE4YmYwODQwMC8wLzMxMzAzMzJlMzEzMzM3MmUzMzM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4kmMA0GCSqG
SIb3DQEBCwUAA4IBAQB8vWNeUqOdKxYif4SN+3wwB+3UXmZ3esj8cn7ZmmObD1/R
qiAE1dqEb5sSIv9/HJpSjCW7Pt6VnFB2jNBa+s3N6vght8U14CLsjDncPk4M2LXh
D1EBhGytmB3A9hZ7FDU640bFuwqFu8MYdJKU94OVINbnra8BFqoQqCfpA3MI0flf
TTXlmg9yoJiM3X4YJrDYffmasy+/r3wH1JlxYWEEKXFCrZvEGDvLYZE3PnyMiX+a
4gHmwf5f+GA5mgjyPDChTpmOnpToJHnplwOnytoW2z7oBKG+tjYYqx/IVCN7YURC
PDds0wTdo05y7+R/ghyVvMqJTGN9f33xC/Nw0Q68
-----END CERTIFICATE-----
Generated at Wed May 13 01:14:41 2026 by rpki-client