Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3130332e31302e3134342e302f32342d3234203d3e203436303537.roa
File:                     3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (raw, json)
Hash identifier:          jBCASy1F6Hwq7/RSM0DnwGAyM9nsMAfX8PewBvtkG60=
Subject key identifier:   6F:21:8E:06:CC:3D:2D:E4:95:72:D4:34:AA:D1:1C:4D:41:42:07:E8
Certificate issuer:       /CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F
Certificate serial:       5ADB82080BC59AD696E087FE070E1E639D8D035C
Authority key identifier: 1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3130332e31302e3134342e302f32342d3234203d3e203436303537.roa
Signing time:             Sun 03 May 2026 03:14:28 +0000
ROA not before:           Sun 03 May 2026 03:09:28 +0000
ROA not after:            Sun 02 May 2027 03:14:28 +0000
asID:                     46057
IP address blocks:        103.10.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl
                          rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:db:82:08:0b:c5:9a:d6:96:e0:87:fe:07:0e:1e:63:9d:8d:03:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F
        Validity
            Not Before: May  3 03:09:28 2026 GMT
            Not After : May  2 03:14:28 2027 GMT
        Subject: CN=6F218E06CC3D2DE49572D434AAD11C4D414207E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:ee:d2:ce:a9:5e:ab:39:fb:85:2a:b7:8b:
                    27:6f:30:06:83:0f:1e:65:e8:5c:b7:6f:6f:9e:7f:
                    9a:c4:47:04:dd:69:f5:10:f4:85:c6:c0:d1:6e:4a:
                    26:0e:8e:f4:f0:6e:ea:85:cc:f0:73:54:f7:9a:85:
                    46:f7:3f:3b:97:8e:ef:59:b9:fd:d9:0f:49:5b:6d:
                    80:f2:93:e1:f3:56:0d:26:e6:ad:93:46:11:9d:05:
                    d1:78:1a:e3:bc:d8:d4:5a:e8:bd:ea:d5:09:bd:36:
                    93:65:29:f5:9f:5b:7b:e8:c7:53:9c:5d:b9:a9:50:
                    44:52:ab:8a:64:6f:0b:94:a4:e6:ed:59:89:ec:d6:
                    36:7b:f1:c4:af:ed:6d:e5:6c:96:c3:bc:70:b4:6f:
                    80:d4:ec:d8:30:05:3e:47:32:4a:5d:91:4f:75:bd:
                    9b:5a:95:01:77:68:28:58:fd:2b:31:36:91:5a:4a:
                    cf:bc:6a:8c:43:da:49:ff:42:c2:54:3e:22:ca:7c:
                    41:1d:4d:44:cd:3b:3b:47:d9:d7:79:be:d4:37:aa:
                    19:3e:21:e2:9a:64:40:c9:c2:9d:c6:da:b6:c9:12:
                    d7:ed:a6:f5:48:4a:4b:88:bc:e3:f6:a1:91:4a:6d:
                    08:cc:d5:31:91:33:c3:4c:3e:88:63:88:77:86:85:
                    c2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:21:8E:06:CC:3D:2D:E4:95:72:D4:34:AA:D1:1C:4D:41:42:07:E8
            X509v3 Authority Key Identifier:
                keyid:1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3130332e31302e3134342e302f32342d3234203d3e203436303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:67:7b:ed:14:94:a9:ba:a4:87:fe:88:a7:c7:12:88:32:
         09:70:66:d6:bd:e8:a5:3d:76:04:5c:5a:c9:89:d8:85:e0:6f:
         99:b4:36:ef:4d:9e:f6:84:a9:11:bd:9a:5b:14:e8:27:f1:b0:
         42:b4:59:7f:db:b5:5c:25:e1:ec:b7:bc:dd:ed:15:d3:7c:ea:
         b3:a3:a3:f8:f7:a1:56:d9:59:e4:26:7f:f5:6d:6e:07:54:26:
         0b:51:d7:92:19:a6:80:9c:4f:73:79:86:2f:b8:94:5f:fa:49:
         91:08:66:46:14:88:8e:06:aa:02:19:ba:ff:f4:64:45:03:48:
         20:09:64:3f:4c:bb:94:17:dd:ba:5a:4d:3f:68:eb:24:52:b1:
         89:13:3f:dd:64:ca:61:05:b0:d1:c0:e0:62:75:66:bb:04:2f:
         71:56:ce:06:8a:95:10:87:cf:16:d2:85:14:40:c2:76:e6:72:
         21:75:3a:77:28:c4:ed:a2:6f:a1:a0:32:e9:7d:b4:93:52:67:
         9a:12:4f:ee:31:47:42:51:78:c7:e3:20:24:a8:94:07:55:c5:
         cc:c1:f5:3d:18:03:89:5d:7d:5b:23:a3:d5:c8:34:89:9e:1a:
         3b:d1:82:ad:0b:18:8f:24:e4:27:55:57:d0:b5:24:02:09:c1:
         86:dc:68:4c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWtuCCAvFmtaW4If+Bw4eY52NA1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcy
NTUyRUQzRjAeFw0yNjA1MDMwMzA5MjhaFw0yNzA1MDIwMzE0MjhaMDMxMTAvBgNV
BAMTKDZGMjE4RTA2Q0MzRDJERTQ5NTcyRDQzNEFBRDExQzRENDE0MjA3RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69e7Szqleqzn7hSq3iydvMAaD
Dx5l6Fy3b2+ef5rERwTdafUQ9IXGwNFuSiYOjvTwbuqFzPBzVPeahUb3PzuXju9Z
uf3ZD0lbbYDyk+HzVg0m5q2TRhGdBdF4GuO82NRa6L3q1Qm9NpNlKfWfW3vox1Oc
XbmpUERSq4pkbwuUpObtWYns1jZ78cSv7W3lbJbDvHC0b4DU7NgwBT5HMkpdkU91
vZtalQF3aChY/SsxNpFaSs+8aoxD2kn/QsJUPiLKfEEdTUTNOztH2dd5vtQ3qhk+
IeKaZEDJwp3G2rbJEtftpvVISkuIvOP2oZFKbQjM1TGRM8NMPohjiHeGhcIzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUbyGOBsw9LeSVctQ0qtEcTUFCB+gwHwYDVR0j
BBgwFoAUHrsjIgP9VDL0/19Qx8p/ZyVS7T8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTc1ZDdkZWYtNWViOS00MDU0LWEzYWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIw
M0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcyNTUyRUQzRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRUJCMjMyMjAzRkQ1NDMyRjRGRjVGNTBDN0NBN0Y2NzI1NTJF
RDNGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U3NWQ3ZGVmLTVlYjktNDA1NC1h
M2FiLWQ3ZWNmNDg2Mzc5YS8wLzMxMzAzMzJlMzEzMDJlMzEzNDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKkDANBgkqhkiG
9w0BAQsFAAOCAQEAgaFne+0UlKm6pIf+iKfHEogyCXBm1r3opT12BFxayYnYheBv
mbQ2702e9oSpEb2aWxToJ/GwQrRZf9u1XCXh7Le83e0V03zqs6Oj+PehVtlZ5CZ/
9W1uB1QmC1HXkhmmgJxPc3mGL7iUX/pJkQhmRhSIjgaqAhm6//RkRQNIIAlkP0y7
lBfdulpNP2jrJFKxiRM/3WTKYQWw0cDgYnVmuwQvcVbOBoqVEIfPFtKFFEDCduZy
IXU6dyjE7aJvoaAy6X20k1JnmhJP7jFHQlF4x+MgJKiUB1XFzMH1PRgDiV19WyOj
1cg0iZ4aO9GCrQsYjyTkJ1VX0LUkAgnBhtxoTA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:37 2026 by rpki-client