Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38322e302f32332d3233203d3e20313530353132.roa
File:                     3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (raw, json)
Hash identifier:          bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=
Subject key identifier:   4E:A9:EE:87:06:84:22:A2:3E:B3:A5:5E:5D:86:EC:68:B8:CC:A4:38
Certificate issuer:       /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1
Certificate serial:       1E8996EAD30EB3987A3B2DAF2F96AC7B6C343AAB
Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38322e302f32332d3233203d3e20313530353132.roa
Signing time:             Sun 03 May 2026 03:14:45 +0000
ROA not before:           Sun 03 May 2026 03:09:45 +0000
ROA not after:            Sun 02 May 2027 03:14:45 +0000
asID:                     150512
IP address blocks:        103.54.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl
                          rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:89:96:ea:d3:0e:b3:98:7a:3b:2d:af:2f:96:ac:7b:6c:34:3a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1
        Validity
            Not Before: May  3 03:09:45 2026 GMT
            Not After : May  2 03:14:45 2027 GMT
        Subject: CN=4EA9EE87068422A23EB3A55E5D86EC68B8CCA438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:27:c8:22:4b:12:f9:ab:ed:d0:60:15:b7:
                    3c:27:3a:2c:8f:d2:cc:22:5e:7d:df:20:ac:af:30:
                    5f:67:81:2b:51:94:a7:d6:52:6d:7c:25:a6:2e:e3:
                    e5:9c:0e:4a:63:cd:d4:5d:9d:7c:d0:87:5b:40:b8:
                    45:93:df:a6:78:21:d1:ab:12:8c:5c:27:19:99:0c:
                    03:0e:72:c1:09:c4:8f:7d:92:fc:59:4a:b2:2e:0c:
                    cd:4d:5f:e1:3d:ad:27:25:81:ec:ab:b8:51:2c:dc:
                    03:26:bc:43:c9:85:e1:52:6e:69:2e:30:a2:b0:01:
                    56:8f:41:49:93:3e:23:76:5d:2d:2b:30:50:eb:02:
                    05:ec:f4:9f:f7:d2:f8:b1:1a:37:e4:2e:78:7b:38:
                    8f:02:9f:b1:e5:4a:94:57:8d:24:04:7b:5e:0e:4e:
                    f5:ef:2f:1f:dd:df:a0:17:ac:7b:75:d6:73:e8:a3:
                    15:94:73:18:7d:c7:83:d9:f5:b2:5b:a6:04:56:44:
                    df:a0:41:e9:b1:32:38:49:d3:2b:2e:50:c9:36:7b:
                    9e:2d:72:71:a3:71:91:72:87:f1:aa:bf:bd:19:91:
                    26:bd:cc:2d:2c:c9:47:ef:b3:c1:de:57:01:24:67:
                    ea:3f:28:c8:4f:54:39:8f:c7:d1:dd:a2:de:38:0a:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A9:EE:87:06:84:22:A2:3E:B3:A5:5E:5D:86:EC:68:B8:CC:A4:38
            X509v3 Authority Key Identifier:
                keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38322e302f32332d3233203d3e20313530353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:96:5b:9d:7f:b3:50:6f:d1:14:da:8a:e3:d4:4c:fc:95:
         d9:b0:c5:58:f0:d5:5e:b3:7e:97:86:0a:a0:fd:9d:50:40:11:
         36:d8:15:d9:d9:7b:da:1a:08:e5:ba:69:23:2c:7a:c5:7f:d3:
         98:7b:12:d3:8e:43:7a:f1:ff:11:3b:63:49:48:56:74:da:37:
         33:18:a0:a2:12:7e:9b:8e:5d:f0:ee:2b:81:01:c6:cc:6e:1e:
         3e:00:f8:b5:c3:a5:89:7a:15:86:38:20:27:bb:19:5a:74:e7:
         c6:b5:53:a7:77:49:00:a2:ee:dd:03:2e:c1:7a:e1:81:47:25:
         b6:66:ee:24:63:62:07:ff:92:8f:49:f3:f8:ad:6d:aa:9c:db:
         cc:3e:73:ec:ba:0c:49:b3:d4:98:0a:13:f0:8a:26:40:9f:77:
         07:ef:0d:c2:49:b1:4a:52:0e:1a:00:e0:a7:43:32:e5:13:54:
         46:2b:2d:33:fc:11:37:a2:16:6f:41:ce:6d:18:84:f0:fc:1c:
         97:c1:c3:f5:41:36:dd:b5:19:10:d9:6b:25:1d:ee:b0:be:c5:
         02:ed:55:58:10:f7:2a:38:e2:ae:18:47:54:6c:43:03:c6:92:
         47:e9:35:69:8a:16:2c:ee:7c:c9:83:43:92:a3:52:5e:30:c4:
         dc:07:45:c2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHomW6tMOs5h6Oy2vL5ase2w0OqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF
NTNEMUVEMTAeFw0yNjA1MDMwMzA5NDVaFw0yNzA1MDIwMzE0NDVaMDMxMTAvBgNV
BAMTKDRFQTlFRTg3MDY4NDIyQTIzRUIzQTU1RTVEODZFQzY4QjhDQ0E0MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkCSfIIksS+avt0GAVtzwnOiyP
0swiXn3fIKyvMF9ngStRlKfWUm18JaYu4+WcDkpjzdRdnXzQh1tAuEWT36Z4IdGr
EoxcJxmZDAMOcsEJxI99kvxZSrIuDM1NX+E9rSclgeyruFEs3AMmvEPJheFSbmku
MKKwAVaPQUmTPiN2XS0rMFDrAgXs9J/30vixGjfkLnh7OI8Cn7HlSpRXjSQEe14O
TvXvLx/d36AXrHt11nPooxWUcxh9x4PZ9bJbpgRWRN+gQemxMjhJ0ysuUMk2e54t
cnGjcZFyh/Gqv70ZkSa9zC0syUfvs8HeVwEkZ+o/KMhPVDmPx9Hdot44Cnw1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUTqnuhwaEIqI+s6VeXYbsaLjMpDgwHwYDVR0j
BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx
NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx
RUQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U4ZGU5NDYzLTY4YTctNDYyZC05
NDA4LWE3YzM5Y2U2ZThmZi8wLzMxMzAzMzJlMzUzNDJlMzgzMjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzUzMDM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc2UjANBgkqhkiG
9w0BAQsFAAOCAQEATkqWW51/s1Bv0RTaiuPUTPyV2bDFWPDVXrN+l4YKoP2dUEAR
NtgV2dl72hoI5bppIyx6xX/TmHsS045DevH/ETtjSUhWdNo3MxigohJ+m45d8O4r
gQHGzG4ePgD4tcOliXoVhjggJ7sZWnTnxrVTp3dJAKLu3QMuwXrhgUcltmbuJGNi
B/+Sj0nz+K1tqpzbzD5z7LoMSbPUmAoT8IomQJ93B+8NwkmxSlIOGgDgp0My5RNU
RistM/wRN6IWb0HObRiE8Pwcl8HD9UE23bUZENlrJR3usL7FAu1VWBD3KjjirhhH
VGxDA8aSR+k1aYoWLO58yYNDkqNSXjDE3AdFwg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:23 2026 by rpki-client