Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa
File:                     3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (raw, json)
Hash identifier:          iOrCwWDcKPUeQGd0lUQDdntE/X7XinKHghTrYMKWqo8=
Subject key identifier:   BF:2A:0D:5C:88:7F:99:AF:86:9D:F3:D7:CE:6B:14:D5:42:06:D2:0B
Certificate issuer:       /CN=5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C
Certificate serial:       35F2EF745A26B0EFCB1577681B96035453F704F9
Authority key identifier: 5C:6E:2E:BE:6C:D0:4B:80:5F:20:4A:7D:6B:B2:60:F8:35:AF:0B:6C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa
Signing time:             Sun 03 May 2026 03:15:25 +0000
ROA not before:           Sun 03 May 2026 03:10:25 +0000
ROA not after:            Sun 02 May 2027 03:15:25 +0000
asID:                     136855
IP address blocks:        103.108.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.crl
                          rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f2:ef:74:5a:26:b0:ef:cb:15:77:68:1b:96:03:54:53:f7:04:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C
        Validity
            Not Before: May  3 03:10:25 2026 GMT
            Not After : May  2 03:15:25 2027 GMT
        Subject: CN=BF2A0D5C887F99AF869DF3D7CE6B14D54206D20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:d1:ce:b1:81:69:8f:40:60:1f:00:b7:82:
                    36:9d:22:b4:a9:5a:73:75:89:d8:e4:25:48:2b:51:
                    97:e5:c6:ac:08:c3:9d:da:a7:68:a8:71:b6:4e:ec:
                    65:79:de:97:9e:1f:ac:c5:f2:51:02:f2:cb:7b:c1:
                    b3:d8:4e:1c:da:78:5d:40:76:51:92:b1:0a:03:ca:
                    db:71:76:1f:20:35:8f:09:23:6f:7a:4e:0b:32:4b:
                    31:e3:04:56:04:fe:46:f8:cb:b5:4a:da:fc:7d:4c:
                    91:5a:9d:2b:2f:c2:9f:35:67:0c:cd:ee:67:32:4e:
                    18:76:b5:d4:d2:32:c6:3f:57:51:77:ca:29:2c:95:
                    3c:d6:d4:f8:78:3b:21:43:ce:4a:95:ea:68:89:2b:
                    bb:86:c7:64:5d:9d:df:7f:ff:e6:e8:6d:77:63:60:
                    47:bb:5e:57:37:b4:94:25:13:f6:97:ec:ed:96:e5:
                    80:4f:80:bc:5b:91:9d:39:6e:e2:c5:06:96:e4:10:
                    a0:dc:ad:0c:60:65:46:ee:a7:78:1f:00:f1:79:1c:
                    a5:3d:19:00:f4:9a:14:a8:42:b8:01:32:47:5e:bd:
                    e8:40:7d:b4:2a:73:3f:90:10:c7:db:d8:48:30:7c:
                    2d:fc:0f:7d:16:7c:e2:90:aa:3b:67:a7:a1:86:57:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2A:0D:5C:88:7F:99:AF:86:9D:F3:D7:CE:6B:14:D5:42:06:D2:0B
            X509v3 Authority Key Identifier:
                keyid:5C:6E:2E:BE:6C:D0:4B:80:5F:20:4A:7D:6B:B2:60:F8:35:AF:0B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:b0:55:98:3c:e4:7a:6b:cf:64:4c:8d:d1:b2:12:ef:63:54:
         3d:70:7d:df:1c:fd:ce:91:14:3b:4b:b6:de:97:8c:05:f8:78:
         31:04:9c:5e:88:79:ef:15:49:d1:24:3a:10:1f:54:61:c8:d0:
         04:cf:2b:1f:c9:d4:53:e1:e9:53:15:3c:e1:3c:ba:f3:66:22:
         e0:e6:50:f2:55:46:8a:d3:7f:be:0a:1e:bf:a5:e5:b0:98:31:
         5f:b6:58:4a:11:ef:84:28:73:48:54:34:e8:5a:db:cb:05:78:
         73:a7:9d:61:21:ca:2d:a4:61:93:8c:f5:bb:a8:15:9b:39:13:
         13:1b:1b:b7:f3:3e:e0:a6:e6:1a:25:af:26:8a:51:84:99:6a:
         74:67:58:7d:b0:2a:2a:43:06:51:ba:82:6d:7c:94:1f:5e:08:
         aa:60:f3:73:71:f8:c4:c9:c3:1f:82:59:d9:83:45:0e:4a:eb:
         a1:13:9f:67:6a:79:86:42:2d:78:96:1d:f2:f4:f9:6c:17:7f:
         ab:19:38:65:8e:28:57:74:79:ff:cf:10:65:ca:0e:53:d4:48:
         b7:b3:9b:fd:a9:8c:c2:60:fb:95:73:cc:57:55:e5:9c:13:4b:
         57:8f:58:39:9d:de:15:c9:a6:93:89:96:a7:cd:c6:31:46:77:
         4a:23:5c:cf
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNfLvdFomsO/LFXdoG5YDVFP3BPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM2RTJFQkU2Q0QwNEI4MDVGMjA0QTdENkJCMjYwRjgz
NUFGMEI2QzAeFw0yNjA1MDMwMzEwMjVaFw0yNzA1MDIwMzE1MjVaMDMxMTAvBgNV
BAMTKEJGMkEwRDVDODg3Rjk5QUY4NjlERjNEN0NFNkIxNEQ1NDIwNkQyMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt39HOsYFpj0BgHwC3gjadIrSp
WnN1idjkJUgrUZflxqwIw53ap2iocbZO7GV53peeH6zF8lEC8st7wbPYThzaeF1A
dlGSsQoDyttxdh8gNY8JI296TgsySzHjBFYE/kb4y7VK2vx9TJFanSsvwp81ZwzN
7mcyThh2tdTSMsY/V1F3yikslTzW1Ph4OyFDzkqV6miJK7uGx2Rdnd9//+bobXdj
YEe7Xlc3tJQlE/aX7O2W5YBPgLxbkZ05buLFBpbkEKDcrQxgZUbup3gfAPF5HKU9
GQD0mhSoQrgBMkdevehAfbQqcz+QEMfb2EgwfC38D30WfOKQqjtnp6GGV9J7AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUvyoNXIh/ma+GnfPXzmsU1UIG0gswHwYDVR0j
BBgwFoAUXG4uvmzQS4BfIEp9a7Jg+DWvC2wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWI4MWJjZWEtYjcwZi00Mzc0LTkyNGItYjZjNzc4MTA5ODM3LzAvNUM2RTJFQkU2
Q0QwNEI4MDVGMjA0QTdENkJCMjYwRjgzNUFGMEI2Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QzZFMkVCRTZDRDA0QjgwNUYyMDRBN0Q2QkIyNjBGODM1QUYw
QjZDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViODFiY2VhLWI3MGYtNDM3NC05
MjRiLWI2Yzc3ODEwOTgzNy8wLzMxMzAzMzJlMzEzMDM4MmUzMjM0MzAyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzYzODM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnbPAwDQYJ
KoZIhvcNAQELBQADggEBAFewVZg85Hprz2RMjdGyEu9jVD1wfd8c/c6RFDtLtt6X
jAX4eDEEnF6Iee8VSdEkOhAfVGHI0ATPKx/J1FPh6VMVPOE8uvNmIuDmUPJVRorT
f74KHr+l5bCYMV+2WEoR74Qoc0hUNOha28sFeHOnnWEhyi2kYZOM9buoFZs5ExMb
G7fzPuCm5holryaKUYSZanRnWH2wKipDBlG6gm18lB9eCKpg83Nx+MTJwx+CWdmD
RQ5K66ETn2dqeYZCLXiWHfL0+WwXf6sZOGWOKFd0ef/PEGXKDlPUSLezm/2pjMJg
+5VzzFdV5ZwTS1ePWDmd3hXJppOJlqfNxjFGd0ojXM8=
-----END CERTIFICATE-----
Generated at Wed May 13 11:22:03 2026 by rpki-client