Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
File:                     3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (raw, json)
Hash identifier:          zvVBOICq5pKD2ig8o0wI4pJml9B5+zqomhS6S0vqWcI=
Subject key identifier:   7E:CF:2E:D4:4B:B3:12:68:21:BC:17:FD:23:D9:21:2C:B0:A2:94:4B
Certificate issuer:       /CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007
Certificate serial:       6DF4489EBA073A57693032DAF7AE4FFCA65871C0
Authority key identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
Signing time:             Sun 03 May 2026 03:15:33 +0000
ROA not before:           Sun 03 May 2026 03:10:33 +0000
ROA not after:            Sun 02 May 2027 03:15:33 +0000
asID:                     140389
IP address blocks:        103.153.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl
                          rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f4:48:9e:ba:07:3a:57:69:30:32:da:f7:ae:4f:fc:a6:58:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007
        Validity
            Not Before: May  3 03:10:33 2026 GMT
            Not After : May  2 03:15:33 2027 GMT
        Subject: CN=7ECF2ED44BB3126821BC17FD23D9212CB0A2944B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:01:2a:a5:30:1d:15:23:bf:25:75:ea:f7:0f:
                    6f:ad:1f:9d:a8:56:84:02:be:ea:5e:0f:c0:2d:4b:
                    41:ec:15:d9:f6:9f:fb:a5:f3:76:d3:9a:59:df:c1:
                    78:46:ef:ac:c5:82:6f:a4:db:de:79:9b:24:11:95:
                    cc:50:5a:b2:5f:1b:b0:78:0a:92:4a:a8:71:1d:5a:
                    26:47:7c:43:13:45:5c:4d:e1:b0:24:e0:59:43:cb:
                    0a:3f:fb:a7:81:fe:fc:15:4d:f4:a2:4e:f4:ac:8a:
                    c0:9f:c5:08:b0:db:da:28:c5:06:84:c9:fd:23:5d:
                    c3:11:97:f7:07:de:51:ee:17:ab:89:ff:d1:85:bd:
                    99:82:91:bb:3e:b5:e9:22:8c:de:10:3c:d6:1c:cb:
                    97:40:62:6e:2e:03:e8:4c:c8:c7:55:a3:cc:87:dc:
                    c3:56:94:86:09:b8:dc:79:e7:eb:ee:16:8d:06:3c:
                    9c:74:47:e7:a6:e9:d2:b3:4a:55:69:cf:40:43:b4:
                    da:e9:a2:0d:b4:c0:11:00:3f:95:fb:26:b1:54:a5:
                    64:ba:00:7b:60:5d:0f:bf:f2:6a:6c:e8:f9:4d:c0:
                    cb:59:bf:b0:4a:06:eb:96:a7:b1:7e:d9:e3:f6:4e:
                    02:22:9f:78:c5:05:60:5e:0d:a1:7b:14:c6:13:3e:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:2E:D4:4B:B3:12:68:21:BC:17:FD:23:D9:21:2C:B0:A2:94:4B
            X509v3 Authority Key Identifier:
                keyid:E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:fd:6c:0d:58:b7:b3:91:77:44:f9:2b:36:0b:44:4c:ec:1d:
         5e:1b:34:2e:87:f7:97:cb:e5:90:39:77:02:42:ba:53:8e:a9:
         9b:46:02:99:99:f6:2c:d9:c3:49:70:a7:93:6a:e4:67:3f:7c:
         0d:76:8f:51:3a:5d:a4:cc:71:70:67:45:83:31:3f:b1:82:eb:
         69:27:44:b8:a7:d3:73:62:2f:a8:86:11:49:38:1a:21:17:64:
         9a:c3:76:d0:42:f8:7e:bb:31:f0:a8:6b:77:fb:ab:cc:cf:52:
         da:95:b8:92:6e:3d:3a:13:7d:f9:32:53:d2:eb:f0:b9:9a:1b:
         e4:e1:9d:22:2a:32:b9:ca:a7:2b:24:49:49:23:6d:10:df:82:
         19:b9:1a:03:b1:33:81:4c:a0:42:b4:c8:d4:98:25:d9:56:95:
         1b:19:23:a4:6d:c5:b9:89:0c:aa:cf:35:03:b1:d0:22:fa:84:
         70:9f:5f:d7:49:fe:d1:db:9e:43:20:53:b6:b9:7f:35:2d:10:
         81:63:22:4d:d1:0c:8a:e3:5d:78:5c:0d:8b:39:c2:28:90:6d:
         17:8d:33:46:c9:dc:ed:b5:03:fd:4b:f2:8f:45:e2:19:30:8c:
         55:93:2c:b6:4d:09:57:f9:5c:55:aa:19:3f:7d:50:6e:88:ea:
         36:c2:92:59
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbfRInroHOldpMDLa965P/KZYccAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFE
N0RBODAwNzAeFw0yNjA1MDMwMzEwMzNaFw0yNzA1MDIwMzE1MzNaMDMxMTAvBgNV
BAMTKDdFQ0YyRUQ0NEJCMzEyNjgyMUJDMTdGRDIzRDkyMTJDQjBBMjk0NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3ASqlMB0VI78lder3D2+tH52o
VoQCvupeD8AtS0HsFdn2n/ul83bTmlnfwXhG76zFgm+k2955myQRlcxQWrJfG7B4
CpJKqHEdWiZHfEMTRVxN4bAk4FlDywo/+6eB/vwVTfSiTvSsisCfxQiw29ooxQaE
yf0jXcMRl/cH3lHuF6uJ/9GFvZmCkbs+tekijN4QPNYcy5dAYm4uA+hMyMdVo8yH
3MNWlIYJuNx55+vuFo0GPJx0R+em6dKzSlVpz0BDtNrpog20wBEAP5X7JrFUpWS6
AHtgXQ+/8mps6PlNwMtZv7BKBuuWp7F+2eP2TgIin3jFBWBeDaF7FMYTPoWJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfs8u1EuzEmghvBf9I9khLLCilEswHwYDVR0j
BBgwFoAU4N4i9Xe0JE7LMyuHtYMdStfagAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWJjMWFiNzEtOTFkMC00ZjBiLWJiMjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3
N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFEN0RBODAwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMERFMjJGNTc3QjQyNDRFQ0IzMzJCODdCNTgzMUQ0QUQ3REE4
MDA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViYzFhYjcxLTkxZDAtNGYwYi1i
YjI5LWNiYjdkMzVlNzRiYS8wLzMxMzAzMzJlMzEzNTMzMmUzMjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzQzMDMzMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeZAjANBgkqhkiG
9w0BAQsFAAOCAQEAiP1sDVi3s5F3RPkrNgtETOwdXhs0Lof3l8vlkDl3AkK6U46p
m0YCmZn2LNnDSXCnk2rkZz98DXaPUTpdpMxxcGdFgzE/sYLraSdEuKfTc2IvqIYR
STgaIRdkmsN20EL4frsx8Khrd/urzM9S2pW4km49OhN9+TJT0uvwuZob5OGdIioy
ucqnKyRJSSNtEN+CGbkaA7EzgUygQrTI1Jgl2VaVGxkjpG3FuYkMqs81A7HQIvqE
cJ9f10n+0dueQyBTtrl/NS0QgWMiTdEMiuNdeFwNiznCKJBtF40zRsnc7bUD/Uvy
j0XiGTCMVZMstk0JV/lcVaoZP31QbojqNsKSWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:59:41 2026 by rpki-client