Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa
File:                     3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (raw, json)
Hash identifier:          DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=
Subject key identifier:   E2:17:4F:AA:0C:DC:BE:AE:FA:1B:93:E9:F8:B7:09:83:A6:B3:F9:B1
Certificate issuer:       /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Certificate serial:       1F5A35584B9225988E0558E54C43D39A09D0568C
Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa
Signing time:             Sun 03 May 2026 03:15:45 +0000
ROA not before:           Sun 03 May 2026 03:10:45 +0000
ROA not after:            Sun 02 May 2027 03:15:45 +0000
asID:                     150935
IP address blocks:        103.109.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
                          rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5a:35:58:4b:92:25:98:8e:05:58:e5:4c:43:d3:9a:09:d0:56:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
        Validity
            Not Before: May  3 03:10:45 2026 GMT
            Not After : May  2 03:15:45 2027 GMT
        Subject: CN=E2174FAA0CDCBEAEFA1B93E9F8B70983A6B3F9B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:48:03:1e:85:ed:72:42:5d:59:90:5c:76:
                    49:81:89:fe:70:29:cf:cf:31:26:d9:e3:f8:d1:88:
                    b9:ae:b1:0d:a4:7d:9d:8b:47:b0:8c:5a:9a:e0:51:
                    1c:f4:77:6f:26:5f:39:93:6c:6f:0c:2a:b4:7a:11:
                    fa:89:23:dd:77:78:63:05:bb:a0:e3:76:84:21:eb:
                    e3:ca:01:17:88:26:cd:cc:e2:59:92:f2:5a:9f:a6:
                    4f:a0:08:d0:b5:92:fe:e2:af:5f:0f:86:4d:87:b5:
                    a8:58:81:ae:34:f8:bc:41:12:27:9e:84:61:e0:d7:
                    60:fd:68:c5:73:f5:fc:80:97:e0:c8:0c:d3:85:a4:
                    b1:28:21:34:c7:20:1b:96:63:c2:89:d4:23:71:d6:
                    3b:d8:25:af:26:d7:85:0d:1a:ef:9e:38:b5:4b:a7:
                    87:5b:62:7c:1f:19:2d:52:ef:49:7d:d1:95:0d:f9:
                    b5:e9:3c:08:18:3d:ec:2c:94:b9:5e:f7:32:4c:df:
                    f7:17:dd:75:90:a9:1f:b3:2f:02:5d:f5:38:a6:23:
                    24:3d:05:b7:ef:ad:51:58:78:42:5e:bc:88:0d:dc:
                    8e:d3:13:82:11:6c:d5:60:44:3f:9d:34:93:d8:67:
                    69:b4:ac:80:69:6f:b5:d1:40:ec:84:80:5a:c0:02:
                    83:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:17:4F:AA:0C:DC:BE:AE:FA:1B:93:E9:F8:B7:09:83:A6:B3:F9:B1
            X509v3 Authority Key Identifier:
                keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:dd:ac:e1:f9:2d:38:78:99:e3:ed:02:f7:8d:ed:93:21:bc:
         b8:01:b7:26:78:33:d2:31:f5:53:72:41:52:aa:38:73:43:e8:
         21:26:e5:3a:f9:67:d7:bf:60:76:59:fc:43:8a:3c:d6:aa:24:
         24:6e:bd:94:15:63:72:b0:3a:64:d8:75:dd:28:3f:ae:0f:bf:
         3d:f8:cc:70:26:76:d8:2f:57:4a:9a:9a:69:fc:45:49:db:9e:
         62:0b:c9:da:f9:d3:31:d8:99:c0:7c:cb:6c:33:56:36:81:ea:
         b4:75:83:e6:db:cf:4f:1a:a6:53:69:e2:90:52:08:41:f6:4d:
         7e:06:79:67:02:27:68:3d:a0:00:8d:e0:a1:a2:2f:4b:f4:ec:
         76:a6:36:92:99:4b:d0:e4:f7:ba:ec:8a:a7:78:13:cc:63:53:
         76:b1:75:65:95:55:c6:47:20:fc:fb:9a:b0:8f:ea:c7:63:ac:
         ab:83:1f:8a:2b:29:4f:4e:99:2d:15:57:31:04:26:ae:dd:85:
         2f:a2:55:7a:c1:1f:ba:b8:ca:c0:8d:6a:e4:cd:7f:50:ec:eb:
         e8:b9:9f:cd:be:4d:70:dc:ba:f9:e8:6b:01:93:69:87:63:09:
         71:d1:fe:33:1c:d4:5c:7a:8d:6d:1b:67:21:29:5b:d1:0b:f7:
         0e:99:0e:2f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUH1o1WEuSJZiOBVjlTEPTmgnQVowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYw
RjVBQTE0NDAeFw0yNjA1MDMwMzEwNDVaFw0yNzA1MDIwMzE1NDVaMDMxMTAvBgNV
BAMTKEUyMTc0RkFBMENEQ0JFQUVGQTFCOTNFOUY4QjcwOTgzQTZCM0Y5QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuL0gDHoXtckJdWZBcdkmBif5w
Kc/PMSbZ4/jRiLmusQ2kfZ2LR7CMWprgURz0d28mXzmTbG8MKrR6EfqJI913eGMF
u6DjdoQh6+PKAReIJs3M4lmS8lqfpk+gCNC1kv7ir18Phk2HtahYga40+LxBEiee
hGHg12D9aMVz9fyAl+DIDNOFpLEoITTHIBuWY8KJ1CNx1jvYJa8m14UNGu+eOLVL
p4dbYnwfGS1S70l90ZUN+bXpPAgYPewslLle9zJM3/cX3XWQqR+zLwJd9TimIyQ9
BbfvrVFYeEJevIgN3I7TE4IRbNVgRD+dNJPYZ2m0rIBpb7XRQOyEgFrAAoN7AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU4hdPqgzcvq76G5Pp+LcJg6az+bEwHwYDVR0j
BBgwFoAU4CnJ43Anl8xgg+HU2JF5nw9aoUQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWM4ODkyZWItZGRjMC00Y2I2LTk1N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3
MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYwRjVBQTE0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMDI5QzlFMzcwMjc5N0NDNjA4M0UxRDREODkxNzk5RjBGNUFB
MTQ0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VjODg5MmViLWRkYzAtNGNiNi05
NTdjLWI2NTNmMjhiYmYzOS8wLzMxMzAzMzJlMzEzMDM5MmUzMjMwMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbc8wDQYJ
KoZIhvcNAQELBQADggEBAJHdrOH5LTh4mePtAveN7ZMhvLgBtyZ4M9Ix9VNyQVKq
OHND6CEm5Tr5Z9e/YHZZ/EOKPNaqJCRuvZQVY3KwOmTYdd0oP64Pvz34zHAmdtgv
V0qammn8RUnbnmILydr50zHYmcB8y2wzVjaB6rR1g+bbz08aplNp4pBSCEH2TX4G
eWcCJ2g9oACN4KGiL0v07HamNpKZS9Dk97rsiqd4E8xjU3axdWWVVcZHIPz7mrCP
6sdjrKuDH4orKU9OmS0VVzEEJq7dhS+iVXrBH7q4ysCNauTNf1Ds6+i5n82+TXDc
uvnoawGTaYdjCXHR/jMc1Fx6jW0bZyEpW9EL9w6ZDi8=
-----END CERTIFICATE-----
Generated at Wed May 13 03:15:45 2026 by rpki-client