Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/3130332e32332e3130302e302f32322d3234203d3e203538343030.roa
File:                     3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (raw, json)
Hash identifier:          yChPLf4kSB77vjSwlrPu+Nf3PTEu60XmkPkhOBwJZX8=
Subject key identifier:   D1:32:44:02:3F:22:A6:E0:A1:A2:41:1D:3E:0C:34:3C:A8:4E:E0:37
Certificate issuer:       /CN=EE15C88D8235D1E822A2C24C8BA979901AE67A45
Certificate serial:       777C960F3340BC8C04469F0306453D495DA2B5C8
Authority key identifier: EE:15:C8:8D:82:35:D1:E8:22:A2:C2:4C:8B:A9:79:90:1A:E6:7A:45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE15C88D8235D1E822A2C24C8BA979901AE67A45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/3130332e32332e3130302e302f32322d3234203d3e203538343030.roa
Signing time:             Sun 03 May 2026 03:18:03 +0000
ROA not before:           Sun 03 May 2026 03:13:03 +0000
ROA not after:            Sun 02 May 2027 03:18:03 +0000
asID:                     58400
IP address blocks:        103.23.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/EE15C88D8235D1E822A2C24C8BA979901AE67A45.crl
                          rsync://rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/EE15C88D8235D1E822A2C24C8BA979901AE67A45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE15C88D8235D1E822A2C24C8BA979901AE67A45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7c:96:0f:33:40:bc:8c:04:46:9f:03:06:45:3d:49:5d:a2:b5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE15C88D8235D1E822A2C24C8BA979901AE67A45
        Validity
            Not Before: May  3 03:13:03 2026 GMT
            Not After : May  2 03:18:03 2027 GMT
        Subject: CN=D13244023F22A6E0A1A2411D3E0C343CA84EE037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:41:d4:68:b5:3a:9b:5e:b6:98:69:70:b2:
                    6c:f8:93:06:68:39:8f:87:8a:db:01:88:66:82:54:
                    38:d8:0c:22:2c:26:64:93:53:b5:bd:cc:81:28:ef:
                    ca:38:5f:04:41:ea:fe:9d:f0:36:e0:e2:a5:96:e7:
                    bc:aa:4d:45:aa:d3:51:57:83:4a:ee:65:ca:69:a3:
                    25:7e:d2:a7:cc:23:b6:a9:67:cc:8d:ab:f4:bf:53:
                    5b:97:7c:13:20:b4:94:dd:c1:5c:f7:ce:da:10:9f:
                    d5:b5:b0:fa:09:ee:48:9f:d0:f6:cc:38:c5:0e:95:
                    19:c9:8d:92:23:18:56:9d:c8:36:a4:37:13:15:d8:
                    8a:3c:aa:03:28:28:78:43:31:b2:cf:42:4a:2f:51:
                    05:fe:0e:0e:61:4d:c7:55:0e:ee:1b:cd:ec:c6:7b:
                    20:b2:cc:9f:3e:02:3e:4b:42:92:ad:34:45:dd:a4:
                    fd:44:65:e8:4d:a6:c5:e9:f6:3b:e7:ef:22:f9:01:
                    09:49:22:4a:ac:98:b7:d4:be:38:33:9e:9b:ee:0d:
                    4f:34:3f:8f:9c:39:7a:c3:53:a2:04:92:4e:c4:a0:
                    82:e4:6c:be:e2:62:1a:fe:6e:6b:a3:48:cf:e1:8f:
                    14:ce:9d:41:c0:16:83:53:0b:a9:d9:0c:82:74:e4:
                    6e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:32:44:02:3F:22:A6:E0:A1:A2:41:1D:3E:0C:34:3C:A8:4E:E0:37
            X509v3 Authority Key Identifier:
                keyid:EE:15:C8:8D:82:35:D1:E8:22:A2:C2:4C:8B:A9:79:90:1A:E6:7A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/EE15C88D8235D1E822A2C24C8BA979901AE67A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE15C88D8235D1E822A2C24C8BA979901AE67A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/3130332e32332e3130302e302f32322d3234203d3e203538343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:5e:f6:63:c5:fd:91:43:db:6e:9c:23:9b:5b:60:4b:86:d0:
         82:a0:c2:36:32:ef:4f:2b:fe:2f:08:d5:5b:9e:40:5d:fd:6d:
         ad:0f:d2:5c:dc:d4:a1:57:64:94:68:d5:af:8e:1b:b2:cf:52:
         77:74:60:ff:5d:10:97:9c:bf:ef:3d:35:46:51:c8:cc:1c:5b:
         da:fc:09:91:bf:3b:ba:9f:1c:3f:48:3b:27:78:54:ff:84:32:
         a8:f1:d8:5a:31:83:d3:4d:b9:f4:c9:8f:55:2c:f5:17:24:38:
         8f:f6:33:3e:49:a4:74:fc:13:2e:92:ef:50:ea:7f:99:74:c1:
         f0:e6:98:e9:ee:f1:60:20:e2:09:9e:9d:a2:ec:c8:01:07:4d:
         a7:83:7f:96:c0:c8:f7:25:66:25:30:0e:95:ae:23:5f:bd:37:
         49:9b:3f:c7:0e:99:19:f2:65:27:d1:aa:49:84:b1:04:4d:56:
         ae:26:35:5d:8b:7a:01:33:95:5d:fe:3d:98:aa:1f:c8:1a:e4:
         e0:93:e7:13:a6:d8:56:5b:4f:04:0b:95:aa:b8:5f:1c:11:c2:
         87:25:b6:a7:48:24:3c:22:9a:ea:a0:eb:39:19:78:e4:f6:73:
         21:9e:c2:c8:9c:d0:df:57:13:70:aa:30:01:d5:2d:11:e3:50:
         49:b6:65:ff
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUd3yWDzNAvIwERp8DBkU9SV2itcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUxNUM4OEQ4MjM1RDFFODIyQTJDMjRDOEJBOTc5OTAx
QUU2N0E0NTAeFw0yNjA1MDMwMzEzMDNaFw0yNzA1MDIwMzE4MDNaMDMxMTAvBgNV
BAMTKEQxMzI0NDAyM0YyMkE2RTBBMUEyNDExRDNFMEMzNDNDQTg0RUUwMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyUHUaLU6m162mGlwsmz4kwZo
OY+HitsBiGaCVDjYDCIsJmSTU7W9zIEo78o4XwRB6v6d8Dbg4qWW57yqTUWq01FX
g0ruZcppoyV+0qfMI7apZ8yNq/S/U1uXfBMgtJTdwVz3ztoQn9W1sPoJ7kif0PbM
OMUOlRnJjZIjGFadyDakNxMV2Io8qgMoKHhDMbLPQkovUQX+Dg5hTcdVDu4bzezG
eyCyzJ8+Aj5LQpKtNEXdpP1EZehNpsXp9jvn7yL5AQlJIkqsmLfUvjgznpvuDU80
P4+cOXrDU6IEkk7EoILkbL7iYhr+bmujSM/hjxTOnUHAFoNTC6nZDIJ05G7BAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU0TJEAj8ipuChokEdPgw0PKhO4DcwHwYDVR0j
BBgwFoAU7hXIjYI10egiosJMi6l5kBrmekUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjcxODA3MDQtNmI2NC00YTQwLThmM2QtZmZkZmQ1ZTM3ZGVmLzAvRUUxNUM4OEQ4
MjM1RDFFODIyQTJDMjRDOEJBOTc5OTAxQUU2N0E0NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRTE1Qzg4RDgyMzVEMUU4MjJBMkMyNEM4QkE5Nzk5MDFBRTY3
QTQ1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3MTgwNzA0LTZiNjQtNGE0MC04
ZjNkLWZmZGZkNWUzN2RlZi8wLzMxMzAzMzJlMzIzMzJlMzEzMDMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzUzODM0MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcXZDANBgkqhkiG
9w0BAQsFAAOCAQEAKF72Y8X9kUPbbpwjm1tgS4bQgqDCNjLvTyv+LwjVW55AXf1t
rQ/SXNzUoVdklGjVr44bss9Sd3Rg/10Ql5y/7z01RlHIzBxb2vwJkb87up8cP0g7
J3hU/4QyqPHYWjGD00259MmPVSz1FyQ4j/YzPkmkdPwTLpLvUOp/mXTB8OaY6e7x
YCDiCZ6douzIAQdNp4N/lsDI9yVmJTAOla4jX703SZs/xw6ZGfJlJ9GqSYSxBE1W
riY1XYt6ATOVXf49mKofyBrk4JPnE6bYVltPBAuVqrhfHBHChyW2p0gkPCKa6qDr
ORl45PZzIZ7CyJzQ31cTcKowAdUtEeNQSbZl/w==
-----END CERTIFICATE-----
Generated at Wed May 13 03:48:55 2026 by rpki-client