Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa
File:                     3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (raw, json)
Hash identifier:          nctWeqdG+C+yzM3us3hfFDeGU29WHbKA/XQo+aeaR/w=
Subject key identifier:   A5:98:DB:3B:7D:00:FD:2D:C6:52:43:33:4E:6C:EC:55:D9:55:8B:2A
Certificate issuer:       /CN=95C0FEDF4348635C616CCD76866299FFF41521C1
Certificate serial:       5E9DBADDC41D0B5CCDC7085D1E01C61A42E56BD4
Authority key identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa
Signing time:             Sun 03 May 2026 03:18:18 +0000
ROA not before:           Sun 03 May 2026 03:13:18 +0000
ROA not after:            Sun 02 May 2027 03:18:18 +0000
asID:                     139455
IP address blocks:        103.145.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl
                          rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9d:ba:dd:c4:1d:0b:5c:cd:c7:08:5d:1e:01:c6:1a:42:e5:6b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C0FEDF4348635C616CCD76866299FFF41521C1
        Validity
            Not Before: May  3 03:13:18 2026 GMT
            Not After : May  2 03:18:18 2027 GMT
        Subject: CN=A598DB3B7D00FD2DC65243334E6CEC55D9558B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:49:16:e2:59:fb:ef:0c:fb:8a:e3:48:d0:
                    87:d0:6a:8f:5e:cd:68:d5:69:9c:dd:80:d0:ca:c9:
                    2d:a5:a2:f2:b1:32:29:d8:1e:56:31:37:1d:44:41:
                    f8:02:47:5f:6f:42:5f:f9:c8:ae:2a:bc:db:cb:0c:
                    6d:31:8e:ba:e3:cb:3d:1a:ed:9f:40:de:9b:b0:16:
                    0f:79:9e:87:f0:87:c4:c4:26:9c:2e:25:03:7e:57:
                    4d:b2:86:d5:7b:82:7e:ca:90:21:87:8c:76:d6:cb:
                    ce:6f:f3:67:79:f0:51:23:1c:58:01:35:d6:df:97:
                    b1:d9:6f:95:13:3a:65:61:81:a5:44:6b:b2:46:55:
                    e5:3c:4d:87:7a:72:12:d7:ac:b2:88:0c:45:ed:1e:
                    45:05:83:61:a0:2e:7c:db:9d:9e:40:41:3f:74:f6:
                    d1:ae:03:7e:7b:a6:ec:7a:2e:6e:ae:2e:c3:80:a9:
                    42:14:ed:bf:fd:74:ba:9a:0b:80:c9:a2:b9:b6:29:
                    b5:e0:f4:4d:05:50:4d:bd:ae:ca:aa:30:0a:09:ea:
                    97:88:67:15:14:79:9f:3d:a3:ee:c6:db:7f:b0:ec:
                    bf:89:be:26:ca:c7:da:ec:4f:c8:8c:b2:6e:55:2c:
                    fb:54:d3:79:6f:e8:5d:af:4f:d4:2d:55:4f:52:09:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:DB:3B:7D:00:FD:2D:C6:52:43:33:4E:6C:EC:55:D9:55:8B:2A
            X509v3 Authority Key Identifier:
                keyid:95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:5a:b6:ef:4f:40:72:dd:83:18:13:aa:4d:95:2b:f6:6f:ff:
         14:8e:73:28:f9:66:bf:39:7e:5f:2f:39:98:12:be:3f:47:f4:
         aa:52:2f:88:48:05:8a:fe:bb:f9:5d:b5:c2:e5:6c:41:35:4c:
         38:44:01:66:75:7c:43:04:c6:b3:e2:41:a6:a5:69:07:39:d9:
         d9:26:8d:04:6c:07:37:b8:84:23:13:d9:10:e4:46:c4:1d:58:
         6f:ba:e0:55:82:3a:4a:80:c5:7b:47:81:cf:0f:d7:9d:0d:92:
         00:8d:0e:7a:31:bd:5c:2b:d9:e0:de:7e:7d:b0:04:2e:67:33:
         3d:b9:f8:d1:06:6a:b6:0f:95:5f:24:23:be:66:fa:c6:a2:58:
         73:2d:fb:6f:ad:b5:62:4a:eb:ca:96:18:4e:da:3a:ec:3e:50:
         e3:17:a3:de:6d:ec:f9:b1:07:0d:0e:ef:d1:80:a4:2a:83:70:
         7a:39:16:5d:ee:eb:89:ec:4e:ba:8e:cc:02:25:80:75:6d:c6:
         5a:d8:80:b9:f9:88:00:00:a6:14:40:3d:e1:7f:74:da:a4:a7:
         91:cb:07:42:d6:29:dc:ca:4c:9d:f4:4f:c9:04:a7:5a:fa:16:
         26:0d:66:01:43:8c:2f:61:f7:16:38:3a:cf:c6:f7:2f:2c:cb:
         c9:c6:63:72
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXp263cQdC1zNxwhdHgHGGkLla9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVDMEZFREY0MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5RkZG
NDE1MjFDMTAeFw0yNjA1MDMwMzEzMThaFw0yNzA1MDIwMzE4MThaMDMxMTAvBgNV
BAMTKEE1OThEQjNCN0QwMEZEMkRDNjUyNDMzMzRFNkNFQzU1RDk1NThCMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpkkW4ln77wz7iuNI0IfQao9e
zWjVaZzdgNDKyS2lovKxMinYHlYxNx1EQfgCR19vQl/5yK4qvNvLDG0xjrrjyz0a
7Z9A3puwFg95nofwh8TEJpwuJQN+V02yhtV7gn7KkCGHjHbWy85v82d58FEjHFgB
Ndbfl7HZb5UTOmVhgaVEa7JGVeU8TYd6chLXrLKIDEXtHkUFg2GgLnzbnZ5AQT90
9tGuA357pux6Lm6uLsOAqUIU7b/9dLqaC4DJorm2KbXg9E0FUE29rsqqMAoJ6peI
ZxUUeZ89o+7G23+w7L+JvibKx9rsT8iMsm5VLPtU03lv6F2vT9QtVU9SCf+TAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUpZjbO30A/S3GUkMzTmzsVdlViyowHwYDVR0j
BBgwFoAUlcD+30NIY1xhbM12hmKZ//QVIcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjc3ZmZlMmEtMzFlNC00ODAwLTk3ZDQtNzg3NGMxMjMxOTExLzAvOTVDMEZFREY0
MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5RkZGNDE1MjFDMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NUMwRkVERjQzNDg2MzVDNjE2Q0NENzY4NjYyOTlGRkY0MTUy
MUMxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3N2ZmZTJhLTMxZTQtNDgwMC05
N2Q0LTc4NzRjMTIzMTkxMS8wLzMxMzAzMzJlMzEzNDM1MmUzNTMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5E0MA0GCSqG
SIb3DQEBCwUAA4IBAQBLWrbvT0By3YMYE6pNlSv2b/8UjnMo+Wa/OX5fLzmYEr4/
R/SqUi+ISAWK/rv5XbXC5WxBNUw4RAFmdXxDBMaz4kGmpWkHOdnZJo0EbAc3uIQj
E9kQ5EbEHVhvuuBVgjpKgMV7R4HPD9edDZIAjQ56Mb1cK9ng3n59sAQuZzM9ufjR
Bmq2D5VfJCO+ZvrGolhzLftvrbViSuvKlhhO2jrsPlDjF6Pebez5sQcNDu/RgKQq
g3B6ORZd7uuJ7E66jswCJYB1bcZa2IC5+YgAAKYUQD3hf3TapKeRywdC1incykyd
9E/JBKda+hYmDWYBQ4wvYfcWODrPxvcvLMvJxmNy
-----END CERTIFICATE-----
Generated at Wed May 13 06:27:23 2026 by rpki-client