Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa
File:                     3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (raw, json)
Hash identifier:          flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=
Subject key identifier:   03:A9:E8:F1:C8:A2:12:97:9A:13:1D:40:23:52:CB:21:A0:16:D0:8D
Certificate issuer:       /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A
Certificate serial:       07E5CEC5B6154DD00AC408E999527E71F006A278
Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa
Signing time:             Sun 03 May 2026 03:18:49 +0000
ROA not before:           Sun 03 May 2026 03:13:49 +0000
ROA not after:            Sun 02 May 2027 03:18:49 +0000
asID:                     150200
IP address blocks:        103.196.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl
                          rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e5:ce:c5:b6:15:4d:d0:0a:c4:08:e9:99:52:7e:71:f0:06:a2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A
        Validity
            Not Before: May  3 03:13:49 2026 GMT
            Not After : May  2 03:18:49 2027 GMT
        Subject: CN=03A9E8F1C8A212979A131D402352CB21A016D08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:66:ad:d2:b2:45:2a:d1:d2:ba:78:e5:42:
                    8b:ce:24:3b:0b:88:31:52:23:69:ec:4b:48:f7:a5:
                    6f:18:c3:d8:d7:60:38:e9:a0:eb:53:5a:f5:d6:e7:
                    e4:e2:5e:94:1d:cb:64:15:48:b4:c6:2b:1d:0e:73:
                    5d:cc:d1:30:b2:30:0b:1c:7f:70:0f:38:fb:51:30:
                    ef:40:a6:86:a9:3e:90:2e:4e:b7:15:24:21:95:93:
                    53:c3:4e:d5:00:6c:22:46:2d:d9:d7:fa:ad:c1:85:
                    29:72:45:d7:eb:25:35:71:d2:eb:97:fb:f6:69:c1:
                    b6:3d:27:4e:6c:34:92:8c:79:84:54:e7:5d:1a:82:
                    f5:7b:54:32:10:d3:e4:75:31:bd:94:4d:75:fb:e9:
                    5c:d6:f4:d3:a5:6e:91:7c:7e:3c:de:f5:32:32:25:
                    48:4b:4a:76:4f:01:6b:7a:1d:6c:ea:66:c3:f5:e9:
                    a3:4f:f4:f2:34:e7:99:0f:87:46:6f:60:32:1b:6d:
                    13:ef:50:27:71:03:3c:90:a7:a5:5c:3c:43:93:fd:
                    53:a6:a5:c9:a5:56:fd:34:e0:87:f8:b2:5c:00:73:
                    26:30:1a:81:6f:d5:a5:df:cc:dd:d7:91:7a:51:3a:
                    62:8f:6d:52:22:5c:36:e2:e3:19:6f:69:8d:80:19:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:E8:F1:C8:A2:12:97:9A:13:1D:40:23:52:CB:21:A0:16:D0:8D
            X509v3 Authority Key Identifier:
                keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:42:42:96:8d:8b:2c:93:df:78:17:87:be:76:aa:83:6e:7e:
         e6:17:2c:52:47:8a:ec:91:c3:a5:53:29:bc:86:a5:bd:c0:19:
         9e:5f:6b:99:d1:82:14:2e:a0:bd:ec:66:59:b2:67:1c:74:04:
         3a:bd:03:27:06:bb:be:bc:b0:49:17:88:87:55:ec:36:ed:35:
         1e:f0:25:68:80:4e:a2:3e:07:0c:57:33:af:bc:01:c9:1d:fd:
         9f:38:da:0c:03:23:d7:61:71:6f:46:93:1f:08:13:ba:f4:64:
         ff:f5:a4:0e:1a:2a:f4:e1:b9:d1:e2:8b:15:d5:c4:d1:c9:07:
         73:e6:09:5e:0f:1d:15:43:5d:3a:6c:6d:e6:c9:88:d0:2d:0d:
         27:f4:6b:57:c1:12:52:99:de:46:41:f8:fb:3e:14:fb:60:f2:
         f8:35:bb:30:c4:b0:b4:dc:5f:7a:8f:41:8c:62:e2:1c:86:73:
         4c:d6:9b:1f:cd:55:41:af:76:74:9e:e7:0e:24:e7:42:9a:4c:
         e5:14:b4:9d:9c:be:ed:3f:25:03:20:94:22:17:63:68:88:f5:
         0c:2b:a6:48:64:9a:cb:c6:d3:3c:5c:2d:ac:d2:f5:b3:0c:44:
         9d:b9:dc:64:77:c9:57:76:19:d8:fd:61:b1:28:9d:65:ba:84:
         f9:cf:5e:17
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUB+XOxbYVTdAKxAjpmVJ+cfAGongwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2
MjdDREE2QTAeFw0yNjA1MDMwMzEzNDlaFw0yNzA1MDIwMzE4NDlaMDMxMTAvBgNV
BAMTKDAzQTlFOEYxQzhBMjEyOTc5QTEzMUQ0MDIzNTJDQjIxQTAxNkQwOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwmat0rJFKtHSunjlQovOJDsL
iDFSI2nsS0j3pW8Yw9jXYDjpoOtTWvXW5+TiXpQdy2QVSLTGKx0Oc13M0TCyMAsc
f3APOPtRMO9ApoapPpAuTrcVJCGVk1PDTtUAbCJGLdnX+q3BhSlyRdfrJTVx0uuX
+/ZpwbY9J05sNJKMeYRU510agvV7VDIQ0+R1Mb2UTXX76VzW9NOlbpF8fjze9TIy
JUhLSnZPAWt6HWzqZsP16aNP9PI055kPh0ZvYDIbbRPvUCdxAzyQp6VcPEOT/VOm
pcmlVv004If4slwAcyYwGoFv1aXfzN3XkXpROmKPbVIiXDbi4xlvaY2AGQ2fAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUA6no8ciiEpeaEx1AI1LLIaAW0I0wHwYDVR0j
BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5
NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE
QTZBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZhNWI0ZmE0LTMyOGMtNGNmMi1h
ZGUzLWM4NjgxMzFkNGUwZC8wLzMxMzAzMzJlMzEzOTM2MmUzNDMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzIzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ8QoMA0GCSqG
SIb3DQEBCwUAA4IBAQCmQkKWjYssk994F4e+dqqDbn7mFyxSR4rskcOlUym8hqW9
wBmeX2uZ0YIULqC97GZZsmccdAQ6vQMnBru+vLBJF4iHVew27TUe8CVogE6iPgcM
VzOvvAHJHf2fONoMAyPXYXFvRpMfCBO69GT/9aQOGir04bnR4osV1cTRyQdz5gle
Dx0VQ106bG3myYjQLQ0n9GtXwRJSmd5GQfj7PhT7YPL4NbswxLC03F96j0GMYuIc
hnNM1psfzVVBr3Z0nucOJOdCmkzlFLSdnL7tPyUDIJQiF2NoiPUMK6ZIZJrLxtM8
XC2s0vWzDESdudxkd8lXdhnY/WGxKJ1luoT5z14X
-----END CERTIFICATE-----
Generated at Wed May 13 01:38:19 2026 by rpki-client