Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31392e302f32342d3234203d3e20313333383131.roa
File:                     3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier:          8hxKIphl2RuDK+xff1DI7cxGB0tqauW81xIpHuvLInE=
Subject key identifier:   5B:33:03:66:E7:40:00:34:CA:E3:CF:E6:B1:D3:81:61:A1:A5:8F:65
Certificate issuer:       /CN=7D748C9993BD612EB4DED86D78A542650C0739D2
Certificate serial:       7C79AACB5380BD85D154441A6E3FE9FAE8E44693
Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31392e302f32342d3234203d3e20313333383131.roa
Signing time:             Sun 03 May 2026 03:18:53 +0000
ROA not before:           Sun 03 May 2026 03:13:53 +0000
ROA not after:            Sun 02 May 2027 03:18:53 +0000
asID:                     133811
IP address blocks:        103.52.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl
                          rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:79:aa:cb:53:80:bd:85:d1:54:44:1a:6e:3f:e9:fa:e8:e4:46:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2
        Validity
            Not Before: May  3 03:13:53 2026 GMT
            Not After : May  2 03:18:53 2027 GMT
        Subject: CN=5B330366E7400034CAE3CFE6B1D38161A1A58F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:6d:97:2f:b5:7f:40:56:06:00:c8:3c:9c:
                    70:fe:28:30:5f:6f:98:b3:90:18:29:79:55:03:4b:
                    3c:ac:e2:4a:67:7b:86:c5:1e:ba:8d:ee:d6:aa:c3:
                    4e:82:f9:83:e2:82:f8:16:45:4b:87:78:83:c8:01:
                    4f:25:e4:cc:c9:47:2c:2a:41:79:03:51:41:b5:d6:
                    54:df:3f:47:45:e1:f9:56:f4:16:85:bf:36:ea:50:
                    94:b7:9c:fe:70:37:78:26:0d:3e:93:d1:d8:bb:42:
                    eb:51:3e:ec:0e:ed:b1:b7:a4:88:67:48:72:b0:ce:
                    26:45:5d:2f:8b:69:a0:eb:2a:59:7f:db:17:a8:ce:
                    69:93:6e:44:8d:3e:19:f7:de:f8:5d:00:10:0f:12:
                    f3:42:60:35:0c:66:5a:a3:4c:45:a7:4e:45:6c:f8:
                    83:87:2f:f9:ec:97:1a:10:c8:b3:90:03:b2:e8:ca:
                    67:04:8b:79:b6:9d:5e:24:15:bf:42:3c:4d:83:6b:
                    b2:96:a7:62:76:8e:0c:18:cb:87:fc:d7:dc:34:a9:
                    87:54:7b:94:b0:4b:d2:ff:cc:63:bb:b6:99:0f:6c:
                    b4:cd:7d:32:fe:fd:ed:54:97:1d:bb:ac:ef:fb:40:
                    4d:a5:e8:5a:c5:83:13:91:e3:b5:28:0b:c9:0d:e6:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:03:66:E7:40:00:34:CA:E3:CF:E6:B1:D3:81:61:A1:A5:8F:65
            X509v3 Authority Key Identifier:
                keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31392e302f32342d3234203d3e20313333383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d9:5c:15:1f:a2:08:68:cd:76:31:4b:a0:46:6a:07:e4:3d:
         24:f4:77:7e:fb:32:ba:c3:af:b5:99:56:c0:4b:6e:9d:62:b0:
         ad:f0:02:e6:5c:46:1f:07:d6:78:c1:4a:c4:29:5c:da:a4:34:
         fe:e5:20:0c:e6:2e:da:d9:7d:3a:06:8e:18:73:41:31:3a:d0:
         46:59:4a:2f:47:7d:1c:82:75:d9:0d:f2:f2:86:9c:c7:e4:f1:
         a6:0e:fc:5e:83:b4:0a:d4:06:64:3b:93:33:90:b1:29:6b:03:
         21:03:c2:2c:ec:83:86:d2:dd:bc:73:13:e8:04:34:69:17:95:
         e3:b2:4b:20:10:ed:1b:b5:45:75:0d:ad:d2:37:33:4b:12:e3:
         1c:e7:01:f0:68:94:f7:4e:a2:b8:06:ce:cc:a5:51:76:2d:82:
         d9:0d:45:11:17:55:38:8c:d1:03:f2:26:04:92:5e:ce:6d:6d:
         97:91:02:38:90:ce:ea:4d:62:61:18:26:97:87:0f:6f:e2:e3:
         da:cf:76:27:35:ee:cd:12:94:cf:ce:53:77:1b:aa:77:56:fd:
         ad:36:db:2b:e2:e2:65:68:f2:15:83:b9:12:ae:6c:95:14:a7:
         01:79:b8:b5:f5:7d:f4:29:7d:11:87:84:e0:21:9a:42:ca:4a:
         1c:6c:87:62
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfHmqy1OAvYXRVEQabj/p+ujkRpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQyNjUw
QzA3MzlEMjAeFw0yNjA1MDMwMzEzNTNaFw0yNzA1MDIwMzE4NTNaMDMxMTAvBgNV
BAMTKDVCMzMwMzY2RTc0MDAwMzRDQUUzQ0ZFNkIxRDM4MTYxQTFBNThGNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVOm2XL7V/QFYGAMg8nHD+KDBf
b5izkBgpeVUDSzys4kpne4bFHrqN7taqw06C+YPigvgWRUuHeIPIAU8l5MzJRywq
QXkDUUG11lTfP0dF4flW9BaFvzbqUJS3nP5wN3gmDT6T0di7QutRPuwO7bG3pIhn
SHKwziZFXS+LaaDrKll/2xeozmmTbkSNPhn33vhdABAPEvNCYDUMZlqjTEWnTkVs
+IOHL/nslxoQyLOQA7LoymcEi3m2nV4kFb9CPE2Da7KWp2J2jgwYy4f819w0qYdU
e5SwS9L/zGO7tpkPbLTNfTL+/e1Ulx27rO/7QE2l6FrFgxOR47UoC8kN5kBHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWzMDZudAADTK48/msdOBYaGlj2UwHwYDVR0j
BBgwFoAUfXSMmZO9YS603thteKVCZQwHOdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmFkZDdjMGYtMDJkMy00MjE3LTlmYzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5
M0JENjEyRUI0REVEODZENzhBNTQyNjUwQzA3MzlEMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83RDc0OEM5OTkzQkQ2MTJFQjRERUQ4NkQ3OEE1NDI2NTBDMDcz
OUQyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZhZGQ3YzBmLTAyZDMtNDIxNy05
ZmMzLTAwNDdhZTE4MzZkYy8wLzMxMzAzMzJlMzUzMjJlMzEzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc0EzANBgkqhkiG
9w0BAQsFAAOCAQEAVtlcFR+iCGjNdjFLoEZqB+Q9JPR3fvsyusOvtZlWwEtunWKw
rfAC5lxGHwfWeMFKxClc2qQ0/uUgDOYu2tl9OgaOGHNBMTrQRllKL0d9HIJ12Q3y
8oacx+Txpg78XoO0CtQGZDuTM5CxKWsDIQPCLOyDhtLdvHMT6AQ0aReV47JLIBDt
G7VFdQ2t0jczSxLjHOcB8GiU906iuAbOzKVRdi2C2Q1FERdVOIzRA/ImBJJezm1t
l5ECOJDO6k1iYRgml4cPb+Lj2s92JzXuzRKUz85Tdxuqd1b9rTbbK+LiZWjyFYO5
Eq5slRSnAXm4tfV99Cl9EYeE4CGaQspKHGyHYg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:45:21 2026 by rpki-client