Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa
File:                     3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (raw, json)
Hash identifier:          O5uC/L29P8IATSFs7V00fPXENgiidDt4Krk5PawD2S0=
Subject key identifier:   17:AE:F3:BA:27:EB:24:82:82:36:EC:79:9D:68:AD:09:9F:3A:21:AB
Certificate issuer:       /CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC
Certificate serial:       2066B58B41C177A7815EB4E42CBE925A6DB92F82
Authority key identifier: 45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa
Signing time:             Sun 03 May 2026 03:19:12 +0000
ROA not before:           Sun 03 May 2026 03:14:12 +0000
ROA not after:            Sun 02 May 2027 03:19:12 +0000
asID:                     140429
IP address blocks:        103.151.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl
                          rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:66:b5:8b:41:c1:77:a7:81:5e:b4:e4:2c:be:92:5a:6d:b9:2f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC
        Validity
            Not Before: May  3 03:14:12 2026 GMT
            Not After : May  2 03:19:12 2027 GMT
        Subject: CN=17AEF3BA27EB24828236EC799D68AD099F3A21AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:0e:c7:7c:2f:c8:7a:81:5d:d7:57:26:d3:
                    70:a2:ca:f9:63:12:b5:e0:ec:72:0b:bd:f6:e1:80:
                    2b:79:27:8b:dd:ce:79:52:75:4c:53:35:0d:c8:f0:
                    61:b4:b5:2a:ef:ad:ae:b7:fb:27:a2:44:bc:ef:bb:
                    e7:8e:ba:1b:35:6c:1e:f1:56:87:46:1b:32:91:d1:
                    43:a7:bc:b6:84:82:1e:55:4d:3d:66:17:be:e6:5f:
                    2e:c5:2b:8e:b0:47:5a:00:00:de:ad:03:1e:24:98:
                    ec:c0:dc:5c:93:42:a7:15:b9:03:78:12:80:9a:3c:
                    18:0a:c0:d0:0a:7c:c6:db:57:50:e4:90:13:a6:82:
                    fa:01:1c:10:70:d2:09:37:06:db:c9:fa:fa:27:5d:
                    76:5f:7f:df:c4:98:b7:d7:1e:92:b3:97:77:5a:cf:
                    b8:4a:cc:2c:64:5f:82:95:70:0b:a4:1b:5d:d0:6d:
                    52:01:cd:2e:eb:1f:e7:2c:1a:4c:f0:5a:e8:d5:42:
                    eb:c5:35:d1:46:53:e2:0b:4c:70:36:94:e7:ec:7f:
                    3f:99:ac:04:cf:aa:7c:7d:a1:90:66:b7:f6:25:4b:
                    a6:b6:14:c2:d6:13:45:61:13:79:56:a0:04:42:67:
                    7e:51:97:d0:53:37:79:17:81:55:15:f7:a8:c6:7d:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AE:F3:BA:27:EB:24:82:82:36:EC:79:9D:68:AD:09:9F:3A:21:AB
            X509v3 Authority Key Identifier:
                keyid:45:F3:50:E0:24:8C:A8:A2:B2:0B:53:A2:2B:DD:3B:6F:CF:16:C7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F350E0248CA8A2B20B53A22BDD3B6FCF16C7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:7e:f3:ff:0f:f5:ad:0e:7b:e5:db:bf:cf:ef:c3:43:53:ca:
         91:8d:50:30:29:a0:7e:28:cf:dd:c9:91:a2:91:a2:01:2f:c5:
         1a:ab:69:6e:f7:d3:e6:51:f2:61:5a:c1:1a:ac:30:fd:7b:dd:
         84:09:0b:2a:5e:44:4e:eb:ce:88:5c:56:ce:5e:a2:bd:8b:fe:
         dc:90:9e:17:ea:c5:1b:17:82:3b:21:b0:9c:1e:32:0e:6e:37:
         7a:ea:75:3a:32:d6:63:51:b6:a3:21:f1:e9:50:13:5c:59:ac:
         48:10:e7:c6:4a:53:16:a2:65:70:5a:72:31:63:fa:6b:7c:63:
         c1:02:6b:eb:8f:55:6f:07:11:a9:c2:df:64:34:f7:ea:65:b9:
         ab:42:41:29:b8:23:f2:d4:e4:9d:eb:25:da:a2:ae:db:55:80:
         45:e4:af:9b:2c:bd:e6:fd:c3:8e:f4:be:41:32:3a:0e:ec:1b:
         5f:29:4d:9c:4e:3b:55:6d:e0:8e:c8:14:28:43:e8:80:06:5a:
         56:4b:57:58:92:dc:04:24:7c:4c:b4:6d:c6:40:3a:4e:a7:39:
         65:ed:45:4b:96:6c:47:f5:3d:3d:67:c8:3d:87:36:d6:50:8a:
         9e:f5:0f:2a:24:96:20:af:85:c7:87:f1:4e:48:ec:22:b6:93:
         eb:59:c4:4e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUIGa1i0HBd6eBXrTkLL6SWm25L4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVGMzUwRTAyNDhDQThBMkIyMEI1M0EyMkJERDNCNkZD
RjE2QzdBQzAeFw0yNjA1MDMwMzE0MTJaFw0yNzA1MDIwMzE5MTJaMDMxMTAvBgNV
BAMTKDE3QUVGM0JBMjdFQjI0ODI4MjM2RUM3OTlENjhBRDA5OUYzQTIxQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgg7HfC/IeoFd11cm03Ciyvlj
ErXg7HILvfbhgCt5J4vdznlSdUxTNQ3I8GG0tSrvra63+yeiRLzvu+eOuhs1bB7x
VodGGzKR0UOnvLaEgh5VTT1mF77mXy7FK46wR1oAAN6tAx4kmOzA3FyTQqcVuQN4
EoCaPBgKwNAKfMbbV1DkkBOmgvoBHBBw0gk3BtvJ+vonXXZff9/EmLfXHpKzl3da
z7hKzCxkX4KVcAukG13QbVIBzS7rH+csGkzwWujVQuvFNdFGU+ILTHA2lOfsfz+Z
rATPqnx9oZBmt/YlS6a2FMLWE0VhE3lWoARCZ35Rl9BTN3kXgVUV96jGfbFPAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUF67zuifrJIKCNux5nWitCZ86IaswHwYDVR0j
BBgwFoAURfNQ4CSMqKKyC1OiK907b88Wx6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmMyYWIwNjItODcwMy00ZGE2LWFkNzItODBkMjVhZThiZjVmLzAvNDVGMzUwRTAy
NDhDQThBMkIyMEI1M0EyMkJERDNCNkZDRjE2QzdBQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NUYzNTBFMDI0OENBOEEyQjIwQjUzQTIyQkREM0I2RkNGMTZD
N0FDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZjMmFiMDYyLTg3MDMtNGRhNi1h
ZDcyLTgwZDI1YWU4YmY1Zi8wLzMxMzAzMzJlMzEzNTMxMmUzMjMyMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnl+MwDQYJ
KoZIhvcNAQELBQADggEBAL1+8/8P9a0Oe+Xbv8/vw0NTypGNUDApoH4oz93JkaKR
ogEvxRqraW730+ZR8mFawRqsMP173YQJCypeRE7rzohcVs5eor2L/tyQnhfqxRsX
gjshsJweMg5uN3rqdToy1mNRtqMh8elQE1xZrEgQ58ZKUxaiZXBacjFj+mt8Y8EC
a+uPVW8HEanC32Q09+pluatCQSm4I/LU5J3rJdqirttVgEXkr5ssveb9w470vkEy
Og7sG18pTZxOO1Vt4I7IFChD6IAGWlZLV1iS3AQkfEy0bcZAOk6nOWXtRUuWbEf1
PT1nyD2HNtZQip71DyokliCvhceH8U5I7CK2k+tZxE4=
-----END CERTIFICATE-----
Generated at Wed May 13 04:48:05 2026 by rpki-client