Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa
File:                     3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (raw, json)
Hash identifier:          WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=
Subject key identifier:   5A:8C:7E:49:70:7A:36:64:C3:75:1F:83:D5:F3:74:68:22:BF:1F:FD
Certificate issuer:       /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6
Certificate serial:       650730E47E7FE296BF4A4BD9646619A7CB48444B
Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa
Signing time:             Sun 03 May 2026 03:19:29 +0000
ROA not before:           Sun 03 May 2026 03:14:29 +0000
ROA not after:            Sun 02 May 2027 03:19:29 +0000
asID:                     149379
IP address blocks:        103.181.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl
                          rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:07:30:e4:7e:7f:e2:96:bf:4a:4b:d9:64:66:19:a7:cb:48:44:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6
        Validity
            Not Before: May  3 03:14:29 2026 GMT
            Not After : May  2 03:19:29 2027 GMT
        Subject: CN=5A8C7E49707A3664C3751F83D5F3746822BF1FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:0e:65:77:33:1e:c9:11:64:51:65:bc:be:
                    2a:31:37:41:21:26:dc:56:01:0d:1f:97:b9:d3:3a:
                    f0:3b:3a:bf:90:c2:ad:ba:68:fb:de:f7:09:6b:f8:
                    a3:b4:a5:2f:f7:45:e0:38:9a:dd:f8:fe:f0:72:c9:
                    d5:36:19:34:56:03:b8:09:1e:45:ef:61:80:ac:8c:
                    c1:20:cc:d1:58:b6:70:8c:59:56:14:37:b4:7c:e1:
                    d5:5b:1e:55:0d:f0:97:d1:e6:2d:7c:95:f0:73:f6:
                    5e:bc:2d:48:31:df:f8:a2:09:03:56:0c:6a:37:76:
                    a7:e9:91:af:c6:3b:2f:e7:cd:c0:11:ec:4a:65:91:
                    e0:64:82:1a:c4:77:96:ed:ad:be:77:ad:18:72:d8:
                    71:50:87:1e:6c:ae:08:e9:f3:49:0a:bd:25:7d:2f:
                    00:ee:ee:ee:d0:da:f1:35:c7:ab:22:8b:20:a6:6d:
                    33:7a:50:b3:46:51:61:f6:9c:f4:91:85:10:9f:eb:
                    71:80:51:d1:e0:21:0c:4a:56:de:6e:27:82:85:e2:
                    36:63:86:2f:15:37:fe:f7:74:0e:8d:ec:33:fe:29:
                    81:c5:94:95:1b:ba:26:31:37:eb:9e:f1:b8:ec:34:
                    fe:b3:76:73:fd:fe:5c:c5:9c:2b:3f:8c:70:53:69:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8C:7E:49:70:7A:36:64:C3:75:1F:83:D5:F3:74:68:22:BF:1F:FD
            X509v3 Authority Key Identifier:
                keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:08:30:59:74:5a:ea:84:0a:f2:d7:b9:eb:7e:5b:12:a4:34:
         19:a2:65:ad:de:d4:fd:6a:e1:b4:e7:2f:a7:b7:fb:b6:e1:27:
         1b:be:85:07:bb:2a:ab:82:ef:de:42:96:f8:b1:e6:e1:31:ef:
         17:9a:fa:7a:b1:11:1b:df:df:85:71:66:96:ca:bd:2a:88:40:
         57:60:20:bc:9c:dd:26:c1:98:8a:e1:0e:59:3d:35:d7:af:ff:
         40:a7:ea:55:bb:ab:70:98:1d:33:32:be:53:ce:be:a4:70:e0:
         65:98:56:61:c2:5b:7b:31:f0:4f:e9:99:85:61:9d:98:f7:c1:
         28:ae:e7:ed:f8:46:49:62:a6:bf:f0:f4:00:df:7b:2e:af:cd:
         89:60:1a:15:48:a4:ae:9a:e8:e3:28:ec:a7:02:e7:f9:9a:7d:
         54:a8:ea:5f:83:bc:c6:da:a1:36:8e:6b:d1:1b:8e:33:39:88:
         4e:01:b7:78:bd:6e:49:9b:7a:4a:27:d5:76:be:39:23:3f:85:
         1f:4d:8d:1b:50:bd:a9:a2:7b:33:d9:d7:e8:d3:ef:3f:12:94:
         b0:95:c4:d3:28:10:19:d2:be:1a:d1:37:24:12:43:05:26:d1:
         09:44:48:c2:7a:00:ce:37:6d:b2:8c:5d:a4:cc:ee:fb:48:05:
         22:9c:84:b5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZQcw5H5/4pa/SkvZZGYZp8tIREswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2
MURCNzhBNjAeFw0yNjA1MDMwMzE0MjlaFw0yNzA1MDIwMzE5MjlaMDMxMTAvBgNV
BAMTKDVBOEM3RTQ5NzA3QTM2NjRDMzc1MUY4M0Q1RjM3NDY4MjJCRjFGRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDg5ldzMeyRFkUWW8vioxN0Eh
JtxWAQ0fl7nTOvA7Or+Qwq26aPve9wlr+KO0pS/3ReA4mt34/vByydU2GTRWA7gJ
HkXvYYCsjMEgzNFYtnCMWVYUN7R84dVbHlUN8JfR5i18lfBz9l68LUgx3/iiCQNW
DGo3dqfpka/GOy/nzcAR7EplkeBkghrEd5btrb53rRhy2HFQhx5srgjp80kKvSV9
LwDu7u7Q2vE1x6siiyCmbTN6ULNGUWH2nPSRhRCf63GAUdHgIQxKVt5uJ4KF4jZj
hi8VN/73dA6N7DP+KYHFlJUbuiYxN+ue8bjsNP6zdnP9/lzFnCs/jHBTacqbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUWox+SXB6NmTDdR+D1fN0aCK/H/0wHwYDVR0j
BBgwFoAUiqUttdtx9jjpQSVKawzmg2HbeKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmUxY2JkNzktOGYyNi00YjBlLThiM2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVE
QjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2MURCNzhBNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QUE1MkRCNURCNzFGNjM4RTk0MTI1NEE2QjBDRTY4MzYxREI3
OEE2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZlMWNiZDc5LThmMjYtNGIwZS04
YjNiLWFiOWU5OTM4ZmNhZS8wLzMxMzAzMzJlMzEzODMxMmUzNzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7VMMA0GCSqG
SIb3DQEBCwUAA4IBAQAnCDBZdFrqhAry17nrflsSpDQZomWt3tT9auG05y+nt/u2
4ScbvoUHuyqrgu/eQpb4sebhMe8Xmvp6sREb39+FcWaWyr0qiEBXYCC8nN0mwZiK
4Q5ZPTXXr/9Ap+pVu6twmB0zMr5Tzr6kcOBlmFZhwlt7MfBP6ZmFYZ2Y98Eoruft
+EZJYqa/8PQA33sur82JYBoVSKSumujjKOynAuf5mn1UqOpfg7zG2qE2jmvRG44z
OYhOAbd4vW5Jm3pKJ9V2vjkjP4UfTY0bUL2ponsz2dfo0+8/EpSwlcTTKBAZ0r4a
0TckEkMFJtEJREjCegDON22yjF2kzO77SAUinIS1
-----END CERTIFICATE-----
Generated at Wed May 13 02:27:26 2026 by rpki-client