Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa
File:                     3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (raw, json)
Hash identifier:          inh5OwQ0YrBgY5xCxaOxxgj16EXDsFBhdopHtNq3Eyc=
Subject key identifier:   4F:E2:B5:59:E3:B0:49:21:FC:89:DF:80:95:00:D4:61:4E:84:EC:28
Certificate issuer:       /CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Certificate serial:       7ABD1493E1CF5BACE29E1D8ABB4303B5B5318182
Authority key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa
Signing time:             Sun 03 May 2026 03:19:30 +0000
ROA not before:           Sun 03 May 2026 03:14:30 +0000
ROA not after:            Sun 02 May 2027 03:19:30 +0000
asID:                     150483
IP address blocks:        103.54.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
                          rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bd:14:93:e1:cf:5b:ac:e2:9e:1d:8a:bb:43:03:b5:b5:31:81:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
        Validity
            Not Before: May  3 03:14:30 2026 GMT
            Not After : May  2 03:19:30 2027 GMT
        Subject: CN=4FE2B559E3B04921FC89DF809500D4614E84EC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:3f:2a:f5:5f:52:f9:2a:6b:24:38:01:6f:
                    a3:9e:59:2e:75:b4:87:cf:bd:e8:68:7d:97:5f:20:
                    35:ac:d7:40:43:ac:16:04:9f:38:37:18:2e:d5:86:
                    b8:ed:29:58:f9:1b:7b:1d:2e:e7:c3:11:34:04:b3:
                    6c:98:c0:8f:bb:1c:c7:12:f7:da:ae:dc:bd:e4:3f:
                    e1:58:f6:f3:6b:ba:c5:e8:ea:87:a5:b8:5b:78:67:
                    b6:48:a3:19:05:de:1e:ca:e7:32:d7:b3:c7:05:87:
                    b9:bb:b2:b8:a3:58:32:99:6e:d4:63:c8:bc:a9:d1:
                    ba:db:83:09:71:08:a7:50:9e:a8:56:4d:97:dc:f8:
                    de:98:69:7c:85:08:8e:f3:c0:7c:bb:6a:37:5f:6b:
                    68:0e:9e:ae:fe:9b:6c:c6:d5:c6:ad:11:ef:b0:11:
                    fc:ef:92:81:aa:e3:bd:64:30:47:b5:e2:c5:4c:b9:
                    64:eb:86:6d:43:fd:f0:ad:0a:02:20:20:87:00:56:
                    c6:66:f9:63:4d:c5:7e:3d:3d:24:d5:17:4b:2d:4f:
                    3d:c4:14:05:61:45:e0:ab:c3:3d:8d:3e:93:7a:e5:
                    2c:63:2c:69:eb:51:1e:5c:a3:18:c8:8b:98:dc:d8:
                    57:2e:23:96:49:e5:d0:50:92:dd:62:00:9e:51:f3:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E2:B5:59:E3:B0:49:21:FC:89:DF:80:95:00:D4:61:4E:84:EC:28
            X509v3 Authority Key Identifier:
                keyid:A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:75:87:27:e4:e2:b1:04:f7:58:75:0a:15:95:96:39:ce:95:
         d2:08:5f:c2:f8:7a:d9:e7:b9:3c:e4:13:f4:47:bb:de:f1:64:
         54:1d:65:f3:76:c1:d7:67:43:74:a3:96:5d:73:16:e8:d4:80:
         fc:21:6c:dd:dc:66:e1:13:89:65:a9:11:69:1e:de:ab:08:45:
         53:54:05:bb:89:b8:29:e9:b0:91:e2:f7:d7:33:bb:2e:fe:d0:
         c9:60:4f:ca:17:0c:8d:f7:43:9b:fe:48:de:58:0a:c6:a3:e2:
         68:4b:62:56:da:d4:cd:04:a3:55:63:02:a5:b8:a1:14:80:10:
         a9:3a:ed:cd:ee:66:85:c4:f6:aa:8d:19:b6:73:cb:12:36:d9:
         8d:e9:ba:5d:07:12:4a:13:8f:2b:3a:57:45:57:da:15:45:d7:
         c6:16:dc:92:c3:dc:3a:12:f8:91:07:4b:e1:02:21:4b:cd:76:
         db:f3:05:4f:8d:d2:ce:4a:cd:e0:2d:be:94:3a:a5:ab:79:15:
         33:92:59:f3:d3:a4:1e:3c:fe:60:53:0f:d7:06:a1:6b:4e:89:
         7d:87:33:4f:90:ef:85:73:da:4a:eb:37:26:d6:d0:fd:22:82:
         a2:7a:d7:90:4d:5c:51:93:0c:fc:78:45:e5:b5:eb:75:86:22:
         1d:ca:85:4c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUer0Uk+HPW6zinh2Ku0MDtbUxgYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU1RjdGNkI3RkRGRDI0NDg5OEZDODM2QjMwNkY4ODg0
Rjk0QThFQjAeFw0yNjA1MDMwMzE0MzBaFw0yNzA1MDIwMzE5MzBaMDMxMTAvBgNV
BAMTKDRGRTJCNTU5RTNCMDQ5MjFGQzg5REY4MDk1MDBENDYxNEU4NEVDMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63z8q9V9S+SprJDgBb6OeWS51
tIfPvehofZdfIDWs10BDrBYEnzg3GC7VhrjtKVj5G3sdLufDETQEs2yYwI+7HMcS
99qu3L3kP+FY9vNrusXo6oeluFt4Z7ZIoxkF3h7K5zLXs8cFh7m7srijWDKZbtRj
yLyp0brbgwlxCKdQnqhWTZfc+N6YaXyFCI7zwHy7ajdfa2gOnq7+m2zG1catEe+w
EfzvkoGq471kMEe14sVMuWTrhm1D/fCtCgIgIIcAVsZm+WNNxX49PSTVF0stTz3E
FAVhReCrwz2NPpN65SxjLGnrUR5coxjIi5jc2FcuI5ZJ5dBQkt1iAJ5R8yAzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUT+K1WeOwSSH8id+AlQDUYU6E7CgwHwYDVR0j
BBgwFoAUpV9/a3/f0kSJj8g2swb4iE+UqOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmUzMzA2MzMtYTdkMS00ZDBhLWExY2MtYjZjM2VlZGZiYzE3LzAvQTU1RjdGNkI3
RkRGRDI0NDg5OEZDODM2QjMwNkY4ODg0Rjk0QThFQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNTVGN0Y2QjdGREZEMjQ0ODk4RkM4MzZCMzA2Rjg4ODRGOTRB
OEVCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZlMzMwNjMzLWE3ZDEtNGQwYS1h
MWNjLWI2YzNlZWRmYmMxNy8wLzMxMzAzMzJlMzUzNDJlMzEzNjM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzQzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZzaoMA0GCSqG
SIb3DQEBCwUAA4IBAQAgdYcn5OKxBPdYdQoVlZY5zpXSCF/C+HrZ57k85BP0R7ve
8WRUHWXzdsHXZ0N0o5Zdcxbo1ID8IWzd3GbhE4llqRFpHt6rCEVTVAW7ibgp6bCR
4vfXM7su/tDJYE/KFwyN90Ob/kjeWArGo+JoS2JW2tTNBKNVYwKluKEUgBCpOu3N
7maFxPaqjRm2c8sSNtmN6bpdBxJKE48rOldFV9oVRdfGFtySw9w6EviRB0vhAiFL
zXbb8wVPjdLOSs3gLb6UOqWreRUzklnz06QePP5gUw/XBqFrTol9hzNPkO+Fc9pK
6zcm1tD9IoKieteQTVxRkwz8eEXltet1hiIdyoVM
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:02 2026 by rpki-client