Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa
File:                     3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=
Subject key identifier:   38:44:5A:41:F9:5A:D5:B8:D1:8A:47:5F:F4:73:EB:B4:21:00:A2:9F
Certificate issuer:       /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE
Certificate serial:       B4843D2486E11896B4993DB5F84A92B64714DF
Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa
Signing time:             Sun 03 May 2026 03:19:36 +0000
ROA not before:           Sun 03 May 2026 03:14:36 +0000
ROA not after:            Sun 02 May 2027 03:19:36 +0000
asID:                     58821
IP address blocks:        103.155.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl
                          rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b4:84:3d:24:86:e1:18:96:b4:99:3d:b5:f8:4a:92:b6:47:14:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE
        Validity
            Not Before: May  3 03:14:36 2026 GMT
            Not After : May  2 03:19:36 2027 GMT
        Subject: CN=38445A41F95AD5B8D18A475FF473EBB42100A29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:67:41:10:74:8d:02:aa:ed:58:96:08:3c:e0:
                    e0:6d:a2:f3:c4:46:23:87:e7:58:05:1b:1a:44:a1:
                    c1:20:bb:ad:8e:6c:39:e0:61:f1:f4:6f:41:ce:cd:
                    08:85:73:d9:42:3d:8b:f9:df:a6:e5:93:24:8e:4e:
                    10:02:bf:39:58:b4:97:e4:56:0d:3e:ac:d8:10:6a:
                    70:a4:9d:e0:e0:1e:1d:10:55:69:a7:d3:ba:d2:8d:
                    5f:3d:bb:1f:87:b6:e6:b0:7e:08:d6:54:b5:ec:85:
                    a0:1e:b2:4c:e7:54:93:0e:c8:7d:6f:99:35:af:56:
                    cf:b9:5d:cb:67:2a:b4:59:6e:d2:34:1f:25:6c:0a:
                    a9:e3:dd:48:f0:0f:20:05:80:2b:cd:73:14:b7:dc:
                    d6:bb:72:4d:12:df:45:8c:24:59:74:13:7e:fe:08:
                    8f:a8:cc:39:7c:3a:d6:f9:e3:91:24:75:47:16:0d:
                    5f:67:65:6b:f3:3c:ff:fa:f7:d9:5e:52:5e:6b:26:
                    10:05:47:c7:df:13:3a:be:5a:d1:46:c7:78:c6:2e:
                    95:f6:50:de:0f:01:84:cb:e3:3a:01:86:40:8e:f5:
                    bf:ab:9a:ac:39:e4:2c:a2:07:88:98:0a:51:39:02:
                    73:97:ce:f2:ef:de:e6:35:71:48:d1:26:85:81:b6:
                    b8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:44:5A:41:F9:5A:D5:B8:D1:8A:47:5F:F4:73:EB:B4:21:00:A2:9F
            X509v3 Authority Key Identifier:
                keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:90:a0:ae:64:2a:cf:fe:24:8e:e5:fb:20:8d:66:bf:3e:0d:
         bb:97:fe:0a:61:55:a1:54:45:d2:c8:96:ec:5c:05:1a:c9:e1:
         12:e5:69:b0:2c:5c:23:93:34:16:57:d8:47:d5:ed:af:39:12:
         64:05:53:54:96:06:66:6e:0f:df:31:60:9b:0d:66:84:73:aa:
         c6:71:26:2e:8a:6b:70:b7:37:8a:0f:f1:21:93:3d:25:e9:c0:
         b3:af:25:25:f9:84:4e:15:30:1b:7f:65:cb:63:c6:12:44:b1:
         83:64:42:ff:f5:f3:06:36:74:2e:88:ed:e2:06:81:3b:c4:42:
         84:5e:18:af:30:f0:70:1c:5f:7c:5e:24:94:f9:2f:03:8f:52:
         c6:99:09:77:f8:a7:20:17:1c:75:e5:34:76:68:f3:63:b0:4a:
         44:a1:85:f4:c0:6f:7a:ed:03:1d:4c:c6:51:bf:73:9d:5e:ce:
         01:a5:89:20:f9:11:ca:74:50:8c:28:50:f2:5a:10:7a:9b:38:
         94:dc:a4:21:09:a5:8c:72:28:a7:f6:15:54:72:f4:5d:04:5b:
         fa:44:b2:9f:a4:a0:c7:b1:b7:79:dc:c7:a4:66:1d:af:ba:3c:
         93:e5:b3:70:63:96:4e:cb:0b:f9:4d:b1:a0:b8:24:72:fb:19:
         55:ea:06:96
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUALSEPSSG4RiWtJk9tfhKkrZHFN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD
NkNFQ0JCRTAeFw0yNjA1MDMwMzE0MzZaFw0yNzA1MDIwMzE5MzZaMDMxMTAvBgNV
BAMTKDM4NDQ1QTQxRjk1QUQ1QjhEMThBNDc1RkY0NzNFQkI0MjEwMEEyOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTZ0EQdI0Cqu1Ylgg84OBtovPE
RiOH51gFGxpEocEgu62ObDngYfH0b0HOzQiFc9lCPYv536blkySOThACvzlYtJfk
Vg0+rNgQanCkneDgHh0QVWmn07rSjV89ux+HtuawfgjWVLXshaAeskznVJMOyH1v
mTWvVs+5XctnKrRZbtI0HyVsCqnj3UjwDyAFgCvNcxS33Na7ck0S30WMJFl0E37+
CI+ozDl8Otb545EkdUcWDV9nZWvzPP/699leUl5rJhAFR8ffEzq+WtFGx3jGLpX2
UN4PAYTL4zoBhkCO9b+rmqw55CyiB4iYClE5AnOXzvLv3uY1cUjRJoWBtrjbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOERaQfla1bjRikdf9HPrtCEAop8wHwYDVR0j
BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC
Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD
QkJFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZmMjUwNmIxLTM5NmQtNDk5ZS1i
N2Y1LTVkOWY4ZTdlMGJlZS8wLzMxMzAzMzJlMzEzNTM1MmUzMTM5MzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNTM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5vGMA0GCSqG
SIb3DQEBCwUAA4IBAQCVkKCuZCrP/iSO5fsgjWa/Pg27l/4KYVWhVEXSyJbsXAUa
yeES5WmwLFwjkzQWV9hH1e2vORJkBVNUlgZmbg/fMWCbDWaEc6rGcSYuimtwtzeK
D/Ehkz0l6cCzryUl+YROFTAbf2XLY8YSRLGDZEL/9fMGNnQuiO3iBoE7xEKEXhiv
MPBwHF98XiSU+S8Dj1LGmQl3+KcgFxx15TR2aPNjsEpEoYX0wG967QMdTMZRv3Od
Xs4BpYkg+RHKdFCMKFDyWhB6mziU3KQhCaWMciin9hVUcvRdBFv6RLKfpKDHsbd5
3MekZh2vujyT5bNwY5ZOywv5TbGguCRy+xlV6gaW
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:03 2026 by rpki-client