Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e203438343635.roa
File:                     3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          iJm4NhgPbIn9ZoK9MCrx0LzGYq+XRWtI9oNHEB41bTw=
Subject key identifier:   80:A7:D2:15:B5:67:FF:64:3E:D4:3D:59:19:26:7C:7C:21:B3:B8:7A
Certificate issuer:       /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463
Certificate serial:       1A01917D4973E373433B20DBB3A7DB9DB0CCC0EC
Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 03 May 2026 02:24:14 +0000
ROA not before:           Sun 03 May 2026 02:19:14 +0000
ROA not after:            Sun 02 May 2027 02:24:14 +0000
asID:                     48465
IP address blocks:        103.51.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl
                          rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:01:91:7d:49:73:e3:73:43:3b:20:db:b3:a7:db:9d:b0:cc:c0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463
        Validity
            Not Before: May  3 02:19:14 2026 GMT
            Not After : May  2 02:24:14 2027 GMT
        Subject: CN=80A7D215B567FF643ED43D5919267C7C21B3B87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:c4:46:9f:81:34:ae:8e:68:ca:84:ea:97:
                    d0:3a:f7:55:27:ff:0f:ee:c7:c6:44:da:04:07:a1:
                    ea:42:2e:10:6c:9e:3a:2b:20:e4:c6:59:9c:87:03:
                    8a:99:f1:e0:09:fa:3a:52:cb:02:ed:c6:fd:c8:6a:
                    26:0b:f3:68:f3:e0:c3:af:93:a0:6b:00:a5:72:53:
                    a0:ff:b0:09:f9:2e:5b:bc:f5:45:61:11:3a:92:f1:
                    65:3f:fe:6c:2b:46:9f:86:d8:b7:82:5e:36:62:a1:
                    5d:62:2e:82:29:02:9a:ee:dc:a3:b7:8c:f4:6a:8e:
                    bf:39:ca:c3:d3:23:15:02:8b:54:5e:fa:32:02:e4:
                    07:a8:74:d7:23:bb:37:e6:7b:27:6d:5f:da:92:31:
                    81:88:19:69:68:76:39:2a:e3:88:8d:c8:9b:9a:5e:
                    72:bc:2d:8b:cf:7d:77:92:15:4f:b3:84:13:19:ef:
                    8c:89:e0:85:7b:06:69:cf:e6:cb:be:02:df:78:14:
                    ff:3a:84:f6:c7:d5:b0:af:c1:65:0e:b9:94:fe:6f:
                    56:66:7a:a4:f0:1e:0c:b6:b3:c0:34:65:10:08:0b:
                    a1:ed:7e:da:d6:95:81:97:30:bf:d5:df:87:e8:37:
                    62:2d:4e:a1:f8:66:f4:e5:14:bd:4f:0e:16:ba:d3:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A7:D2:15:B5:67:FF:64:3E:D4:3D:59:19:26:7C:7C:21:B3:B8:7A
            X509v3 Authority Key Identifier:
                keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:87:47:92:f3:c3:a7:07:ef:8a:56:27:e0:f5:89:db:c0:f5:
         9e:b9:bb:88:31:a3:a1:db:7d:3d:74:47:69:55:c9:dc:27:6f:
         a5:2a:e1:4d:87:e9:aa:39:03:a8:7f:b3:69:5d:22:f6:61:40:
         00:64:30:e9:10:30:8e:06:da:ac:f6:c5:8d:47:87:23:1d:23:
         13:01:1c:63:7a:15:7a:a3:39:f5:40:cb:4b:fa:9a:f6:53:c1:
         78:12:81:3b:ea:3a:1a:23:40:60:db:ea:f2:9a:62:57:67:24:
         e3:e5:75:fb:a9:dc:23:51:49:b8:6f:3d:31:a4:7e:92:21:1a:
         df:22:55:f3:2b:22:31:91:31:ba:b4:12:04:9c:13:79:43:15:
         9b:33:73:e6:9f:3a:1f:66:cf:29:be:b2:93:de:1a:c8:3c:7e:
         06:5c:87:0f:73:c5:11:3b:11:bd:2a:d5:ca:dc:f2:b8:a4:1d:
         46:9d:49:e7:13:f9:f9:6c:7a:fd:a1:1c:e5:11:bd:3e:15:9e:
         44:9e:dc:76:d7:e2:78:51:03:bc:fc:28:9e:26:ec:09:ad:a0:
         44:33:48:e7:69:38:60:59:b6:59:40:70:a8:dc:eb:47:b8:b3:
         4a:a7:cc:00:a4:80:c7:3a:5e:be:6f:a1:ba:50:37:83:6c:b2:
         a9:2f:c6:7f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGgGRfUlz43NDOyDbs6fbnbDMwOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3
MkUyQzQ2MzAeFw0yNjA1MDMwMjE5MTRaFw0yNzA1MDIwMjI0MTRaMDMxMTAvBgNV
BAMTKDgwQTdEMjE1QjU2N0ZGNjQzRUQ0M0Q1OTE5MjY3QzdDMjFCM0I4N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMz8RGn4E0ro5oyoTql9A691Un
/w/ux8ZE2gQHoepCLhBsnjorIOTGWZyHA4qZ8eAJ+jpSywLtxv3IaiYL82jz4MOv
k6BrAKVyU6D/sAn5Llu89UVhETqS8WU//mwrRp+G2LeCXjZioV1iLoIpApru3KO3
jPRqjr85ysPTIxUCi1Re+jIC5AeodNcjuzfmeydtX9qSMYGIGWlodjkq44iNyJua
XnK8LYvPfXeSFU+zhBMZ74yJ4IV7BmnP5su+At94FP86hPbH1bCvwWUOuZT+b1Zm
eqTwHgy2s8A0ZRAIC6HtftrWlYGXML/V34foN2ItTqH4ZvTlFL1PDha602MRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUgKfSFbVn/2Q+1D1ZGSZ8fCGzuHowHwYDVR0j
BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG
NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD
NDYzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMyOGVlYzViLTUzMjQtNDQyMi1h
MzJmLTliMWRjZWQzNzU5Zi8wLzMxMzAzMzJlMzUzMTJlMzEzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGczezANBgkqhkiG
9w0BAQsFAAOCAQEAu4dHkvPDpwfvilYn4PWJ28D1nrm7iDGjodt9PXRHaVXJ3Cdv
pSrhTYfpqjkDqH+zaV0i9mFAAGQw6RAwjgbarPbFjUeHIx0jEwEcY3oVeqM59UDL
S/qa9lPBeBKBO+o6GiNAYNvq8ppiV2ck4+V1+6ncI1FJuG89MaR+kiEa3yJV8ysi
MZExurQSBJwTeUMVmzNz5p86H2bPKb6yk94ayDx+BlyHD3PFETsRvSrVytzyuKQd
Rp1J5xP5+Wx6/aEc5RG9PhWeRJ7cdtfieFEDvPwonibsCa2gRDNI52k4YFm2WUBw
qNzrR7izSqfMAKSAxzpevm+hulA3g2yyqS/Gfw==
-----END CERTIFICATE-----
Generated at Tue May 5 16:55:53 2026 by rpki-client