Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa
File:                     3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (raw, json)
Hash identifier:          IVfgbGei5sG8aHxKcQ03LzSWtbMPZQoN7TQZBqmMcs8=
Subject key identifier:   4F:FF:2F:07:FB:7B:39:E7:FA:81:E1:E5:B7:34:28:12:2C:F0:B7:90
Certificate issuer:       /CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
Certificate serial:       2A31FA51AEA5AC843D02F5F2CDFF96E76A8B8810
Authority key identifier: C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa
Signing time:             Sun 03 May 2026 02:10:15 +0000
ROA not before:           Sun 03 May 2026 02:05:15 +0000
ROA not after:            Sun 02 May 2027 02:10:15 +0000
asID:                     150530
IP address blocks:        103.68.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl
                          rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:31:fa:51:ae:a5:ac:84:3d:02:f5:f2:cd:ff:96:e7:6a:8b:88:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
        Validity
            Not Before: May  3 02:05:15 2026 GMT
            Not After : May  2 02:10:15 2027 GMT
        Subject: CN=4FFF2F07FB7B39E7FA81E1E5B73428122CF0B790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:0d:b1:29:10:55:fa:bc:f3:e1:a9:97:e2:
                    f3:06:7a:ec:a2:0d:e9:ee:08:8b:02:93:2c:47:b4:
                    87:16:c7:7f:9c:5c:56:92:1d:e2:a9:5a:88:23:10:
                    92:f4:75:5a:9b:f9:84:b0:3b:53:e6:df:c1:36:61:
                    25:69:bd:3b:e7:a2:7c:4d:6d:54:6b:7e:65:57:05:
                    93:be:4b:96:d4:a6:f8:d4:21:38:a3:78:a5:98:45:
                    dd:da:94:2d:e5:46:e7:0c:81:aa:03:f1:13:06:f7:
                    ed:e2:4d:7a:25:42:6e:39:2c:53:7a:c4:33:1d:d8:
                    9c:d3:da:d1:16:e2:f4:29:ca:f2:78:f1:f2:55:cf:
                    f6:5f:61:16:b1:97:4e:52:30:d8:4b:cf:4d:3e:55:
                    5e:82:76:f5:d8:a5:aa:a2:bd:3e:c5:a5:26:fe:af:
                    13:6f:67:b6:7d:5c:ea:93:5f:48:41:be:12:4d:b4:
                    41:32:21:77:2a:7d:9e:66:cb:2c:c5:1e:2b:c8:44:
                    71:2e:b1:f2:57:70:84:da:6d:59:7a:63:24:16:b7:
                    fa:f0:5d:b6:91:9c:3d:07:1a:99:0d:b1:d7:54:0a:
                    cd:f2:f3:20:40:77:81:ca:00:30:96:37:4a:f4:a6:
                    3c:e6:83:86:1a:e0:15:c4:b2:f0:2d:b1:d9:b6:12:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:2F:07:FB:7B:39:E7:FA:81:E1:E5:B7:34:28:12:2C:F0:B7:90
            X509v3 Authority Key Identifier:
                keyid:C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:9c:51:bd:8a:f9:7e:7b:95:ba:3d:4b:60:a9:0a:7c:d8:a9:
         9d:3f:80:d2:50:56:45:2c:6c:9c:e5:9f:0d:e5:31:f4:e4:54:
         69:f3:ac:56:e8:fc:43:86:47:dd:c1:7d:33:ef:7b:c7:33:e3:
         de:6d:57:8b:a9:c4:9f:d5:9d:76:47:02:ae:1e:25:bd:88:c8:
         88:f9:a2:51:f9:c1:c6:fd:c5:43:98:2f:3c:83:94:71:6f:21:
         e6:d6:fb:f4:a3:cf:0e:6b:f4:33:ff:ce:de:46:21:aa:69:3c:
         f7:fe:71:6b:f7:d3:64:c8:4a:9f:b1:01:6a:e2:f7:96:87:b7:
         10:c7:f7:0a:13:00:db:51:a9:55:2f:7d:06:84:ea:65:a9:0e:
         3b:e9:fd:d2:80:8b:3e:e7:e7:53:86:88:02:ef:02:fc:39:2a:
         31:15:b0:3f:af:04:d9:96:a5:e4:7c:85:b9:34:37:3b:93:89:
         09:b5:66:07:80:1a:43:fe:5a:cf:84:01:6b:57:27:d7:80:bf:
         da:97:f0:7c:8a:91:1f:0d:36:e3:a2:c6:cb:bb:e4:3d:de:76:
         6d:5d:bb:85:10:8d:b0:3d:9b:7e:bf:79:33:19:b1:71:f5:b1:
         1f:27:69:1d:a5:fa:3b:4f:a8:43:3b:ae:c3:7b:1b:e1:fd:30:
         29:77:36:41
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKjH6Ua6lrIQ9AvXyzf+W52qLiBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgxQzdCQURDRTFDQzUwNzVDMzk4RjZBOTFCRjI5Qzc5
QjlEMjQxOTAeFw0yNjA1MDMwMjA1MTVaFw0yNzA1MDIwMjEwMTVaMDMxMTAvBgNV
BAMTKDRGRkYyRjA3RkI3QjM5RTdGQTgxRTFFNUI3MzQyODEyMkNGMEI3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWg2xKRBV+rzz4amX4vMGeuyi
DenuCIsCkyxHtIcWx3+cXFaSHeKpWogjEJL0dVqb+YSwO1Pm38E2YSVpvTvnonxN
bVRrfmVXBZO+S5bUpvjUITijeKWYRd3alC3lRucMgaoD8RMG9+3iTXolQm45LFN6
xDMd2JzT2tEW4vQpyvJ48fJVz/ZfYRaxl05SMNhLz00+VV6CdvXYpaqivT7FpSb+
rxNvZ7Z9XOqTX0hBvhJNtEEyIXcqfZ5myyzFHivIRHEusfJXcITabVl6YyQWt/rw
XbaRnD0HGpkNsddUCs3y8yBAd4HKADCWN0r0pjzmg4Ya4BXEsvAtsdm2EjWZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUT/8vB/t7Oef6geHltzQoEizwt5AwHwYDVR0j
BBgwFoAUyBx7rc4cxQdcOY9qkb8px5udJBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDI2MGNmMTYtNzRmZi00ZjJmLWI1NmMtZTU4MWVhZWEyNTFjLzAvQzgxQzdCQURD
RTFDQzUwNzVDMzk4RjZBOTFCRjI5Qzc5QjlEMjQxOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DODFDN0JBRENFMUNDNTA3NUMzOThGNkE5MUJGMjlDNzlCOUQy
NDE5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAyNjBjZjE2LTc0ZmYtNGYyZi1i
NTZjLWU1ODFlYWVhMjUxYy8wLzMxMzAzMzJlMzYzODJlMzIzMTMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0TUMA0GCSqG
SIb3DQEBCwUAA4IBAQAQnFG9ivl+e5W6PUtgqQp82KmdP4DSUFZFLGyc5Z8N5TH0
5FRp86xW6PxDhkfdwX0z73vHM+PebVeLqcSf1Z12RwKuHiW9iMiI+aJR+cHG/cVD
mC88g5RxbyHm1vv0o88Oa/Qz/87eRiGqaTz3/nFr99NkyEqfsQFq4veWh7cQx/cK
EwDbUalVL30GhOplqQ476f3SgIs+5+dThogC7wL8OSoxFbA/rwTZlqXkfIW5NDc7
k4kJtWYHgBpD/lrPhAFrVyfXgL/al/B8ipEfDTbjosbLu+Q93nZtXbuFEI2wPZt+
v3kzGbFx9bEfJ2kdpfo7T6hDO67Dexvh/TApdzZB
-----END CERTIFICATE-----
Generated at Wed May 13 00:21:51 2026 by rpki-client