Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32342d3234203d3e203539323733.roa
File:                     3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          2bDh3pCy+uB3wKVcO30FUZoEqtx5NRujKUHG722pPa4=
Subject key identifier:   1A:D3:56:4D:AD:8D:43:96:25:54:9E:BE:8F:36:31:08:C8:05:45:25
Certificate issuer:       /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
Certificate serial:       657CD300BB812B4E0D34F59B0013F9E3BD91A2B3
Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32342d3234203d3e203539323733.roa
Signing time:             Sun 03 May 2026 02:11:30 +0000
ROA not before:           Sun 03 May 2026 02:06:30 +0000
ROA not after:            Sun 02 May 2027 02:11:30 +0000
asID:                     59273
IP address blocks:        103.226.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl
                          rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7c:d3:00:bb:81:2b:4e:0d:34:f5:9b:00:13:f9:e3:bd:91:a2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
        Validity
            Not Before: May  3 02:06:30 2026 GMT
            Not After : May  2 02:11:30 2027 GMT
        Subject: CN=1AD3564DAD8D439625549EBE8F363108C8054525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:db:36:08:88:b4:e2:2c:b2:7d:f6:45:9a:71:
                    20:08:27:c0:a9:ba:70:4c:c0:f9:70:26:a9:1f:9c:
                    de:45:60:d5:57:8d:0e:70:51:93:b0:8b:6c:6b:72:
                    ba:bf:a3:2a:2c:d8:1a:94:c3:cb:60:35:ea:c3:42:
                    58:81:63:94:0d:75:96:6c:de:11:e6:59:9d:49:ef:
                    33:a4:9c:01:6b:b4:af:b0:09:3a:54:a8:0e:de:7f:
                    fd:9a:b2:5a:4b:ec:fa:e2:e1:9e:ca:94:3f:56:fb:
                    67:56:2f:2d:9c:34:bd:89:2b:89:fa:0e:e0:72:bb:
                    87:5e:c9:f4:e8:91:09:7b:cd:b6:1a:49:f1:6d:f0:
                    c0:94:57:11:7e:d3:6a:93:3f:5a:13:65:b3:38:1d:
                    5a:3f:41:c7:0e:08:9a:85:d1:69:f6:90:46:41:a9:
                    2b:dd:63:6a:24:b4:28:9d:4e:7d:69:16:c7:43:af:
                    8b:45:9c:05:9a:63:92:a6:24:8f:14:96:eb:d7:fb:
                    e9:ca:09:95:4c:eb:60:13:3f:e6:37:c2:82:5b:be:
                    05:94:5e:27:50:5b:db:9e:51:3a:2e:60:b2:58:dc:
                    8e:b8:84:38:f1:91:da:57:95:9f:d6:61:9a:72:6a:
                    b2:fa:bc:7b:d6:59:b5:98:1b:4f:12:4e:0a:4f:37:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D3:56:4D:AD:8D:43:96:25:54:9E:BE:8F:36:31:08:C8:05:45:25
            X509v3 Authority Key Identifier:
                keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:87:51:32:b5:88:c3:62:b1:9d:d7:89:39:99:8a:e7:8d:9a:
         ff:52:55:39:88:5d:2e:c7:29:d9:94:85:62:6f:6e:fe:20:f0:
         bc:d6:4e:06:8b:7c:6d:58:61:02:68:dd:79:85:f5:c6:2b:39:
         34:9d:de:0c:39:43:1f:37:a3:b3:0c:13:cb:24:de:f9:a4:27:
         9b:0d:cf:68:97:f3:4a:ce:27:5f:d1:c2:d3:70:1d:28:be:14:
         21:22:47:43:4e:5b:58:44:d3:1d:3b:3d:f6:78:b7:2e:41:64:
         d6:8c:88:00:0b:84:06:4b:e3:6b:37:c5:52:a9:c3:4e:d1:06:
         39:f4:12:74:60:96:0d:ad:a4:ca:48:93:7d:0e:eb:58:6a:eb:
         47:c2:6a:bb:cb:c7:fb:59:d4:70:82:a4:71:8d:aa:fc:3e:77:
         3b:e9:4a:7b:90:bc:ee:5f:68:b1:f7:23:c2:32:9f:2c:0b:24:
         82:7a:ef:df:07:9d:cb:52:19:da:ec:79:fe:69:a8:0e:f6:45:
         23:fe:01:72:5e:55:59:c2:a2:f0:de:c1:29:5e:d4:93:ef:49:
         31:91:ee:1c:42:1c:91:9f:73:b4:8f:71:84:d2:1b:95:ae:ff:
         90:ab:c6:d8:1b:16:bf:73:8c:c5:ee:30:da:6b:46:ee:2d:ed:
         d8:89:6e:fe
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZXzTALuBK04NNPWbABP5472RorMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQxQUQw
NEFERjE3OTAeFw0yNjA1MDMwMjA2MzBaFw0yNzA1MDIwMjExMzBaMDMxMTAvBgNV
BAMTKDFBRDM1NjREQUQ4RDQzOTYyNTU0OUVCRThGMzYzMTA4QzgwNTQ1MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa2zYIiLTiLLJ99kWacSAIJ8Cp
unBMwPlwJqkfnN5FYNVXjQ5wUZOwi2xrcrq/oyos2BqUw8tgNerDQliBY5QNdZZs
3hHmWZ1J7zOknAFrtK+wCTpUqA7ef/2aslpL7Pri4Z7KlD9W+2dWLy2cNL2JK4n6
DuByu4deyfTokQl7zbYaSfFt8MCUVxF+02qTP1oTZbM4HVo/QccOCJqF0Wn2kEZB
qSvdY2oktCidTn1pFsdDr4tFnAWaY5KmJI8UluvX++nKCZVM62ATP+Y3woJbvgWU
XidQW9ueUTouYLJY3I64hDjxkdpXlZ/WYZpyarL6vHvWWbWYG08STgpPN31RAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGtNWTa2NQ5YlVJ6+jzYxCMgFRSUwHwYDVR0j
BBgwFoAU2226NGqPgj6mI/1RYE3RrQSt8XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDYwY2U3MzMtNzdmNC00ZTFkLWI1ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2
QThGODIzRUE2MjNGRDUxNjA0REQxQUQwNEFERjE3OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQjZEQkEzNDZBOEY4MjNFQTYyM0ZENTE2MDRERDFBRDA0QURG
MTc5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2MGNlNzMzLTc3ZjQtNGUxZC1i
NWVjLTYxZWRlNGRhMDc0ZC8wLzMxMzAzMzJlMzIzMjM2MmUzNDM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzOTMyMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfiMDANBgkqhkiG
9w0BAQsFAAOCAQEAs4dRMrWIw2KxndeJOZmK542a/1JVOYhdLscp2ZSFYm9u/iDw
vNZOBot8bVhhAmjdeYX1xis5NJ3eDDlDHzejswwTyyTe+aQnmw3PaJfzSs4nX9HC
03AdKL4UISJHQ05bWETTHTs99ni3LkFk1oyIAAuEBkvjazfFUqnDTtEGOfQSdGCW
Da2kykiTfQ7rWGrrR8Jqu8vH+1nUcIKkcY2q/D53O+lKe5C87l9osfcjwjKfLAsk
gnrv3wedy1IZ2ux5/mmoDvZFI/4Bcl5VWcKi8N7BKV7Uk+9JMZHuHEIckZ9ztI9x
hNIbla7/kKvG2BsWv3OMxe4w2mtG7i3t2Ilu/g==
-----END CERTIFICATE-----
Generated at Wed May 13 00:27:43 2026 by rpki-client