Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa
File:                     3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa (raw, json)
Hash identifier:          eGIvYDK8j1a468VtNW5nDUnb23Eu4VoycgMpA7/Jmsk=
Subject key identifier:   41:01:FE:F8:A7:C9:03:FD:78:04:01:4F:C0:9A:0C:35:45:21:9A:EE
Certificate issuer:       /CN=6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD
Certificate serial:       03EB8B98B26D0AB8461BF62CC33D5B86FF62AD4C
Authority key identifier: 6F:52:B6:F5:7C:8A:41:C8:D4:72:9A:32:13:AC:A8:CD:7F:6F:41:FD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa
Signing time:             Sun 03 May 2026 02:12:44 +0000
ROA not before:           Sun 03 May 2026 02:07:44 +0000
ROA not after:            Sun 02 May 2027 02:12:44 +0000
asID:                     150494
IP address blocks:        103.120.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.crl
                          rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:eb:8b:98:b2:6d:0a:b8:46:1b:f6:2c:c3:3d:5b:86:ff:62:ad:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD
        Validity
            Not Before: May  3 02:07:44 2026 GMT
            Not After : May  2 02:12:44 2027 GMT
        Subject: CN=4101FEF8A7C903FD7804014FC09A0C3545219AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:1c:0b:7a:c7:0d:70:10:97:4e:7c:31:08:
                    d7:82:32:d4:8a:9a:d0:cf:df:b5:ac:1b:e5:59:8b:
                    6c:8f:0e:ab:9d:41:8c:61:c3:98:b1:2e:d8:94:df:
                    3c:a8:02:64:94:b0:ca:79:a0:c9:dd:98:5f:c9:7a:
                    6d:ad:1a:23:06:bf:ce:db:03:24:17:15:90:e6:62:
                    fa:46:b2:ee:5c:2a:10:6c:5b:08:46:47:8f:bf:c9:
                    7a:15:2f:3b:c2:1e:12:b2:04:fc:1f:ba:f2:5e:e1:
                    0e:b6:6b:f6:a2:f2:c1:08:9c:3b:71:ce:75:9c:03:
                    27:84:c6:99:65:7d:87:0c:eb:3b:bf:05:0d:90:8e:
                    ea:c0:9f:40:7a:f6:0d:b3:2c:5d:fa:14:8d:94:86:
                    4e:7e:11:0e:c9:45:e9:3f:ab:83:0d:e5:f5:90:8d:
                    a5:5a:af:9f:80:69:91:70:e5:7c:f6:e5:f9:e3:df:
                    cd:6f:b2:58:9d:5e:70:98:02:60:66:49:9e:ce:2e:
                    e8:b4:ca:b8:85:80:d3:1b:f0:37:65:e8:b7:43:35:
                    6a:00:ca:e9:1a:3a:41:ec:2f:ce:f6:63:b4:8e:41:
                    c3:58:51:40:6b:4f:2b:42:b0:5a:20:96:07:57:74:
                    8f:d5:c6:06:54:7e:73:19:d0:f5:77:27:74:41:1e:
                    ba:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:01:FE:F8:A7:C9:03:FD:78:04:01:4F:C0:9A:0C:35:45:21:9A:EE
            X509v3 Authority Key Identifier:
                keyid:6F:52:B6:F5:7C:8A:41:C8:D4:72:9A:32:13:AC:A8:CD:7F:6F:41:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:6a:90:12:1b:d2:92:84:72:b4:49:38:90:5a:e8:2d:88:
         cd:f8:8b:73:30:7a:4c:ab:34:c0:f3:b1:8b:73:a4:1c:ba:78:
         1d:c4:0c:05:18:a3:78:2e:58:1a:ea:d9:8d:2f:bf:89:15:1d:
         aa:2c:9f:9a:9c:ab:0a:6a:24:70:b6:5e:d0:e5:34:0b:70:f8:
         56:61:5e:fd:25:10:64:02:79:08:3b:b1:b7:b9:8f:6d:6e:59:
         e9:29:5a:c4:f2:27:5f:c2:b1:51:eb:18:bf:87:1e:82:ba:26:
         6e:20:0b:df:ca:b3:60:7a:95:f1:e0:1b:ee:ec:8b:7d:25:6a:
         0a:e1:d8:11:88:0b:97:89:df:c9:a8:a5:10:da:3f:7e:9a:41:
         ea:6d:26:ba:39:9e:7d:00:37:29:8a:4d:18:2a:47:85:ce:6e:
         9e:4f:14:03:b8:52:9b:e1:88:f7:e0:ea:fe:8f:f8:cc:e9:98:
         aa:6f:dd:a4:41:c9:ff:3e:94:40:33:7c:d4:85:a9:d8:17:34:
         4b:89:91:bd:45:9b:85:a9:c1:6f:46:58:09:4d:65:b4:47:d6:
         48:78:58:05:59:32:52:1a:f1:c1:8f:b1:55:80:05:76:9d:da:
         39:ca:59:9e:b5:6c:57:1e:b4:47:8c:6b:92:47:02:44:f9:5c:
         32:f5:1a:7e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUA+uLmLJtCrhGG/Yswz1bhv9irUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY1MkI2RjU3QzhBNDFDOEQ0NzI5QTMyMTNBQ0E4Q0Q3
RjZGNDFGRDAeFw0yNjA1MDMwMjA3NDRaFw0yNzA1MDIwMjEyNDRaMDMxMTAvBgNV
BAMTKDQxMDFGRUY4QTdDOTAzRkQ3ODA0MDE0RkMwOUEwQzM1NDUyMTlBRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21RwLescNcBCXTnwxCNeCMtSK
mtDP37WsG+VZi2yPDqudQYxhw5ixLtiU3zyoAmSUsMp5oMndmF/Jem2tGiMGv87b
AyQXFZDmYvpGsu5cKhBsWwhGR4+/yXoVLzvCHhKyBPwfuvJe4Q62a/ai8sEInDtx
znWcAyeExpllfYcM6zu/BQ2QjurAn0B69g2zLF36FI2Uhk5+EQ7JRek/q4MN5fWQ
jaVar5+AaZFw5Xz25fnj381vslidXnCYAmBmSZ7OLui0yriFgNMb8Ddl6LdDNWoA
yukaOkHsL872Y7SOQcNYUUBrTytCsFoglgdXdI/VxgZUfnMZ0PV3J3RBHrrNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUQQH++KfJA/14BAFPwJoMNUUhmu4wHwYDVR0j
BBgwFoAUb1K29XyKQcjUcpoyE6yozX9vQf0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGJiOGU2MTItN2JiMy00OGRlLTk2OWQtNzFiNDVmNDZhMTYxLzEvNkY1MkI2RjU3
QzhBNDFDOEQ0NzI5QTMyMTNBQ0E4Q0Q3RjZGNDFGRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RjUyQjZGNTdDOEE0MUM4RDQ3MjlBMzIxM0FDQThDRDdGNkY0
MUZELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBiYjhlNjEyLTdiYjMtNDhkZS05
NjlkLTcxYjQ1ZjQ2YTE2MS8xLzMxMzAzMzJlMzEzMjMwMmUzNDMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3goMA0GCSqG
SIb3DQEBCwUAA4IBAQB2s2qQEhvSkoRytEk4kFroLYjN+ItzMHpMqzTA87GLc6Qc
ungdxAwFGKN4Llga6tmNL7+JFR2qLJ+anKsKaiRwtl7Q5TQLcPhWYV79JRBkAnkI
O7G3uY9tblnpKVrE8idfwrFR6xi/hx6CuiZuIAvfyrNgepXx4Bvu7It9JWoK4dgR
iAuXid/JqKUQ2j9+mkHqbSa6OZ59ADcpik0YKkeFzm6eTxQDuFKb4Yj34Or+j/jM
6Ziqb92kQcn/PpRAM3zUhanYFzRLiZG9RZuFqcFvRlgJTWW0R9ZIeFgFWTJSGvHB
j7FVgAV2ndo5ylmetWxXHrRHjGuSRwJE+Vwy9Rp+
-----END CERTIFICATE-----
Generated at Wed May 13 06:55:39 2026 by rpki-client