Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa
File:                     3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (raw, json)
Hash identifier:          z6kI94sxzHsqlH3E/LSFr36Xmy4KrSkD+IFv+WC4jTo=
Subject key identifier:   15:60:BE:D4:41:00:3B:EC:E9:98:A7:C2:69:AF:E3:77:30:36:B2:DE
Certificate issuer:       /CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB
Certificate serial:       4A8B884B0977E9C233FAB01FB11153A6B8D1B8DA
Authority key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa
Signing time:             Sun 03 May 2026 02:18:01 +0000
ROA not before:           Sun 03 May 2026 02:13:01 +0000
ROA not after:            Sun 02 May 2027 02:18:01 +0000
asID:                     150553
IP address blocks:        103.81.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl
                          rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8b:88:4b:09:77:e9:c2:33:fa:b0:1f:b1:11:53:a6:b8:d1:b8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB
        Validity
            Not Before: May  3 02:13:01 2026 GMT
            Not After : May  2 02:18:01 2027 GMT
        Subject: CN=1560BED441003BECE998A7C269AFE3773036B2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:51:15:9f:1c:58:ea:e3:5d:e4:94:d2:a0:
                    bd:26:72:09:ee:c3:90:06:27:f7:ca:04:30:b8:30:
                    8b:50:04:01:77:0f:15:90:1d:68:8f:42:d6:9b:bc:
                    7e:5d:d6:d2:b2:09:0a:05:41:b7:6a:a8:47:c1:b3:
                    26:a1:27:6a:f4:f9:3c:db:18:e3:ce:28:a6:00:89:
                    04:fa:10:f2:05:ec:c5:4d:10:d9:7f:64:bc:6f:42:
                    71:e8:07:62:3f:c9:f5:8d:69:21:9f:8c:b2:7b:26:
                    51:ae:17:7f:0c:a7:00:49:3d:3b:5d:d2:6c:0c:ea:
                    f7:00:3c:d9:6f:85:08:b7:b4:45:ff:a1:83:c3:ad:
                    ec:73:14:9b:ab:1b:36:f7:79:71:55:09:6e:4a:57:
                    37:04:1a:27:e0:74:7e:59:19:c5:3b:00:70:ff:26:
                    da:d7:6e:02:4d:01:da:bb:21:56:e3:f2:36:bc:21:
                    46:65:9c:c7:74:e6:b2:cc:d0:dc:10:84:c8:6f:9d:
                    6b:12:b3:6e:82:7e:e0:0c:8f:26:62:4c:5b:8d:83:
                    50:77:d1:f9:4a:54:8a:48:6a:e6:1e:53:cd:91:e9:
                    ea:8b:55:46:71:a6:79:34:09:09:b2:02:04:7c:b0:
                    3b:de:1f:cc:d0:f5:64:6f:3d:2e:0c:0b:64:7d:13:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:60:BE:D4:41:00:3B:EC:E9:98:A7:C2:69:AF:E3:77:30:36:B2:DE
            X509v3 Authority Key Identifier:
                keyid:05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:45:01:db:c4:25:3a:ab:ec:3d:1a:82:e9:be:12:49:ed:f6:
         d0:7d:27:db:28:78:ca:92:2f:9c:40:39:7f:17:99:ce:af:1d:
         cf:25:f0:c6:49:52:38:36:de:ba:2f:50:48:a5:2c:3f:93:bc:
         45:59:01:3c:7c:4f:9e:85:fe:79:d2:74:59:21:85:87:fa:f4:
         52:b5:52:7f:47:31:29:e8:24:e0:14:9d:20:65:2f:fa:d9:c4:
         3c:fa:db:b9:9e:e9:e4:5d:32:94:59:67:f1:77:62:08:3d:22:
         30:5b:fd:58:b9:a3:5e:2e:1f:f7:b6:fa:a9:ca:95:6a:f8:e8:
         30:dc:ad:7d:aa:ab:36:da:45:88:c1:75:e5:37:6c:60:3e:91:
         8c:2c:e2:37:f9:06:d3:d4:d2:23:23:0e:a8:28:7b:0a:a7:fc:
         6c:1a:09:4c:ec:b1:16:9a:0a:73:72:12:50:77:ca:0b:db:9a:
         b8:63:47:6a:97:4d:1b:32:fc:97:a5:0f:ac:07:01:61:d1:7a:
         1a:80:55:02:14:7c:03:c3:d5:dc:f1:d9:3f:78:81:78:80:19:
         7b:19:54:f5:6e:81:87:c0:2d:12:81:46:ac:da:17:6e:d2:50:
         68:17:a2:e2:94:9e:f9:dc:4a:06:eb:9b:4f:32:da:6e:62:ee:
         bd:81:63:fb
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSouISwl36cIz+rAfsRFTprjRuNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNBODYy
QTJCMjBFQjAeFw0yNjA1MDMwMjEzMDFaFw0yNzA1MDIwMjE4MDFaMDMxMTAvBgNV
BAMTKDE1NjBCRUQ0NDEwMDNCRUNFOTk4QTdDMjY5QUZFMzc3MzAzNkIyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GFEVnxxY6uNd5JTSoL0mcgnu
w5AGJ/fKBDC4MItQBAF3DxWQHWiPQtabvH5d1tKyCQoFQbdqqEfBsyahJ2r0+Tzb
GOPOKKYAiQT6EPIF7MVNENl/ZLxvQnHoB2I/yfWNaSGfjLJ7JlGuF38MpwBJPTtd
0mwM6vcAPNlvhQi3tEX/oYPDrexzFJurGzb3eXFVCW5KVzcEGifgdH5ZGcU7AHD/
JtrXbgJNAdq7IVbj8ja8IUZlnMd05rLM0NwQhMhvnWsSs26CfuAMjyZiTFuNg1B3
0flKVIpIauYeU82R6eqLVUZxpnk0CQmyAgR8sDveH8zQ9WRvPS4MC2R9E4sxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFWC+1EEAO+zpmKfCaa/jdzA2st4wHwYDVR0j
BBgwFoAUBc+eFhfs+L4C8v36J/E6hiorIOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWRmZDQyMzQtMTMyMy00ZjBlLWI2ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYx
N0VDRjhCRTAyRjJGREZBMjdGMTNBODYyQTJCMjBFQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNUNGOUUxNjE3RUNGOEJFMDJGMkZERkEyN0YxM0E4NjJBMkIy
MEVCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZmQ0MjM0LTEzMjMtNGYwZS1i
Njg2LTFkNzJhY2I4ODAyOS8wLzMxMzAzMzJlMzgzMTJlMzIzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1H/MA0GCSqG
SIb3DQEBCwUAA4IBAQBURQHbxCU6q+w9GoLpvhJJ7fbQfSfbKHjKki+cQDl/F5nO
rx3PJfDGSVI4Nt66L1BIpSw/k7xFWQE8fE+ehf550nRZIYWH+vRStVJ/RzEp6CTg
FJ0gZS/62cQ8+tu5nunkXTKUWWfxd2IIPSIwW/1YuaNeLh/3tvqpypVq+Ogw3K19
qqs22kWIwXXlN2xgPpGMLOI3+QbT1NIjIw6oKHsKp/xsGglM7LEWmgpzchJQd8oL
25q4Y0dql00bMvyXpQ+sBwFh0XoagFUCFHwDw9Xc8dk/eIF4gBl7GVT1boGHwC0S
gUas2hdu0lBoF6LilJ753EoG65tPMtpuYu69gWP7
-----END CERTIFICATE-----
Generated at Wed May 13 03:23:31 2026 by rpki-client