Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa
File:                     3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (raw, json)
Hash identifier:          JJ0XYEWJnNqenm3YM5YcUAhKtM46eIeZHpKCM2PFMYk=
Subject key identifier:   79:35:46:20:84:DD:1B:0D:DB:0F:BA:24:26:47:42:81:27:96:BD:C6
Certificate issuer:       /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1
Certificate serial:       0236BB5A7F5CB615F822C9A01B7C6C029964F01C
Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa
Signing time:             Sun 03 May 2026 02:19:08 +0000
ROA not before:           Sun 03 May 2026 02:14:08 +0000
ROA not after:            Sun 02 May 2027 02:19:08 +0000
asID:                     45718
IP address blocks:        103.31.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl
                          rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:36:bb:5a:7f:5c:b6:15:f8:22:c9:a0:1b:7c:6c:02:99:64:f0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1
        Validity
            Not Before: May  3 02:14:08 2026 GMT
            Not After : May  2 02:19:08 2027 GMT
        Subject: CN=7935462084DD1B0DDB0FBA24264742812796BDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:64:cb:8e:b2:87:5a:52:4d:0b:29:20:60:
                    9c:98:4b:35:15:fe:5f:4c:fc:a7:24:f1:ee:5d:85:
                    d0:53:94:d0:c0:dd:2c:d0:6e:2c:a7:5e:a1:6b:88:
                    90:f5:d3:3d:2a:9d:cc:24:2c:6c:d8:be:16:12:de:
                    74:b0:f2:8f:7d:3a:32:c9:70:64:d9:fc:96:f2:dd:
                    3a:d2:28:da:2a:22:1c:dc:58:54:ee:02:c6:9b:df:
                    f3:43:15:2d:ca:53:38:04:0f:02:86:65:99:fe:1a:
                    ab:32:42:ad:7c:ef:c1:cf:d2:09:b9:b3:a6:90:d9:
                    c5:cb:96:d7:a0:96:77:29:c6:2c:06:90:e9:4b:f8:
                    bc:64:99:e8:90:ec:d6:55:a5:4a:38:4d:a3:51:ce:
                    11:ad:67:68:18:6c:a6:52:13:67:a4:76:71:61:c3:
                    00:98:24:8d:75:ec:d0:c1:2d:37:0d:bd:b3:35:3d:
                    96:93:a6:0c:95:72:a6:90:19:bd:9b:7d:f5:e5:20:
                    c4:d7:92:a3:01:4d:c2:9b:b0:6d:33:58:70:9c:be:
                    05:8e:70:95:7b:d0:1f:04:92:65:a2:57:58:66:5a:
                    33:d2:cc:dd:e4:b0:06:c7:68:50:12:a8:9f:bb:71:
                    21:c5:f4:70:d5:4e:a3:b2:52:21:18:ba:24:1e:30:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:35:46:20:84:DD:1B:0D:DB:0F:BA:24:26:47:42:81:27:96:BD:C6
            X509v3 Authority Key Identifier:
                keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:bd:32:6f:33:a4:73:4a:e2:1a:be:eb:75:56:6e:3f:dd:cc:
         73:88:37:0b:a5:9f:17:c5:a6:79:67:da:69:54:6e:d5:59:33:
         cc:16:b1:84:8d:ff:11:a4:cb:ea:0b:51:0a:7c:f5:aa:0e:be:
         c5:f3:0a:7e:86:e7:1f:3e:9d:58:09:7d:9c:97:f3:7e:9a:41:
         0d:b9:03:0b:d7:e0:bc:b4:5d:2a:6f:cd:48:96:ef:1f:6d:f6:
         89:2c:ca:e6:7b:ed:e4:1c:fa:e0:db:f2:11:92:75:67:03:f9:
         f9:ae:c3:b3:dc:f4:77:61:f8:39:4a:e0:24:31:74:7e:91:c1:
         e2:07:9f:31:8a:f1:76:90:cf:c3:8b:43:0b:6a:2b:c2:10:13:
         28:8f:c6:87:82:1b:3b:eb:aa:f9:36:e1:b1:81:b5:07:ce:68:
         f6:eb:c3:e4:6d:91:c3:6e:08:34:6b:de:2a:9b:3a:9b:60:f8:
         bc:fb:08:e2:87:c1:6b:95:12:04:15:79:63:fd:a7:a1:1b:15:
         91:bf:a9:ac:54:13:31:b7:e0:75:41:56:b1:a6:f4:51:55:4a:
         5b:0a:a9:d2:75:d4:41:86:10:07:18:41:af:bc:bd:e1:a5:5d:
         c2:94:fa:1b:c6:d7:41:c2:34:a0:63:c4:37:49:6d:a4:51:e7:
         6c:34:f9:46
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAja7Wn9cthX4IsmgG3xsAplk8BwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1
NENCRTlGMTAeFw0yNjA1MDMwMjE0MDhaFw0yNzA1MDIwMjE5MDhaMDMxMTAvBgNV
BAMTKDc5MzU0NjIwODRERDFCMEREQjBGQkEyNDI2NDc0MjgxMjc5NkJEQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bmTLjrKHWlJNCykgYJyYSzUV
/l9M/Kck8e5dhdBTlNDA3SzQbiynXqFriJD10z0qncwkLGzYvhYS3nSw8o99OjLJ
cGTZ/Jby3TrSKNoqIhzcWFTuAsab3/NDFS3KUzgEDwKGZZn+GqsyQq1878HP0gm5
s6aQ2cXLlteglncpxiwGkOlL+LxkmeiQ7NZVpUo4TaNRzhGtZ2gYbKZSE2ekdnFh
wwCYJI117NDBLTcNvbM1PZaTpgyVcqaQGb2bffXlIMTXkqMBTcKbsG0zWHCcvgWO
cJV70B8EkmWiV1hmWjPSzN3ksAbHaFASqJ+7cSHF9HDVTqOyUiEYuiQeMBx1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUeTVGIITdGw3bD7okJkdCgSeWvcYwHwYDVR0j
BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3
QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF
OUYxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwNDljMjEwLWYzNjUtNDMyZi1h
N2NhLTBiNWViODZiMDFjNi8wLzMxMzAzMzJlMzMzMTJlMzIzMDM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNTM3MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcfzDANBgkqhkiG
9w0BAQsFAAOCAQEAy70ybzOkc0riGr7rdVZuP93Mc4g3C6WfF8WmeWfaaVRu1Vkz
zBaxhI3/EaTL6gtRCnz1qg6+xfMKfobnHz6dWAl9nJfzfppBDbkDC9fgvLRdKm/N
SJbvH232iSzK5nvt5Bz64NvyEZJ1ZwP5+a7Ds9z0d2H4OUrgJDF0fpHB4gefMYrx
dpDPw4tDC2orwhATKI/Gh4IbO+uq+TbhsYG1B85o9uvD5G2Rw24INGveKps6m2D4
vPsI4ofBa5USBBV5Y/2noRsVkb+prFQTMbfgdUFWsab0UVVKWwqp0nXUQYYQBxhB
r7y94aVdwpT6G8bXQcI0oGPEN0ltpFHnbDT5Rg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:13:38 2026 by rpki-client