Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36392e302f32342d3234203d3e20313530323730.roa
File:                     3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (raw, json)
Hash identifier:          7b9mH0AqpbaWOjZuhqAUMtLrNThijZIRNrCRnrYSzNM=
Subject key identifier:   64:7D:78:23:78:46:2A:32:6E:35:86:10:53:10:ED:A2:20:EA:A9:59
Certificate issuer:       /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4
Certificate serial:       33EF75AB5DABD4CDEDAAD33F8C41B6150D2637B4
Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36392e302f32342d3234203d3e20313530323730.roa
Signing time:             Sun 03 May 2026 02:19:45 +0000
ROA not before:           Sun 03 May 2026 02:14:45 +0000
ROA not after:            Sun 02 May 2027 02:19:45 +0000
asID:                     150270
IP address blocks:        103.39.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl
                          rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ef:75:ab:5d:ab:d4:cd:ed:aa:d3:3f:8c:41:b6:15:0d:26:37:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4
        Validity
            Not Before: May  3 02:14:45 2026 GMT
            Not After : May  2 02:19:45 2027 GMT
        Subject: CN=647D782378462A326E3586105310EDA220EAA959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:bd:d8:a3:26:86:a4:4f:ef:db:06:45:6c:
                    87:6b:2b:49:10:fa:85:39:ba:6b:f4:47:19:74:31:
                    3a:c3:0c:3d:71:ea:cf:b4:11:62:fd:09:23:e3:dc:
                    40:24:de:93:e9:1a:cd:82:0b:c1:30:24:31:19:75:
                    8a:a5:8d:b4:61:3d:10:77:d0:be:95:5b:c8:18:b1:
                    9e:aa:ea:17:4d:45:d5:2e:4a:89:e1:64:fb:a0:f9:
                    db:3d:64:71:67:ef:65:f5:37:37:a6:68:ac:c1:cf:
                    f4:c9:07:e2:d3:d4:7b:c7:eb:95:33:ed:ee:47:9c:
                    36:f0:1b:98:a1:b2:11:de:f2:28:72:09:34:c7:51:
                    15:35:1c:55:1f:55:03:18:3d:22:75:6c:ce:0f:77:
                    e7:b9:7b:fa:32:53:4d:77:23:d9:43:e4:b3:cc:b6:
                    17:f6:30:ba:2f:f9:06:b6:83:03:4c:44:3e:7a:19:
                    24:d1:5b:02:92:ab:ff:d9:d0:9a:c4:3d:31:58:68:
                    d8:8a:57:05:fa:1d:97:5f:f4:00:d5:5e:1d:3a:e5:
                    0d:db:25:73:71:43:3b:ce:5f:9c:77:96:fb:a5:29:
                    fe:c0:9f:29:0f:36:9e:54:06:3b:27:f2:7b:bc:97:
                    a7:af:c5:fa:8e:bd:f3:63:fb:dd:42:d7:24:24:22:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7D:78:23:78:46:2A:32:6E:35:86:10:53:10:ED:A2:20:EA:A9:59
            X509v3 Authority Key Identifier:
                keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36392e302f32342d3234203d3e20313530323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:82:18:1a:a0:13:43:c5:e4:a3:94:3e:77:af:ed:b6:8d:2c:
         bc:d2:1c:8b:6e:4e:78:28:22:1b:63:94:9e:38:a5:58:93:2a:
         21:47:bd:77:8d:11:a0:0a:27:e1:cd:5f:dc:87:80:ba:2f:f2:
         db:1a:7a:a5:00:f2:07:40:43:cf:9f:17:d5:48:79:57:e2:28:
         9e:a1:71:ad:c2:c7:74:e0:22:6f:53:c5:72:55:ad:07:4f:7c:
         22:cc:ac:98:17:30:5a:22:e9:e4:bf:b5:82:11:4a:4d:ef:ba:
         82:0f:76:e2:49:1b:d9:a4:51:e9:1e:9c:29:bb:00:d8:2e:0e:
         a2:0f:2d:4f:53:f7:4d:0e:29:6e:04:96:a5:4b:39:fc:22:b2:
         dc:8e:84:99:7d:65:80:8f:53:89:f5:a3:5f:37:a9:f1:c5:5c:
         5b:10:ed:2a:8c:f7:41:fe:25:46:e0:dc:61:c6:5f:91:7d:26:
         09:e0:cf:53:12:0b:f9:09:f2:a4:62:11:ac:ac:aa:10:15:44:
         2e:d4:d0:51:67:79:95:11:5b:64:4d:7b:38:fb:9c:ec:e9:0b:
         25:47:60:54:a9:07:78:c4:78:a7:11:77:b8:ad:32:5a:2a:a6:
         21:f5:6c:46:f9:30:44:2c:e2:3a:c0:31:00:bd:9e:57:1c:1d:
         d5:dd:cb:1e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUM+91q12r1M3tqtM/jEG2FQ0mN7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE
MDYxRDlBNDAeFw0yNjA1MDMwMjE0NDVaFw0yNzA1MDIwMjE5NDVaMDMxMTAvBgNV
BAMTKDY0N0Q3ODIzNzg0NjJBMzI2RTM1ODYxMDUzMTBFREEyMjBFQUE5NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2b3YoyaGpE/v2wZFbIdrK0kQ
+oU5umv0Rxl0MTrDDD1x6s+0EWL9CSPj3EAk3pPpGs2CC8EwJDEZdYqljbRhPRB3
0L6VW8gYsZ6q6hdNRdUuSonhZPug+ds9ZHFn72X1NzemaKzBz/TJB+LT1HvH65Uz
7e5HnDbwG5ihshHe8ihyCTTHURU1HFUfVQMYPSJ1bM4Pd+e5e/oyU013I9lD5LPM
thf2MLov+Qa2gwNMRD56GSTRWwKSq//Z0JrEPTFYaNiKVwX6HZdf9ADVXh065Q3b
JXNxQzvOX5x3lvulKf7AnykPNp5UBjsn8nu8l6evxfqOvfNj+91C1yQkIqPvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUZH14I3hGKjJuNYYQUxDtoiDqqVkwHwYDVR0j
BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz
MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE
OUE0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMjZiZTdiLTJlMjgtNDk1MC1h
YTRjLTIxODVlNjQ3ZGIzZi8wLzMxMzAzMzJlMzMzOTJlMzYzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcnRTANBgkqhkiG
9w0BAQsFAAOCAQEAroIYGqATQ8Xko5Q+d6/tto0svNIci25OeCgiG2OUnjilWJMq
IUe9d40RoAon4c1f3IeAui/y2xp6pQDyB0BDz58X1Uh5V+IonqFxrcLHdOAib1PF
clWtB098IsysmBcwWiLp5L+1ghFKTe+6gg924kkb2aRR6R6cKbsA2C4Oog8tT1P3
TQ4pbgSWpUs5/CKy3I6EmX1lgI9TifWjXzep8cVcWxDtKoz3Qf4lRuDcYcZfkX0m
CeDPUxIL+QnypGIRrKyqEBVELtTQUWd5lRFbZE17OPuc7OkLJUdgVKkHeMR4pxF3
uK0yWiqmIfVsRvkwRCziOsAxAL2eVxwd1d3LHg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:41 2026 by rpki-client