Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/3131372e3130332e36342e302f32332d3234203d3e203535363935.roa
File:                     3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (raw, json)
Hash identifier:          nlEA9xUBNBAj9ND4TVjIFUzBFmwE5L2VS2arw13QDV8=
Subject key identifier:   F4:7F:15:FE:C0:57:7C:C5:1A:BC:FA:8D:4C:1D:00:28:95:72:27:66
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       1D21AE74167C88E97209054DB8427BEEAAF41229
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/3131372e3130332e36342e302f32332d3234203d3e203535363935.roa
Signing time:             Sun 03 May 2026 02:19:48 +0000
ROA not before:           Sun 03 May 2026 02:14:48 +0000
ROA not after:            Sun 02 May 2027 02:19:48 +0000
asID:                     55695
IP address blocks:        117.103.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:21:ae:74:16:7c:88:e9:72:09:05:4d:b8:42:7b:ee:aa:f4:12:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: May  3 02:14:48 2026 GMT
            Not After : May  2 02:19:48 2027 GMT
        Subject: CN=F47F15FEC0577CC51ABCFA8D4C1D002895722766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:b0:b8:70:01:cb:c6:87:c5:0d:8f:c9:dd:
                    f1:8e:db:62:10:36:61:24:93:ee:d0:4d:3f:33:0f:
                    f2:be:b4:bc:6d:b5:d6:4e:11:57:67:3c:08:46:1f:
                    66:c5:d0:8e:b4:bd:f2:ea:21:60:70:ac:24:97:ba:
                    41:25:41:76:a8:3f:20:11:cf:49:2f:d5:a7:ee:79:
                    bc:19:bb:cb:a9:66:85:38:3c:e2:16:77:00:ef:03:
                    68:33:ea:fc:f2:84:58:2e:9c:b4:80:0b:af:80:58:
                    08:a0:d1:3d:1e:d6:45:83:d8:c0:f8:1a:77:78:d8:
                    3c:ef:de:05:d5:bb:0e:a3:5c:0a:4a:eb:5f:8d:33:
                    12:62:0f:80:2c:59:25:c8:cd:e2:b9:40:be:1c:a9:
                    e6:15:8d:74:1b:41:f9:6c:3b:81:76:56:55:ab:cc:
                    5e:09:37:83:95:42:e3:12:89:76:73:ff:bd:33:6e:
                    a2:ac:98:4d:8d:23:d0:21:b8:b2:e5:33:b6:7e:b7:
                    ee:9a:6b:5e:e1:58:56:96:42:23:3a:c3:a8:40:3d:
                    4d:ab:86:a7:8d:3b:96:ce:29:ec:b5:57:48:b9:4b:
                    e8:98:1b:39:f2:00:e2:98:e1:e3:91:0d:00:d9:a4:
                    67:54:7f:e2:47:5d:b2:00:29:7b:32:71:20:17:1c:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:15:FE:C0:57:7C:C5:1A:BC:FA:8D:4C:1D:00:28:95:72:27:66
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/3131372e3130332e36342e302f32332d3234203d3e203535363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:c9:e7:ca:0c:9b:42:28:3e:f7:90:24:4c:ac:bf:7b:36:fb:
         2c:03:43:8e:b4:35:6e:50:20:6a:76:e5:5c:16:f4:46:4e:32:
         2c:81:3b:06:bf:49:fe:f8:25:30:96:76:7a:eb:39:8d:30:c4:
         8d:88:f8:00:8a:b5:42:07:04:1e:77:b0:af:6e:a6:88:16:c6:
         ef:a4:23:ee:65:e3:9f:27:85:7a:60:27:0b:1f:0c:33:c9:a0:
         67:85:dd:31:e2:91:68:dc:87:ba:a4:ae:12:b7:17:d7:ef:8b:
         d1:f9:96:3e:6c:57:ed:a2:29:ca:f2:5a:78:3f:aa:d2:e8:d2:
         dd:79:01:7b:ee:18:b5:ed:39:a3:14:0e:c8:a5:0b:11:77:21:
         0a:2e:fb:2b:84:1d:8e:94:11:88:0e:5b:74:39:bc:0c:40:02:
         65:20:37:14:fa:d2:8e:b2:00:d3:af:35:dd:08:19:55:60:ad:
         cc:59:6c:ae:10:68:49:d3:85:ba:2c:cd:75:c4:e8:3a:05:ed:
         5d:c4:54:cd:6c:5c:7c:e5:47:f3:58:9f:c9:e0:5d:b1:59:b3:
         c4:ab:12:1a:d6:dc:fc:8a:b2:1c:cb:a2:85:f8:cb:81:1c:2d:
         06:a3:e2:3d:c4:63:66:d3:3d:0f:ca:ac:f6:c9:bb:3e:95:f8:
         6e:49:3e:3e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHSGudBZ8iOlyCQVNuEJ77qr0EikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU2QTVGMEU0REQ3QzIxMzgwMDMzNjNBMUEzMzFFRkQ0
MzMwQUVCOTAeFw0yNjA1MDMwMjE0NDhaFw0yNzA1MDIwMjE5NDhaMDMxMTAvBgNV
BAMTKEY0N0YxNUZFQzA1NzdDQzUxQUJDRkE4RDRDMUQwMDI4OTU3MjI3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6obC4cAHLxofFDY/J3fGO22IQ
NmEkk+7QTT8zD/K+tLxttdZOEVdnPAhGH2bF0I60vfLqIWBwrCSXukElQXaoPyAR
z0kv1afuebwZu8upZoU4POIWdwDvA2gz6vzyhFgunLSAC6+AWAig0T0e1kWD2MD4
Gnd42Dzv3gXVuw6jXApK61+NMxJiD4AsWSXIzeK5QL4cqeYVjXQbQflsO4F2VlWr
zF4JN4OVQuMSiXZz/70zbqKsmE2NI9AhuLLlM7Z+t+6aa17hWFaWQiM6w6hAPU2r
hqeNO5bOKey1V0i5S+iYGznyAOKY4eORDQDZpGdUf+JHXbIAKXsycSAXHIB/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9H8V/sBXfMUavPqNTB0AKJVyJ2YwHwYDVR0j
BBgwFoAUbmpfDk3XwhOAAzY6GjMe/UMwrrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjIyZTFmM2MtNWE0OC00ZjM5LWFhYzctZTAxMmVkNzA5ZDZhLzAvNkU2QTVGMEU0
REQ3QzIxMzgwMDMzNjNBMUEzMzFFRkQ0MzMwQUVCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RTZBNUYwRTRERDdDMjEzODAwMzM2M0ExQTMzMUVGRDQzMzBB
RUI5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMmUxZjNjLTVhNDgtNGYzOS1h
YWM3LWUwMTJlZDcwOWQ2YS8wLzMxMzEzNzJlMzEzMDMzMmUzNjM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzNTM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXVnQDANBgkqhkiG
9w0BAQsFAAOCAQEAhsnnygybQig+95AkTKy/ezb7LANDjrQ1blAganblXBb0Rk4y
LIE7Br9J/vglMJZ2eus5jTDEjYj4AIq1QgcEHnewr26miBbG76Qj7mXjnyeFemAn
Cx8MM8mgZ4XdMeKRaNyHuqSuErcX1++L0fmWPmxX7aIpyvJaeD+q0ujS3XkBe+4Y
te05oxQOyKULEXchCi77K4QdjpQRiA5bdDm8DEACZSA3FPrSjrIA06813QgZVWCt
zFlsrhBoSdOFuizNdcToOgXtXcRUzWxcfOVH81ifyeBdsVmzxKsSGtbc/IqyHMui
hfjLgRwtBqPiPcRjZtM9D8qs9sm7PpX4bkk+Pg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:19:29 2026 by rpki-client