Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e352e302f32342d3234203d3e20313332363639.roa
File:                     3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (raw, json)
Hash identifier:          iaDIctPMB1cb8jRuozs+7fq0LvdviMyJlcS3OgZDYDM=
Subject key identifier:   40:AB:83:92:05:F5:6E:B2:93:33:31:E4:09:46:64:78:07:05:48:3D
Certificate issuer:       /CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0
Certificate serial:       588A57EBC5569585CFA08B82E6FF630276A935A0
Authority key identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e352e302f32342d3234203d3e20313332363639.roa
Signing time:             Sun 03 May 2026 02:20:13 +0000
ROA not before:           Sun 03 May 2026 02:15:13 +0000
ROA not after:            Sun 02 May 2027 02:20:13 +0000
asID:                     132669
IP address blocks:        103.112.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl
                          rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8a:57:eb:c5:56:95:85:cf:a0:8b:82:e6:ff:63:02:76:a9:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0
        Validity
            Not Before: May  3 02:15:13 2026 GMT
            Not After : May  2 02:20:13 2027 GMT
        Subject: CN=40AB839205F56EB2933331E4094664780705483D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:e1:66:fd:29:b5:d0:aa:c4:62:74:02:26:
                    e0:d8:7d:3d:8a:46:73:12:3a:8c:b4:f1:1e:b1:2d:
                    ce:30:75:5e:79:cc:d8:ba:64:ae:08:de:e0:5f:31:
                    2e:e7:6b:95:dd:b5:80:6a:6a:38:bf:48:f1:ba:c2:
                    05:c7:86:7e:dc:b7:02:fa:32:c3:c8:f7:47:24:18:
                    b7:6d:d2:a2:6c:69:f3:16:7b:d3:78:f2:77:c6:68:
                    1e:78:b8:1f:28:c2:63:75:f8:ed:e0:2d:41:19:2e:
                    b2:6b:7e:6f:7b:77:2d:e8:9d:35:58:16:55:a7:ec:
                    8b:80:18:c4:ac:9a:de:c7:d6:1f:88:d3:4f:c6:db:
                    54:a1:44:b0:78:15:48:34:5e:5f:17:8a:de:72:13:
                    b2:03:56:c5:3e:36:57:b2:78:86:13:fa:ba:2d:61:
                    9b:31:e5:1f:24:0b:50:28:3b:18:0c:2d:e7:34:96:
                    e8:d7:0c:07:58:01:f4:39:86:ae:51:c7:be:3f:2d:
                    3f:4b:32:da:76:de:e7:4e:55:0d:45:29:66:19:72:
                    c2:70:7f:d3:78:65:d5:f1:30:ad:b2:52:a0:7b:cb:
                    40:e9:62:e2:d5:04:5e:a3:dd:69:40:66:84:7f:a4:
                    ff:af:b8:fe:b7:8d:56:de:a1:96:bb:7d:3b:b5:d7:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:83:92:05:F5:6E:B2:93:33:31:E4:09:46:64:78:07:05:48:3D
            X509v3 Authority Key Identifier:
                keyid:22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e352e302f32342d3234203d3e20313332363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:8f:8c:a4:c2:88:eb:6e:a1:91:b9:20:bc:f1:dc:60:be:a3:
         35:bf:db:f3:b8:5a:80:da:39:02:29:4c:33:72:af:3f:a4:05:
         02:d3:f2:64:b7:63:43:7d:db:bd:2c:39:90:10:07:cb:2e:5c:
         91:9e:77:36:b8:68:2c:3b:15:b3:8f:b5:29:a3:1e:57:5f:4e:
         21:34:50:57:66:f4:ee:9f:8e:7f:65:3f:04:51:9b:33:75:2a:
         d0:63:b1:8f:8a:4e:4c:cd:41:95:94:16:5d:5e:94:94:61:cf:
         0e:35:9c:53:55:19:89:e9:e7:30:41:d0:f9:51:2f:76:ab:ba:
         e8:d1:a1:b6:b5:92:fd:5c:d6:c0:32:1a:d1:c6:ed:d7:c0:1b:
         8a:22:13:65:d3:32:72:8d:ba:27:cf:36:43:ed:d2:f8:5d:49:
         72:72:28:4d:2a:1e:33:90:3a:ed:21:25:7d:a4:f2:ff:d4:f7:
         eb:a1:63:c6:82:98:23:b6:58:39:99:97:df:30:cc:fd:01:9b:
         eb:e9:2f:a4:eb:5d:7b:e8:b1:9c:00:1f:3b:55:cc:cd:98:e8:
         c8:2a:45:bf:1d:26:85:9c:37:40:aa:86:05:20:ce:3e:2f:59:
         51:2b:2d:45:0b:4e:4a:ee:f7:1e:7e:a1:5a:a9:06:1d:6d:61:
         68:36:d1:38
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWIpX68VWlYXPoIuC5v9jAnapNaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRF
QjdBOUJEMDAeFw0yNjA1MDMwMjE1MTNaFw0yNzA1MDIwMjIwMTNaMDMxMTAvBgNV
BAMTKDQwQUI4MzkyMDVGNTZFQjI5MzMzMzFFNDA5NDY2NDc4MDcwNTQ4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SuFm/Sm10KrEYnQCJuDYfT2K
RnMSOoy08R6xLc4wdV55zNi6ZK4I3uBfMS7na5XdtYBqaji/SPG6wgXHhn7ctwL6
MsPI90ckGLdt0qJsafMWe9N48nfGaB54uB8owmN1+O3gLUEZLrJrfm97dy3onTVY
FlWn7IuAGMSsmt7H1h+I00/G21ShRLB4FUg0Xl8Xit5yE7IDVsU+NleyeIYT+rot
YZsx5R8kC1AoOxgMLec0lujXDAdYAfQ5hq5Rx74/LT9LMtp23udOVQ1FKWYZcsJw
f9N4ZdXxMK2yUqB7y0DpYuLVBF6j3WlAZoR/pP+vuP63jVbeoZa7fTu11/upAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQKuDkgX1brKTMzHkCUZkeAcFSD0wHwYDVR0j
BBgwFoAUIkGb7IgZbKKlqr9UMEthBOt6m9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjQxYmMzZWMtODZiOC00YWZiLThhOGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4
ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRFQjdBOUJEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMjQxOUJFQzg4MTk2Q0EyQTVBQUJGNTQzMDRCNjEwNEVCN0E5
QkQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI0MWJjM2VjLTg2YjgtNGFmYi04
YThmLWEwYTg2YTRjMjljNi8wLzMxMzAzMzJlMzEzMTMyMmUzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdwBTANBgkqhkiG
9w0BAQsFAAOCAQEAG4+MpMKI626hkbkgvPHcYL6jNb/b87hagNo5AilMM3KvP6QF
AtPyZLdjQ33bvSw5kBAHyy5ckZ53NrhoLDsVs4+1KaMeV19OITRQV2b07p+Of2U/
BFGbM3Uq0GOxj4pOTM1BlZQWXV6UlGHPDjWcU1UZiennMEHQ+VEvdqu66NGhtrWS
/VzWwDIa0cbt18AbiiITZdMyco26J882Q+3S+F1JcnIoTSoeM5A67SElfaTy/9T3
66FjxoKYI7ZYOZmX3zDM/QGb6+kvpOtde+ixnAAfO1XMzZjoyCpFvx0mhZw3QKqG
BSDOPi9ZUSstRQtOSu73Hn6hWqkGHW1haDbROA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:49 2026 by rpki-client