Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/3130332e39342e3234382e302f32332d3234203d3e203633383738.roa
File:                     3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (raw, json)
Hash identifier:          9oG14yFX0JqA/A4Gb5KSL8SJiMaQk5xxtaHwWhta8TI=
Subject key identifier:   CD:60:14:A6:9C:70:8A:6D:F7:96:EA:28:51:ED:15:0F:42:43:61:5F
Certificate issuer:       /CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C
Certificate serial:       2AF3C427E7F36968182195EC179ECC6F4D82EAB7
Authority key identifier: A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/3130332e39342e3234382e302f32332d3234203d3e203633383738.roa
Signing time:             Sun 03 May 2026 02:21:26 +0000
ROA not before:           Sun 03 May 2026 02:16:26 +0000
ROA not after:            Sun 02 May 2027 02:21:26 +0000
asID:                     63878
IP address blocks:        103.94.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl
                          rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f3:c4:27:e7:f3:69:68:18:21:95:ec:17:9e:cc:6f:4d:82:ea:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C
        Validity
            Not Before: May  3 02:16:26 2026 GMT
            Not After : May  2 02:21:26 2027 GMT
        Subject: CN=CD6014A69C708A6DF796EA2851ED150F4243615F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:af:ea:da:58:fc:a4:eb:45:36:14:e8:34:
                    c0:cc:f4:83:00:6e:1b:6e:4c:c9:ef:b0:f4:0e:3e:
                    ed:aa:e6:bf:24:aa:f4:89:5b:20:d6:62:d6:61:df:
                    1b:a5:92:e6:c4:10:8d:f2:91:9c:49:15:1c:82:39:
                    b4:70:89:a8:ba:ac:b6:41:8a:f7:40:34:4a:92:ae:
                    27:35:60:aa:97:5a:35:72:af:5a:f7:0c:fd:d2:25:
                    48:9f:5c:e5:c9:66:be:bf:4c:87:91:24:24:43:f3:
                    e7:e8:af:42:81:1a:2e:72:0f:3b:6c:e9:03:89:0d:
                    da:52:ce:9b:af:b6:f1:2b:90:29:73:20:5f:4d:f2:
                    4d:ca:ee:9b:5b:6f:a9:51:ce:41:44:af:95:ea:1b:
                    61:12:20:29:72:a3:8b:50:58:1f:44:76:f5:6f:84:
                    d4:11:c9:d5:e2:b0:85:22:de:a5:77:e9:6f:78:4e:
                    fd:ed:ad:5f:60:23:09:0f:9d:dd:75:db:f0:b3:d4:
                    6a:21:be:2b:58:54:f8:29:d3:cf:42:bf:64:80:bd:
                    ff:9e:44:03:00:ba:4a:84:01:74:70:39:0a:72:2d:
                    3c:d4:48:b0:bf:d2:69:ce:8a:6e:ad:9e:a3:10:f5:
                    16:73:a9:cd:8e:1c:8d:2f:7d:4f:bc:2a:74:d3:a0:
                    93:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:60:14:A6:9C:70:8A:6D:F7:96:EA:28:51:ED:15:0F:42:43:61:5F
            X509v3 Authority Key Identifier:
                keyid:A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/3130332e39342e3234382e302f32332d3234203d3e203633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:ec:db:f6:cf:f2:bb:b0:0e:bb:6e:34:f3:62:d9:8c:0d:2e:
         38:6b:9c:00:ac:78:3a:9b:8a:d6:eb:8a:70:89:d0:cf:ea:96:
         49:c5:91:59:3a:d3:90:00:a4:39:d1:f6:66:a2:89:6b:01:e8:
         4c:73:8e:5e:28:c4:a2:9f:7a:44:fe:89:77:ff:e8:63:90:a9:
         d0:6a:be:e0:95:54:e6:31:cb:e7:ab:92:6a:f9:7e:ba:62:ef:
         05:89:ab:47:82:51:f3:5b:1a:2a:87:ed:f9:4c:4c:cb:cb:32:
         75:c9:31:f6:e4:45:55:04:c4:15:25:38:79:42:64:ec:b2:46:
         00:57:d4:99:26:33:4d:08:0d:05:e2:10:af:34:48:76:aa:83:
         ca:de:28:d3:35:41:96:ea:a7:0a:14:f8:4f:a0:c8:51:15:88:
         0b:d6:c6:16:93:07:c8:34:a5:b9:43:f4:d1:37:ac:73:94:fa:
         f8:5a:f9:a5:55:88:3c:17:58:d9:ee:93:0b:5e:25:c5:cd:27:
         d8:0d:07:d1:40:ff:9d:99:a1:19:df:23:fa:c7:64:46:7b:c9:
         df:0a:62:95:13:03:a5:11:ac:7f:dc:bc:02:5d:bc:61:9d:f0:
         ad:65:1c:d0:1e:82:38:64:66:7a:7d:92:9f:a2:b4:77:19:c3:
         4f:1d:71:da
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKvPEJ+fzaWgYIZXsF57Mb02C6rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcy
OTQ1OEY0QzAeFw0yNjA1MDMwMjE2MjZaFw0yNzA1MDIwMjIxMjZaMDMxMTAvBgNV
BAMTKENENjAxNEE2OUM3MDhBNkRGNzk2RUEyODUxRUQxNTBGNDI0MzYxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWa/q2lj8pOtFNhToNMDM9IMA
bhtuTMnvsPQOPu2q5r8kqvSJWyDWYtZh3xulkubEEI3ykZxJFRyCObRwiai6rLZB
ivdANEqSric1YKqXWjVyr1r3DP3SJUifXOXJZr6/TIeRJCRD8+for0KBGi5yDzts
6QOJDdpSzpuvtvErkClzIF9N8k3K7ptbb6lRzkFEr5XqG2ESIClyo4tQWB9EdvVv
hNQRydXisIUi3qV36W94Tv3trV9gIwkPnd112/Cz1GohvitYVPgp089Cv2SAvf+e
RAMAukqEAXRwOQpyLTzUSLC/0mnOim6tnqMQ9RZzqc2OHI0vfU+8KnTToJPNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUzWAUppxwim33luooUe0VD0JDYV8wHwYDVR0j
BBgwFoAUpx4sYAd/aoyo0+94r8cbBylFj0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjhkNmNhOWItNTg0Zi00MGYxLWJkNjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAw
NzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcyOTQ1OEY0Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNzFFMkM2MDA3N0Y2QThDQThEM0VGNzhBRkM3MUIwNzI5NDU4
RjRDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI4ZDZjYTliLTU4NGYtNDBmMS1i
ZDYxLTE4NThlN2ViYTNlYS8wLzMxMzAzMzJlMzkzNDJlMzIzNDM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzYzMzM4MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWde+DANBgkqhkiG
9w0BAQsFAAOCAQEAtuzb9s/yu7AOu24082LZjA0uOGucAKx4OpuK1uuKcInQz+qW
ScWRWTrTkACkOdH2ZqKJawHoTHOOXijEop96RP6Jd//oY5Cp0Gq+4JVU5jHL56uS
avl+umLvBYmrR4JR81saKoft+UxMy8sydckx9uRFVQTEFSU4eUJk7LJGAFfUmSYz
TQgNBeIQrzRIdqqDyt4o0zVBluqnChT4T6DIURWIC9bGFpMHyDSluUP00Tesc5T6
+Fr5pVWIPBdY2e6TC14lxc0n2A0H0UD/nZmhGd8j+sdkRnvJ3wpilRMDpRGsf9y8
Al28YZ3wrWUc0B6COGRmen2Sn6K0dxnDTx1x2g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:23:50 2026 by rpki-client