Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa
File:                     3130332e37312e382e302f32332d3234203d3e203535363632.roa (raw, json)
Hash identifier:          ABGORh4lWt4WpXDSQFC2AfJLsKMZzwquOOsUkRU5KZw=
Subject key identifier:   5C:93:D2:E5:D8:E8:3D:20:3B:3C:9A:88:59:22:73:B5:D8:9F:2A:29
Certificate issuer:       /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Certificate serial:       296489E8E0D410A6334FE25E450AD5794DE43299
Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa
Signing time:             Sun 03 May 2026 02:21:46 +0000
ROA not before:           Sun 03 May 2026 02:16:46 +0000
ROA not after:            Sun 02 May 2027 02:21:46 +0000
asID:                     55662
IP address blocks:        103.71.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
                          rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:64:89:e8:e0:d4:10:a6:33:4f:e2:5e:45:0a:d5:79:4d:e4:32:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
        Validity
            Not Before: May  3 02:16:46 2026 GMT
            Not After : May  2 02:21:46 2027 GMT
        Subject: CN=5C93D2E5D8E83D203B3C9A88592273B5D89F2A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2f:c7:e3:15:fd:af:46:64:fe:22:a7:24:b3:
                    db:75:57:e0:37:eb:c5:fc:57:34:47:15:da:a8:9e:
                    c4:1e:6b:6a:51:bf:e7:1f:52:ce:24:89:9e:6d:be:
                    e5:a8:ee:19:ce:55:d2:52:58:d3:bd:47:b8:43:76:
                    05:96:6a:96:b7:4e:22:de:3a:d3:60:17:a5:98:52:
                    bd:ec:90:09:31:75:e5:fc:a3:4b:12:22:0e:72:9b:
                    a6:c4:db:39:56:7a:a9:e3:b8:c5:55:f8:78:cd:6f:
                    c1:16:60:23:ba:41:ce:f9:30:78:52:47:ef:d2:0d:
                    1d:6e:18:af:3b:65:26:3f:79:c7:81:30:36:d7:33:
                    a4:c0:b0:68:74:94:1e:d0:92:d4:a0:6b:0d:41:52:
                    cf:1d:6c:c0:7e:7b:0e:bd:08:67:8e:88:c6:30:42:
                    12:9b:c0:b2:16:83:a5:a0:dd:09:c1:bc:5b:9f:0b:
                    70:d6:32:8f:11:26:10:ed:2f:e5:92:b4:35:fd:c5:
                    e3:42:c9:a8:24:df:ac:1f:aa:f2:29:1d:94:a5:6a:
                    67:7d:7b:21:24:f5:77:da:82:4e:21:b3:14:cd:e6:
                    4b:01:0a:e5:de:72:63:14:c7:a7:c4:b1:28:19:08:
                    dc:75:98:10:c5:31:4e:50:bb:ed:91:c6:87:63:9a:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:93:D2:E5:D8:E8:3D:20:3B:3C:9A:88:59:22:73:B5:D8:9F:2A:29
            X509v3 Authority Key Identifier:
                keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:f6:70:8d:53:e2:8b:ec:19:eb:56:07:1f:fe:f3:7e:24:55:
         fe:a2:44:46:be:75:bc:37:07:98:9e:b3:af:4a:5b:46:4e:68:
         2d:9c:7e:ed:1c:eb:e2:b8:66:a5:73:db:28:bc:51:fc:ad:94:
         aa:f5:fc:eb:b2:f6:75:af:07:ab:0f:97:c1:c2:5c:38:b4:eb:
         4d:2f:b7:96:4a:17:09:86:48:c7:95:cd:be:f9:e9:53:4a:20:
         d6:ec:31:b0:13:55:0c:79:28:44:b4:f0:56:52:0f:cd:d5:61:
         07:47:35:00:7a:5e:50:9d:56:02:a6:ef:b8:61:c0:33:d6:e3:
         56:fd:86:71:18:22:97:17:4c:97:fd:3a:24:58:ca:28:50:92:
         b2:3b:cf:b6:6c:4d:f6:7b:cf:16:0c:ef:fc:84:54:3f:22:cf:
         27:5a:2e:76:1c:2e:3b:20:f7:3b:0f:1b:b1:50:cb:76:33:e6:
         c5:68:bf:19:e5:0a:8e:1e:59:90:bb:2a:31:94:1d:3d:22:c9:
         cd:b6:30:3e:f6:f7:30:56:e6:a8:76:13:d9:6d:f2:94:65:a9:
         85:eb:e4:ed:34:53:c5:bb:02:d9:6e:c0:cb:16:fa:a6:f1:f6:
         4c:cc:52:64:72:5a:a4:0e:98:fd:68:fb:89:8f:c6:18:62:fe:
         60:34:e4:56
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUKWSJ6ODUEKYzT+JeRQrVeU3kMpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhBMEQz
QkFEMUY5NDAeFw0yNjA1MDMwMjE2NDZaFw0yNzA1MDIwMjIxNDZaMDMxMTAvBgNV
BAMTKDVDOTNEMkU1RDhFODNEMjAzQjNDOUE4ODU5MjI3M0I1RDg5RjJBMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1L8fjFf2vRmT+Iqcks9t1V+A3
68X8VzRHFdqonsQea2pRv+cfUs4kiZ5tvuWo7hnOVdJSWNO9R7hDdgWWapa3TiLe
OtNgF6WYUr3skAkxdeX8o0sSIg5ym6bE2zlWeqnjuMVV+HjNb8EWYCO6Qc75MHhS
R+/SDR1uGK87ZSY/eceBMDbXM6TAsGh0lB7QktSgaw1BUs8dbMB+ew69CGeOiMYw
QhKbwLIWg6Wg3QnBvFufC3DWMo8RJhDtL+WStDX9xeNCyagk36wfqvIpHZSlamd9
eyEk9Xfagk4hsxTN5ksBCuXecmMUx6fEsSgZCNx1mBDFMU5Qu+2Rxodjmp+xAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUXJPS5djoPSA7PJqIWSJztdifKikwHwYDVR0j
BBgwFoAUgRBXDOVdhRL8vfAoGfuKDTutH5QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmE0OTYwODItYTBhYS00ODM2LWI1ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENF
NTVEODUxMkZDQkRGMDI4MTlGQjhBMEQzQkFEMUY5NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MTEwNTcwQ0U1NUQ4NTEyRkNCREYwMjgxOUZCOEEwRDNCQUQx
Rjk0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1
ODctOTczZGQ3ZTI5N2FmLzAvMzEzMDMzMmUzNzMxMmUzODJlMzAyZjMyMzMyZDMy
MzQyMDNkM2UyMDM1MzUzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnRwgwDQYJKoZIhvcNAQEL
BQADggEBAJr2cI1T4ovsGetWBx/+834kVf6iREa+dbw3B5ies69KW0ZOaC2cfu0c
6+K4ZqVz2yi8UfytlKr1/Ouy9nWvB6sPl8HCXDi0600vt5ZKFwmGSMeVzb756VNK
INbsMbATVQx5KES08FZSD83VYQdHNQB6XlCdVgKm77hhwDPW41b9hnEYIpcXTJf9
OiRYyihQkrI7z7ZsTfZ7zxYM7/yEVD8izydaLnYcLjsg9zsPG7FQy3Yz5sVovxnl
Co4eWZC7KjGUHT0iyc22MD729zBW5qh2E9lt8pRlqYXr5O00U8W7AtluwMsW+qbx
9kzMUmRyWqQOmP1o+4mPxhhi/mA05FY=
-----END CERTIFICATE-----
Generated at Wed May 13 01:35:53 2026 by rpki-client