Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3130332e32342e3134382e302f32322d3234203d3e203233393439.roa
File:                     3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (raw, json)
Hash identifier:          7oQYk70vQKgevBK4UvvhjpK8SNhKYOZ4R1FXSVnjFQo=
Subject key identifier:   F5:FA:4F:6F:6B:C6:90:FC:C6:1B:8A:AE:71:B9:42:6F:5A:2E:D1:69
Certificate issuer:       /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Certificate serial:       4DB4864D7C214819EA4C6CA62E251A720CF4290E
Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3130332e32342e3134382e302f32322d3234203d3e203233393439.roa
Signing time:             Sun 03 May 2026 02:22:00 +0000
ROA not before:           Sun 03 May 2026 02:17:00 +0000
ROA not after:            Sun 02 May 2027 02:22:00 +0000
asID:                     23949
IP address blocks:        103.24.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
                          rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b4:86:4d:7c:21:48:19:ea:4c:6c:a6:2e:25:1a:72:0c:f4:29:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
        Validity
            Not Before: May  3 02:17:00 2026 GMT
            Not After : May  2 02:22:00 2027 GMT
        Subject: CN=F5FA4F6F6BC690FCC61B8AAE71B9426F5A2ED169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:16:74:93:d4:d5:fa:d6:54:45:42:d4:f4:
                    ea:75:02:02:4f:62:41:9e:87:a9:73:7a:8a:75:02:
                    39:e4:56:84:3f:02:29:17:33:74:9b:61:36:55:7a:
                    52:89:7a:bb:bc:85:90:62:08:91:45:ac:4a:09:bb:
                    b5:b2:96:8a:ff:db:5e:00:48:20:32:4b:3b:cf:b5:
                    78:cc:5f:0b:25:02:2f:8a:bb:55:a1:fb:85:5f:86:
                    72:43:b3:bd:8a:93:11:a7:58:39:f9:fe:b4:ab:bd:
                    fe:62:e4:fe:49:f2:50:0a:e1:fb:0a:00:77:e5:6b:
                    2c:7f:fc:1c:9f:1d:d7:c0:4a:80:a8:5c:51:c6:48:
                    97:3c:5c:48:b3:a1:6d:64:51:6c:23:08:50:b9:d1:
                    9f:e8:40:74:a9:3b:f4:18:5d:7f:8a:ed:63:62:0a:
                    11:f2:76:07:7c:0e:a9:2e:a2:12:34:ec:a5:9f:34:
                    16:30:1d:0c:77:08:84:07:d0:bd:4f:95:64:c7:fd:
                    ea:35:96:6c:e5:40:43:a1:7e:7e:05:69:28:b4:fe:
                    7d:78:75:c5:ad:03:2a:67:f0:89:71:6e:6f:3f:d6:
                    9b:8f:03:29:65:eb:af:e5:a2:1a:c3:c3:65:70:2b:
                    39:5e:75:6c:45:e7:74:b7:05:fc:2d:30:cf:e8:6d:
                    4b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FA:4F:6F:6B:C6:90:FC:C6:1B:8A:AE:71:B9:42:6F:5A:2E:D1:69
            X509v3 Authority Key Identifier:
                keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3130332e32342e3134382e302f32322d3234203d3e203233393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:e1:f2:fa:6f:b1:59:c6:8f:7d:31:45:ea:af:20:84:cd:47:
         2e:ce:ee:63:c0:fe:ed:11:4c:dc:12:d4:3c:cd:19:9b:1b:42:
         59:b8:96:e5:71:42:54:5d:6d:0f:bf:d9:3c:93:2a:a5:d3:76:
         33:c8:6c:52:c6:36:15:86:84:0e:80:0d:56:51:1c:87:1a:ef:
         ee:ae:f9:0f:04:82:56:c6:cd:10:f2:26:f1:9a:1b:13:34:d3:
         16:39:4c:a2:21:d4:ac:40:90:44:76:75:b9:94:51:9c:87:1d:
         5e:c3:7f:90:be:01:28:ba:8c:61:04:b3:5c:f7:d3:5a:a4:6b:
         3b:7c:7f:b7:e2:0a:04:6c:e9:be:86:69:62:20:bf:5c:f8:e9:
         8c:04:a4:f3:c1:ea:1d:44:81:ca:3f:2c:0a:d1:39:94:5a:79:
         65:15:ac:42:d6:1a:23:ea:38:38:69:35:91:9d:f0:d5:46:a1:
         e9:bd:af:d8:52:d3:d9:f9:bf:0e:a5:2e:ee:c7:bd:88:a6:d9:
         c8:56:a3:ef:23:24:76:90:bd:6d:d9:00:c3:3b:0e:9a:54:95:
         4c:9f:00:fe:2f:11:d2:fa:20:60:43:37:2c:a5:b7:39:e1:67:
         28:8e:65:c7:0d:7e:d3:8d:cd:0e:50:7d:3c:75:c6:14:6e:ca:
         20:32:65:bc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTbSGTXwhSBnqTGymLiUacgz0KQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUzNzlGMEQwOEQwNURGOERFNDFEMkFDMTlBRDBCRUY4
NzNDQjFEQzAeFw0yNjA1MDMwMjE3MDBaFw0yNzA1MDIwMjIyMDBaMDMxMTAvBgNV
BAMTKEY1RkE0RjZGNkJDNjkwRkNDNjFCOEFBRTcxQjk0MjZGNUEyRUQxNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMRZ0k9TV+tZURULU9Op1AgJP
YkGeh6lzeop1AjnkVoQ/AikXM3SbYTZVelKJeru8hZBiCJFFrEoJu7Wylor/214A
SCAySzvPtXjMXwslAi+Ku1Wh+4VfhnJDs72KkxGnWDn5/rSrvf5i5P5J8lAK4fsK
AHflayx//ByfHdfASoCoXFHGSJc8XEizoW1kUWwjCFC50Z/oQHSpO/QYXX+K7WNi
ChHydgd8DqkuohI07KWfNBYwHQx3CIQH0L1PlWTH/eo1lmzlQEOhfn4FaSi0/n14
dcWtAypn8Ilxbm8/1puPAyll66/lohrDw2VwKzledWxF53S3BfwtMM/obUubAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9fpPb2vGkPzGG4qucblCb1ou0WkwHwYDVR0j
BBgwFoAUBTefDQjQXfjeQdKsGa0L74c8sdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmI2OTgyMmMtMmUyMi00OGJlLThiYTItNjM0ZjU4MmMyZWNiLzAvMDUzNzlGMEQw
OEQwNURGOERFNDFEMkFDMTlBRDBCRUY4NzNDQjFEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNTM3OUYwRDA4RDA1REY4REU0MUQyQUMxOUFEMEJFRjg3M0NC
MURDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJiNjk4MjJjLTJlMjItNDhiZS04
YmEyLTYzNGY1ODJjMmVjYi8wLzMxMzAzMzJlMzIzNDJlMzEzNDM4MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzIzMzM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcYlDANBgkqhkiG
9w0BAQsFAAOCAQEAE+Hy+m+xWcaPfTFF6q8ghM1HLs7uY8D+7RFM3BLUPM0ZmxtC
WbiW5XFCVF1tD7/ZPJMqpdN2M8hsUsY2FYaEDoANVlEchxrv7q75DwSCVsbNEPIm
8ZobEzTTFjlMoiHUrECQRHZ1uZRRnIcdXsN/kL4BKLqMYQSzXPfTWqRrO3x/t+IK
BGzpvoZpYiC/XPjpjASk88HqHUSByj8sCtE5lFp5ZRWsQtYaI+o4OGk1kZ3w1Uah
6b2v2FLT2fm/DqUu7se9iKbZyFaj7yMkdpC9bdkAwzsOmlSVTJ8A/i8R0vogYEM3
LKW3OeFnKI5lxw1+043NDlB9PHXGFG7KIDJlvA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:26 2026 by rpki-client