Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37352e302f32342d3234203d3e203436303631.roa
File:                     3130332e32342e37352e302f32342d3234203d3e203436303631.roa (raw, json)
Hash identifier:          k7wAQ0uD+feQhS7bp4KkJxo3uZUwNKoeGm20CJyRgyc=
Subject key identifier:   94:11:0A:44:AC:79:63:B1:F8:FA:B5:E8:D0:C8:6E:0E:64:44:0B:D1
Certificate issuer:       /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Certificate serial:       33F5BEABC8BD9E2CF8CBF46374E434C913724E04
Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37352e302f32342d3234203d3e203436303631.roa
Signing time:             Sun 03 May 2026 02:22:17 +0000
ROA not before:           Sun 03 May 2026 02:17:17 +0000
ROA not after:            Sun 02 May 2027 02:22:17 +0000
asID:                     46061
IP address blocks:        103.24.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
                          rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f5:be:ab:c8:bd:9e:2c:f8:cb:f4:63:74:e4:34:c9:13:72:4e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
        Validity
            Not Before: May  3 02:17:17 2026 GMT
            Not After : May  2 02:22:17 2027 GMT
        Subject: CN=94110A44AC7963B1F8FAB5E8D0C86E0E64440BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:4b:27:3c:12:60:b2:c1:b7:02:f9:13:c0:
                    10:29:39:fb:e3:8a:56:ad:70:15:2c:17:09:ad:3c:
                    88:a9:cd:30:b4:e1:e2:d1:89:9f:15:1b:98:14:c4:
                    09:14:7b:1b:30:27:88:74:6e:d3:2f:e3:a3:99:27:
                    3b:0d:da:bf:1e:51:b8:89:e8:36:c4:aa:1e:71:7f:
                    97:9f:7d:26:ab:2d:f2:1b:35:cb:cd:19:54:86:07:
                    d4:85:f6:a2:32:7c:06:25:68:1a:dc:5a:69:fe:ff:
                    d6:58:69:90:1b:de:a4:e5:93:90:1f:a7:11:30:f0:
                    89:e7:cd:7d:0e:c1:70:28:27:8f:12:c2:7c:77:b8:
                    41:8c:d4:98:e3:6c:5b:06:b9:7e:cd:09:c4:89:3c:
                    35:f6:6c:09:bd:25:bf:7a:f2:ce:08:ac:db:20:81:
                    14:6d:b8:f6:4c:ec:dd:31:d8:fa:b1:45:3f:a4:a2:
                    8d:dc:6a:44:b6:8d:11:dc:b2:b8:18:b8:f9:ff:a3:
                    15:a7:60:8a:07:53:d6:a6:43:96:26:26:20:51:b7:
                    10:12:3a:a9:4f:bc:f2:02:9b:c7:f6:89:d6:fd:6b:
                    22:8f:c6:00:6f:30:2a:2a:f5:43:6b:a0:6e:6e:e6:
                    e4:f6:fc:23:6d:f2:54:63:af:d8:42:bd:4a:50:83:
                    4f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:11:0A:44:AC:79:63:B1:F8:FA:B5:E8:D0:C8:6E:0E:64:44:0B:D1
            X509v3 Authority Key Identifier:
                keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37352e302f32342d3234203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:15:6f:9a:59:c9:cb:d3:8e:26:9f:c7:19:1c:ec:17:59:83:
         8c:57:e5:2d:a1:42:18:0b:56:a2:5b:0f:5c:21:c2:3b:fc:74:
         46:0e:3d:22:04:d3:d3:72:6d:de:96:3a:41:df:73:c7:3c:2f:
         c0:6a:59:aa:6c:19:1e:88:78:d6:4e:92:b9:a9:97:29:bb:35:
         84:96:94:cf:d4:59:01:e8:bf:5b:7b:9b:2f:20:34:80:bb:24:
         45:47:d9:15:4a:ec:02:39:73:92:72:b9:18:b3:7f:1c:bc:18:
         c8:7c:c0:01:1a:fc:b7:8b:cc:18:8b:7d:a3:da:f3:3c:c4:12:
         ca:b2:20:b5:e5:a6:9f:46:b3:eb:37:36:1b:d9:ec:3e:94:40:
         05:a9:88:7c:ae:2b:b4:71:c8:bf:1c:42:96:73:0d:62:15:b8:
         73:5a:23:57:25:63:0a:08:91:6e:6b:c3:08:26:00:39:6f:f5:
         fe:e9:76:4c:f5:01:97:d3:b7:22:f3:df:07:a4:ad:61:dd:b9:
         f3:38:c7:d7:ca:3f:5a:6f:a2:a1:76:5a:8c:6e:cb:8e:35:5b:
         4c:65:99:e8:14:ca:0e:21:7b:05:c6:75:b7:d2:05:a4:71:fe:
         14:02:78:05:e6:6e:bd:08:69:c7:76:cb:58:32:0d:4f:d4:6b:
         c2:8d:55:0f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUM/W+q8i9niz4y/RjdOQ0yRNyTgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwNjY5NzkyODgzQkY3RERERUI4MkFENjIxNEUwRkE5
MDczMTNFMjAeFw0yNjA1MDMwMjE3MTdaFw0yNzA1MDIwMjIyMTdaMDMxMTAvBgNV
BAMTKDk0MTEwQTQ0QUM3OTYzQjFGOEZBQjVFOEQwQzg2RTBFNjQ0NDBCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT8ksnPBJgssG3AvkTwBApOfvj
ilatcBUsFwmtPIipzTC04eLRiZ8VG5gUxAkUexswJ4h0btMv46OZJzsN2r8eUbiJ
6DbEqh5xf5effSarLfIbNcvNGVSGB9SF9qIyfAYlaBrcWmn+/9ZYaZAb3qTlk5Af
pxEw8InnzX0OwXAoJ48Swnx3uEGM1JjjbFsGuX7NCcSJPDX2bAm9Jb968s4IrNsg
gRRtuPZM7N0x2PqxRT+koo3cakS2jRHcsrgYuPn/oxWnYIoHU9amQ5YmJiBRtxAS
OqlPvPICm8f2idb9ayKPxgBvMCoq9UNroG5u5uT2/CNt8lRjr9hCvUpQg0/7AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUlBEKRKx5Y7H4+rXo0MhuDmREC9EwHwYDVR0j
BBgwFoAUCgZpeSiDv33d64KtYhTg+pBzE+IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmMzMjZmNGUtNjYwNS00OTZhLWI5ZjgtZDZlNzdiMjliY2M2LzAvMEEwNjY5Nzky
ODgzQkY3RERERUI4MkFENjIxNEUwRkE5MDczMTNFMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTA2Njk3OTI4ODNCRjdERERFQjgyQUQ2MjE0RTBGQTkwNzMx
M0UyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJjMzI2ZjRlLTY2MDUtNDk2YS1i
OWY4LWQ2ZTc3YjI5YmNjNi8wLzMxMzAzMzJlMzIzNDJlMzczNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzYzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnGEswDQYJKoZIhvcN
AQELBQADggEBACwVb5pZycvTjiafxxkc7BdZg4xX5S2hQhgLVqJbD1whwjv8dEYO
PSIE09Nybd6WOkHfc8c8L8BqWapsGR6IeNZOkrmplym7NYSWlM/UWQHov1t7my8g
NIC7JEVH2RVK7AI5c5JyuRizfxy8GMh8wAEa/LeLzBiLfaPa8zzEEsqyILXlpp9G
s+s3NhvZ7D6UQAWpiHyuK7RxyL8cQpZzDWIVuHNaI1clYwoIkW5rwwgmADlv9f7p
dkz1AZfTtyLz3wekrWHdufM4x9fKP1pvoqF2Woxuy441W0xlmegUyg4hewXGdbfS
BaRx/hQCeAXmbr0Iacd2y1gyDU/Ua8KNVQ8=
-----END CERTIFICATE-----
Generated at Wed May 13 03:00:04 2026 by rpki-client