Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa
File:                     3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (raw, json)
Hash identifier:          A3dxGP2PxS97Lp2Vu736TLE9a7nlQtJcScv1U2W/tIo=
Subject key identifier:   C0:CC:13:6E:14:AB:5E:9A:7C:D1:42:15:5B:69:95:A2:D9:D3:21:B8
Certificate issuer:       /CN=37B043860635643A07D4415D3C8C4959A51F0B69
Certificate serial:       66085411D672FE113D571D726DA7E48F43D61DDB
Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa
Signing time:             Sun 03 May 2026 02:22:28 +0000
ROA not before:           Sun 03 May 2026 02:17:28 +0000
ROA not after:            Sun 02 May 2027 02:22:28 +0000
asID:                     142332
IP address blocks:        103.169.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
                          rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:08:54:11:d6:72:fe:11:3d:57:1d:72:6d:a7:e4:8f:43:d6:1d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69
        Validity
            Not Before: May  3 02:17:28 2026 GMT
            Not After : May  2 02:22:28 2027 GMT
        Subject: CN=C0CC136E14AB5E9A7CD142155B6995A2D9D321B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:06:3e:aa:1e:f0:fc:c1:0f:23:3a:34:8d:b2:
                    71:78:c1:ef:93:73:30:0d:02:ce:aa:82:fa:95:28:
                    a7:42:25:e8:0b:62:53:c2:9a:35:10:22:77:f5:85:
                    21:f9:f8:0f:d8:3e:97:5d:f8:72:ab:9c:b4:a2:c3:
                    44:a3:a0:2b:4c:9b:1e:1a:f3:68:2f:5f:e1:a7:f4:
                    20:5c:dd:69:25:ab:1c:0f:92:e6:0c:71:ee:f5:06:
                    09:e1:02:63:c5:6f:81:f8:55:dd:a8:f4:9f:be:30:
                    f2:26:18:ce:0c:cd:c5:1f:42:28:5b:73:05:65:10:
                    eb:08:43:30:34:14:34:37:a6:a8:d9:a3:f6:c8:b8:
                    b7:d5:88:32:2d:6d:e5:ca:35:87:c4:f2:2d:98:f3:
                    dd:e2:15:c7:44:e8:24:8a:a0:57:fc:d8:94:47:ff:
                    dc:9d:bc:75:a0:8a:88:3a:64:0e:a6:2c:14:94:db:
                    c7:7e:e7:57:7b:ea:b4:0b:0e:63:a6:dc:ef:65:80:
                    4b:5a:14:48:e1:d0:ef:de:e9:3f:fe:aa:14:2b:4b:
                    1f:02:b6:99:bb:3c:8f:27:e7:a7:a6:46:77:94:19:
                    08:07:96:44:02:9c:f0:d2:3e:bc:19:e9:66:e8:9a:
                    0f:86:5b:62:9c:73:47:c6:87:16:38:23:45:11:1e:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:13:6E:14:AB:5E:9A:7C:D1:42:15:5B:69:95:A2:D9:D3:21:B8
            X509v3 Authority Key Identifier:
                keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:87:ee:b6:43:49:f2:83:d6:c0:b1:fe:1b:d5:1b:4c:fc:c2:
         92:88:9e:82:91:9f:3c:08:14:c6:28:16:63:e8:d4:1c:2c:16:
         6e:df:5b:6d:42:5a:b7:21:9f:23:be:65:5d:f8:ec:d6:4f:85:
         77:c1:3a:ba:e1:a0:41:39:02:ce:5f:79:03:74:e3:6d:57:68:
         cb:70:81:1f:83:67:42:4b:2e:a3:72:b4:28:85:ef:e2:57:78:
         e6:9b:e5:51:42:68:75:48:48:77:82:60:2a:1a:eb:42:c1:bd:
         a3:b7:44:7b:67:b9:43:60:46:03:27:02:a3:85:b4:24:0d:0f:
         c5:41:85:75:51:8e:62:4f:d4:36:dc:c6:dc:08:25:81:42:24:
         35:9b:ce:83:b9:50:53:29:68:9e:6a:d2:91:94:7e:fd:84:1b:
         89:94:cd:4d:59:b4:7e:7e:ff:a5:fc:ab:a2:46:88:a3:78:3a:
         c0:f5:24:c4:ae:ac:af:7c:74:32:5c:41:92:aa:f0:62:ac:ef:
         8b:53:36:49:a2:2d:4a:74:43:3e:ea:75:41:40:7a:eb:1f:39:
         11:8b:20:82:30:7e:9a:b7:6a:0a:3b:46:a2:cd:0f:5b:60:8f:
         be:72:a4:34:a3:a1:0b:5d:62:46:6e:d7:53:2e:fd:b9:f7:b1:
         38:03:ef:db
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZghUEdZy/hE9Vx1ybafkj0PWHdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdCMDQzODYwNjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlB
NTFGMEI2OTAeFw0yNjA1MDMwMjE3MjhaFw0yNzA1MDIwMjIyMjhaMDMxMTAvBgNV
BAMTKEMwQ0MxMzZFMTRBQjVFOUE3Q0QxNDIxNTVCNjk5NUEyRDlEMzIxQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBj6qHvD8wQ8jOjSNsnF4we+T
czANAs6qgvqVKKdCJegLYlPCmjUQInf1hSH5+A/YPpdd+HKrnLSiw0SjoCtMmx4a
82gvX+Gn9CBc3WklqxwPkuYMce71BgnhAmPFb4H4Vd2o9J++MPImGM4MzcUfQihb
cwVlEOsIQzA0FDQ3pqjZo/bIuLfViDItbeXKNYfE8i2Y893iFcdE6CSKoFf82JRH
/9ydvHWgiog6ZA6mLBSU28d+51d76rQLDmOm3O9lgEtaFEjh0O/e6T/+qhQrSx8C
tpm7PI8n56emRneUGQgHlkQCnPDSPrwZ6Wbomg+GW2Kcc0fGhxY4I0URHr1tAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwMwTbhSrXpp80UIVW2mVotnTIbgwHwYDVR0j
BBgwFoAUN7BDhgY1ZDoH1EFdPIxJWaUfC2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmNiNTI2MTktMzc5ZC00MzBhLWIxOWItMWYwZWM1M2FlOTA5LzAvMzdCMDQzODYw
NjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlBNTFGMEI2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zN0IwNDM4NjA2MzU2NDNBMDdENDQxNUQzQzhDNDk1OUE1MUYw
QjY5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJjYjUyNjE5LTM3OWQtNDMwYS1i
MTliLTFmMGVjNTNhZTkwOS8wLzMxMzAzMzJlMzEzNjM5MmUzNDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6kpMA0GCSqG
SIb3DQEBCwUAA4IBAQA6h+62Q0nyg9bAsf4b1RtM/MKSiJ6CkZ88CBTGKBZj6NQc
LBZu31ttQlq3IZ8jvmVd+OzWT4V3wTq64aBBOQLOX3kDdONtV2jLcIEfg2dCSy6j
crQohe/iV3jmm+VRQmh1SEh3gmAqGutCwb2jt0R7Z7lDYEYDJwKjhbQkDQ/FQYV1
UY5iT9Q23MbcCCWBQiQ1m86DuVBTKWieatKRlH79hBuJlM1NWbR+fv+l/KuiRoij
eDrA9STErqyvfHQyXEGSqvBirO+LUzZJoi1KdEM+6nVBQHrrHzkRiyCCMH6at2oK
O0aizQ9bYI++cqQ0o6ELXWJGbtdTLv2597E4A+/b
-----END CERTIFICATE-----
Generated at Wed May 13 12:08:31 2026 by rpki-client