Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32342d3234203d3e20313530343639.roa
File:                     3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (raw, json)
Hash identifier:          eiTM77LAawXXBM2P9HzaFup35pUjYK9bwPNmiTzjRYk=
Subject key identifier:   7F:A6:98:FD:0B:09:F7:3F:E3:0F:3F:78:71:EE:58:3A:BE:61:E2:36
Certificate issuer:       /CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3
Certificate serial:       6C41F59FB26E403DC56E18FA1D21D71CF258F6FD
Authority key identifier: 1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32342d3234203d3e20313530343639.roa
Signing time:             Sun 03 May 2026 02:23:24 +0000
ROA not before:           Sun 03 May 2026 02:18:24 +0000
ROA not after:            Sun 02 May 2027 02:23:24 +0000
asID:                     150469
IP address blocks:        103.51.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl
                          rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:41:f5:9f:b2:6e:40:3d:c5:6e:18:fa:1d:21:d7:1c:f2:58:f6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3
        Validity
            Not Before: May  3 02:18:24 2026 GMT
            Not After : May  2 02:23:24 2027 GMT
        Subject: CN=7FA698FD0B09F73FE30F3F7871EE583ABE61E236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:d0:1d:2a:db:d0:64:11:51:94:4d:f3:3a:
                    94:92:74:8c:bf:28:f4:5e:da:fd:22:04:af:ab:80:
                    72:96:0e:7d:6a:f9:62:74:d0:1c:60:91:e1:0a:01:
                    2a:e7:b2:14:c9:19:16:30:61:6f:36:1e:d5:59:f6:
                    01:44:7c:25:80:1a:e3:b0:ce:8d:81:c4:b1:d7:ec:
                    e4:bb:b7:01:0a:80:44:6c:8a:33:e0:8c:18:a4:1b:
                    f4:c7:7d:c3:1d:2a:74:bb:ec:6a:bc:63:a0:f0:b1:
                    49:9a:20:ad:17:be:aa:3c:b6:0c:b8:e7:d8:4b:e4:
                    bd:e1:e1:1f:1f:e8:d3:a7:e1:cd:6a:46:bf:08:5f:
                    4a:42:95:d7:93:6d:44:d7:a9:ea:e1:6c:3d:b1:4c:
                    7c:33:71:6c:b3:4e:c3:04:8c:db:cc:8a:b6:cd:02:
                    b5:e4:24:9c:c4:dc:18:cf:19:d5:4e:f8:3f:f9:40:
                    70:05:5a:d9:c5:c7:cb:7f:9e:ea:4e:02:d5:3c:40:
                    d6:ad:1c:f0:6c:1d:e7:d4:30:c4:b8:75:14:b2:fe:
                    89:0d:f0:e6:52:71:f4:01:0a:61:af:8d:72:57:1c:
                    03:f2:7e:5d:45:49:b7:c5:da:77:04:7b:b3:f7:ee:
                    af:b2:55:0f:c6:6d:36:98:e7:4d:43:f8:14:df:f9:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A6:98:FD:0B:09:F7:3F:E3:0F:3F:78:71:EE:58:3A:BE:61:E2:36
            X509v3 Authority Key Identifier:
                keyid:1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32342d3234203d3e20313530343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:37:d6:9e:40:9d:4c:58:52:73:f8:5d:7f:90:15:08:31:bd:
         7c:44:e8:92:20:c8:53:91:86:ba:87:8d:c2:2d:d7:5f:78:e7:
         f3:f9:d3:53:c1:59:2d:ae:f4:ad:23:5f:07:68:fb:67:d1:d9:
         69:40:d2:68:e9:1a:56:8e:7c:a8:80:9c:2f:e5:4c:28:bc:5a:
         5a:7b:fe:09:9e:2b:6f:6b:9e:10:88:ab:9a:a6:b4:99:fa:0e:
         c0:ac:b9:46:aa:fb:d1:3f:dc:0d:54:14:e3:09:9b:ad:a9:cb:
         1a:48:d2:30:51:87:dd:05:4e:cc:ba:f7:b1:9f:5d:06:b7:fe:
         16:bd:50:35:9e:7d:cb:ca:81:59:e7:e8:c7:81:87:3a:09:53:
         6b:cc:17:c8:3e:90:31:b3:bb:5c:fe:35:71:09:50:11:5a:14:
         67:d9:ec:c4:33:80:7c:79:fb:50:5e:b3:29:59:6b:d9:77:90:
         34:1a:0b:99:14:82:21:58:6a:5c:74:c7:7c:92:2a:77:3f:ce:
         16:6d:cc:94:46:0b:a2:df:ed:0c:1d:a6:db:70:3a:22:7b:43:
         c2:f9:75:77:62:33:32:18:e6:94:30:d1:3d:57:13:65:54:f6:
         2c:e8:93:ff:ce:2b:9c:d8:b4:44:ab:2f:d3:01:05:79:67:66:
         9d:de:91:42
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbEH1n7JuQD3Fbhj6HSHXHPJY9v0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIyMjky
NUE5RDNCMzAeFw0yNjA1MDMwMjE4MjRaFw0yNzA1MDIwMjIzMjRaMDMxMTAvBgNV
BAMTKDdGQTY5OEZEMEIwOUY3M0ZFMzBGM0Y3ODcxRUU1ODNBQkU2MUUyMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOPtAdKtvQZBFRlE3zOpSSdIy/
KPRe2v0iBK+rgHKWDn1q+WJ00BxgkeEKASrnshTJGRYwYW82HtVZ9gFEfCWAGuOw
zo2BxLHX7OS7twEKgERsijPgjBikG/THfcMdKnS77Gq8Y6DwsUmaIK0Xvqo8tgy4
59hL5L3h4R8f6NOn4c1qRr8IX0pCldeTbUTXqerhbD2xTHwzcWyzTsMEjNvMirbN
ArXkJJzE3BjPGdVO+D/5QHAFWtnFx8t/nupOAtU8QNatHPBsHefUMMS4dRSy/okN
8OZScfQBCmGvjXJXHAPyfl1FSbfF2ncEe7P37q+yVQ/GbTaY501D+BTf+Sv7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUf6aY/QsJ9z/jDz94ce5YOr5h4jYwHwYDVR0j
BBgwFoAUGqYkMkFN3zWE/oa1xn+yKSWp07MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmYxM2E2ZWYtMzQzNC00NDAxLWIzZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0
MTREREYzNTg0RkU4NkI1QzY3RkIyMjkyNUE5RDNCMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xQUE2MjQzMjQxNERERjM1ODRGRTg2QjVDNjdGQjIyOTI1QTlE
M0IzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJmMTNhNmVmLTM0MzQtNDQwMS1i
M2UxLTY1MTUzMDY2ZmIzZS8wLzMxMzAzMzJlMzUzMTJlMzkzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGczYjANBgkqhkiG
9w0BAQsFAAOCAQEAYzfWnkCdTFhSc/hdf5AVCDG9fETokiDIU5GGuoeNwi3XX3jn
8/nTU8FZLa70rSNfB2j7Z9HZaUDSaOkaVo58qICcL+VMKLxaWnv+CZ4rb2ueEIir
mqa0mfoOwKy5Rqr70T/cDVQU4wmbranLGkjSMFGH3QVOzLr3sZ9dBrf+Fr1QNZ59
y8qBWefox4GHOglTa8wXyD6QMbO7XP41cQlQEVoUZ9nsxDOAfHn7UF6zKVlr2XeQ
NBoLmRSCIVhqXHTHfJIqdz/OFm3MlEYLot/tDB2m23A6IntDwvl1d2IzMhjmlDDR
PVcTZVT2LOiT/84rnNi0RKsv0wEFeWdmnd6RQg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:37 2026 by rpki-client