Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa
File:                     3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (raw, json)
Hash identifier:          71ufcrIpd5/EvIBttOzN/s4e00TuL2D++Ya5GnzoM0s=
Subject key identifier:   78:F6:83:C0:C5:15:E8:F0:0D:B2:68:9E:B6:8B:39:2D:81:9F:87:C1
Certificate issuer:       /CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
Certificate serial:       3834148A06EDD63D81A6EF9C99624A2D868979EE
Authority key identifier: 75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa
Signing time:             Sun 03 May 2026 02:24:59 +0000
ROA not before:           Sun 03 May 2026 02:19:59 +0000
ROA not after:            Sun 02 May 2027 02:24:59 +0000
asID:                     141935
IP address blocks:        103.166.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl
                          rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:34:14:8a:06:ed:d6:3d:81:a6:ef:9c:99:62:4a:2d:86:89:79:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
        Validity
            Not Before: May  3 02:19:59 2026 GMT
            Not After : May  2 02:24:59 2027 GMT
        Subject: CN=78F683C0C515E8F00DB2689EB68B392D819F87C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:31:41:b3:99:e7:60:25:4a:3f:63:ab:35:
                    dc:f7:3e:bd:d5:d8:82:aa:e8:04:c6:39:42:fb:b9:
                    bb:1c:bf:89:f8:0b:ac:b9:ac:2c:31:93:f9:17:d9:
                    17:1d:a9:26:af:e2:e2:46:7e:43:2c:10:15:6c:81:
                    de:b7:37:e2:6d:55:31:b2:50:ad:28:77:3c:a2:cd:
                    1a:a4:35:e6:01:19:65:ea:88:d4:57:9b:42:ad:e7:
                    a5:43:d2:f0:14:e3:6f:d7:ff:3f:ed:0c:1c:22:73:
                    26:71:cc:ff:a3:14:23:63:7f:37:88:8c:86:a3:22:
                    6b:25:18:9e:b2:d8:46:dd:65:81:80:19:43:be:41:
                    58:71:25:3f:cb:b0:c6:2e:38:ec:ff:49:4f:c2:ba:
                    9a:85:b7:cc:03:b1:29:35:7f:6f:87:da:5f:57:6d:
                    b2:34:cf:9b:48:4a:fc:19:83:2f:a6:d8:38:61:85:
                    4c:53:5e:75:74:fa:6b:e9:89:0d:88:3f:66:29:35:
                    85:a9:a6:0a:ec:67:4c:53:18:ba:50:ca:e7:90:3c:
                    55:6a:68:44:5c:69:b9:73:2a:9a:89:40:28:e6:05:
                    a1:06:20:f4:85:ac:3b:30:d9:bb:d6:f5:b4:83:1b:
                    b1:4c:1e:72:f2:b1:cc:b5:42:eb:4d:4e:6a:95:a8:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F6:83:C0:C5:15:E8:F0:0D:B2:68:9E:B6:8B:39:2D:81:9F:87:C1
            X509v3 Authority Key Identifier:
                keyid:75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f2:89:77:dd:ba:8f:52:81:fa:6b:a8:53:30:34:ea:3e:3a:
         fe:08:23:58:f8:d1:4f:24:e9:27:b0:67:56:1c:69:c2:82:96:
         43:0a:b3:f5:0e:04:76:a6:44:14:70:e6:45:7a:e6:b0:d7:73:
         b5:63:23:a1:cb:72:a3:79:0d:4d:54:db:e6:72:b2:f7:e8:7e:
         92:a8:e8:60:70:89:33:03:bd:aa:c9:5e:aa:ce:b7:39:95:9b:
         6b:0c:54:df:a2:7b:4a:42:74:f1:7e:70:e0:80:bf:dd:fd:bf:
         2b:3d:c8:ff:2a:ac:5a:48:d6:2b:8e:38:fa:fd:ff:c2:8b:25:
         73:dd:fc:80:0d:c0:e2:01:54:60:57:9d:b7:73:f7:c5:1d:22:
         40:fe:44:20:bd:2e:94:9a:3b:ec:ed:83:db:83:97:52:5e:d5:
         dc:07:c5:91:aa:f6:cb:b7:56:34:79:c7:6c:c4:9e:ed:92:2c:
         b2:6b:8b:21:ea:fd:91:9e:e0:80:28:b0:34:fe:b0:9b:d0:ae:
         df:43:46:e6:e0:7c:2e:3e:7e:61:1e:50:fe:54:bb:1f:ac:ee:
         4b:5d:92:8c:87:f8:b6:da:21:1a:a5:53:b0:cc:58:aa:9a:a7:
         ee:17:90:99:f8:45:39:19:db:a9:c5:b7:a9:2e:cc:d1:b5:19:
         1a:5a:d4:d4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUODQUigbt1j2Bpu+cmWJKLYaJee4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5OTFDNDYzRkM3OTYxRUQzMDVFRDk4OUFBQTRDMEVB
MkMwQjMwRTAeFw0yNjA1MDMwMjE5NTlaFw0yNzA1MDIwMjI0NTlaMDMxMTAvBgNV
BAMTKDc4RjY4M0MwQzUxNUU4RjAwREIyNjg5RUI2OEIzOTJEODE5Rjg3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GjFBs5nnYCVKP2OrNdz3Pr3V
2IKq6ATGOUL7ubscv4n4C6y5rCwxk/kX2RcdqSav4uJGfkMsEBVsgd63N+JtVTGy
UK0odzyizRqkNeYBGWXqiNRXm0Kt56VD0vAU42/X/z/tDBwicyZxzP+jFCNjfzeI
jIajImslGJ6y2EbdZYGAGUO+QVhxJT/LsMYuOOz/SU/CupqFt8wDsSk1f2+H2l9X
bbI0z5tISvwZgy+m2DhhhUxTXnV0+mvpiQ2IP2YpNYWppgrsZ0xTGLpQyueQPFVq
aERcablzKpqJQCjmBaEGIPSFrDsw2bvW9bSDG7FMHnLyscy1QutNTmqVqDjnAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUePaDwMUV6PANsmietos5LYGfh8EwHwYDVR0j
BBgwFoAUdZkcRj/Hlh7TBe2YmqpMDqLAsw4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzQ5ZGM1ZWItMzI2MC00MjhhLWE2YzAtZGMwZjYzNmIzMzA3LzAvNzU5OTFDNDYz
RkM3OTYxRUQzMDVFRDk4OUFBQTRDMEVBMkMwQjMwRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NTk5MUM0NjNGQzc5NjFFRDMwNUVEOTg5QUFBNEMwRUEyQzBC
MzBFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM0OWRjNWViLTMyNjAtNDI4YS1h
NmMwLWRjMGY2MzZiMzMwNy8wLzMxMzAzMzJlMzEzNjM2MmUzNDM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6YtMA0GCSqG
SIb3DQEBCwUAA4IBAQBv8ol33bqPUoH6a6hTMDTqPjr+CCNY+NFPJOknsGdWHGnC
gpZDCrP1DgR2pkQUcOZFeuaw13O1YyOhy3KjeQ1NVNvmcrL36H6SqOhgcIkzA72q
yV6qzrc5lZtrDFTfontKQnTxfnDggL/d/b8rPcj/KqxaSNYrjjj6/f/CiyVz3fyA
DcDiAVRgV523c/fFHSJA/kQgvS6Umjvs7YPbg5dSXtXcB8WRqvbLt1Y0ecdsxJ7t
kiyya4sh6v2RnuCAKLA0/rCb0K7fQ0bm4HwuPn5hHlD+VLsfrO5LXZKMh/i22iEa
pVOwzFiqmqfuF5CZ+EU5GdupxbepLszRtRkaWtTU
-----END CERTIFICATE-----
Generated at Wed May 13 08:39:22 2026 by rpki-client