Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32352e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32352e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          SFKf2YeTUegvyDEl1rZlcJoG3esfQ3DWN5bFQUzfaIY=
Subject key identifier:   62:F4:64:49:85:8F:13:56:9B:F7:92:FF:45:9E:CD:EE:6A:DB:BF:A2
Certificate issuer:       /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0
Certificate serial:       10E415F8115FD8336ED4A56EECCB123F6C637DF9
Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32352e302f32342d3234203d3e203633383639.roa
Signing time:             Sun 03 May 2026 02:25:46 +0000
ROA not before:           Sun 03 May 2026 02:20:46 +0000
ROA not after:            Sun 02 May 2027 02:25:46 +0000
asID:                     63869
IP address blocks:        103.50.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl
                          rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e4:15:f8:11:5f:d8:33:6e:d4:a5:6e:ec:cb:12:3f:6c:63:7d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0
        Validity
            Not Before: May  3 02:20:46 2026 GMT
            Not After : May  2 02:25:46 2027 GMT
        Subject: CN=62F46449858F13569BF792FF459ECDEE6ADBBFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:96:c2:b5:c9:90:10:67:72:3c:8f:50:ae:
                    cb:17:ac:01:8d:ae:89:b9:13:76:46:c5:4a:ba:23:
                    54:7a:81:d2:df:37:40:cb:62:1b:59:ee:26:be:8f:
                    8b:b5:82:e9:9e:3a:c5:5b:48:0c:50:2e:1c:f4:6e:
                    0e:d0:37:b6:a9:be:33:5f:9f:25:87:c9:12:2d:31:
                    0e:67:38:b8:24:ca:0e:47:a8:8d:08:92:b4:aa:33:
                    f9:c1:92:c2:0e:41:c2:e7:a8:d8:2b:8f:38:97:8e:
                    69:36:2d:c0:98:b3:ec:19:3c:12:6e:81:dd:51:d6:
                    c0:50:73:d7:ce:69:e0:6b:b0:12:53:72:05:76:b8:
                    fc:b3:54:5b:ff:05:16:19:0a:0c:2e:32:a1:13:0b:
                    55:b3:c4:2e:60:ed:03:18:51:67:e1:02:6c:d5:7d:
                    df:31:ee:11:e7:85:0e:9b:dc:83:bf:24:f6:ca:41:
                    5f:bc:15:13:e3:f7:0c:52:8b:fa:73:14:5c:b3:df:
                    0c:5d:a3:13:b9:2a:44:b5:3a:2a:90:ae:e3:cb:ba:
                    df:ca:33:7a:32:92:fe:71:32:86:b4:49:b7:5b:0c:
                    50:ca:a6:a3:ec:d9:7a:09:89:0c:27:3d:05:d1:3f:
                    90:99:26:09:e3:1a:52:dd:26:f7:ad:e0:9f:25:0a:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:64:49:85:8F:13:56:9B:F7:92:FF:45:9E:CD:EE:6A:DB:BF:A2
            X509v3 Authority Key Identifier:
                keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32352e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f5:97:47:5e:60:f7:f9:f0:7f:d5:94:ec:0f:23:0d:e5:70:
         22:59:9a:8e:26:f2:4f:4d:45:55:46:45:2b:4c:d8:c0:49:5d:
         85:0d:85:0a:2e:e4:88:8f:0a:5a:7a:83:62:d6:cb:0d:10:79:
         4f:6e:00:2c:7d:91:d1:96:06:ad:90:4c:37:1a:53:f7:39:c9:
         bc:4d:5e:d9:95:cf:58:4c:ef:23:0a:ff:6a:f8:a2:66:8d:8b:
         c9:7a:9a:74:6b:16:23:d2:cb:76:c1:8b:b9:b8:b5:53:a0:30:
         87:a2:92:29:50:07:9f:9f:25:55:ff:49:fe:4c:da:c4:2e:59:
         21:66:4b:de:8e:6f:05:1f:00:f7:ed:4d:46:46:21:3c:2e:74:
         24:32:a8:e0:d1:55:34:d1:71:65:ae:58:ff:39:57:7d:2a:c0:
         0a:11:fa:41:94:76:1d:b7:ed:2f:f9:e1:f4:21:cb:0b:a0:9f:
         94:cc:07:d3:97:bf:dd:0a:61:31:a3:96:31:5e:0d:83:c5:9f:
         f5:cc:9b:ee:3a:a6:8a:d3:f2:5a:e3:ce:b7:1d:0d:45:48:54:
         28:bb:15:ac:5c:ac:f3:33:0b:1b:9b:5c:61:a3:c9:68:fd:73:
         03:00:73:c2:db:03:44:7c:f1:74:7b:f5:ee:13:95:c3:71:9a:
         a4:f2:2a:dd
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUEOQV+BFf2DNu1KVu7MsSP2xjffkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0
QjRDODdGMDAeFw0yNjA1MDMwMjIwNDZaFw0yNzA1MDIwMjI1NDZaMDMxMTAvBgNV
BAMTKDYyRjQ2NDQ5ODU4RjEzNTY5QkY3OTJGRjQ1OUVDREVFNkFEQkJGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhZbCtcmQEGdyPI9QrssXrAGN
rom5E3ZGxUq6I1R6gdLfN0DLYhtZ7ia+j4u1gumeOsVbSAxQLhz0bg7QN7apvjNf
nyWHyRItMQ5nOLgkyg5HqI0IkrSqM/nBksIOQcLnqNgrjziXjmk2LcCYs+wZPBJu
gd1R1sBQc9fOaeBrsBJTcgV2uPyzVFv/BRYZCgwuMqETC1WzxC5g7QMYUWfhAmzV
fd8x7hHnhQ6b3IO/JPbKQV+8FRPj9wxSi/pzFFyz3wxdoxO5KkS1OiqQruPLut/K
M3oykv5xMoa0SbdbDFDKpqPs2XoJiQwnPQXRP5CZJgnjGlLdJvet4J8lCgnhAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUYvRkSYWPE1ab95L/RZ7N7mrbv6IwHwYDVR0j
BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3
MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4
N0YwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM3NjY4NTQxLWQ2YzYtNDA5ZS04
YWQxLTVlODlhNGIyODUwZS8wLzMxMzAzMzJlMzUzMDJlMzIzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnMhkwDQYJKoZIhvcN
AQELBQADggEBAD31l0deYPf58H/VlOwPIw3lcCJZmo4m8k9NRVVGRStM2MBJXYUN
hQou5IiPClp6g2LWyw0QeU9uACx9kdGWBq2QTDcaU/c5ybxNXtmVz1hM7yMK/2r4
omaNi8l6mnRrFiPSy3bBi7m4tVOgMIeikilQB5+fJVX/Sf5M2sQuWSFmS96ObwUf
APftTUZGITwudCQyqODRVTTRcWWuWP85V30qwAoR+kGUdh237S/54fQhywugn5TM
B9OXv90KYTGjljFeDYPFn/XMm+46porT8lrjzrcdDUVIVCi7FaxcrPMzCxubXGGj
yWj9cwMAc8LbA0R88XR79e4TlcNxmqTyKt0=
-----END CERTIFICATE-----
Generated at Wed May 13 05:24:41 2026 by rpki-client