Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa
File:                     3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier:          8nfqVf8K62If0oVwSrWfcY/25sPP59HiQxAYVsP0CsI=
Subject key identifier:   32:5B:73:3D:A7:8D:D3:23:B0:ED:51:48:EC:B4:8A:09:4A:BB:C6:AB
Certificate issuer:       /CN=51D2872389FAB3963625D56D9C53751581B4095A
Certificate serial:       39B0951CC45C5CB3A538358028690C8065ED69D8
Authority key identifier: 51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa
Signing time:             Sun 03 May 2026 02:28:44 +0000
ROA not before:           Sun 03 May 2026 02:23:44 +0000
ROA not after:            Sun 02 May 2027 02:28:44 +0000
asID:                     59133
IP address blocks:        103.243.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
                          rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b0:95:1c:c4:5c:5c:b3:a5:38:35:80:28:69:0c:80:65:ed:69:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51D2872389FAB3963625D56D9C53751581B4095A
        Validity
            Not Before: May  3 02:23:44 2026 GMT
            Not After : May  2 02:28:44 2027 GMT
        Subject: CN=325B733DA78DD323B0ED5148ECB48A094ABBC6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:46:44:b0:fc:06:02:43:d3:65:3f:67:8c:
                    35:d2:00:c9:25:14:26:c5:03:46:60:99:ca:67:4c:
                    60:d9:9e:77:0f:c9:d6:ca:03:24:82:36:69:bd:91:
                    c4:74:25:3c:02:37:d2:bd:8a:82:71:64:9a:14:77:
                    32:9d:50:52:e3:de:3a:51:aa:8d:20:92:40:f0:0d:
                    70:42:cc:cb:78:af:59:ad:0f:88:2f:73:8e:a8:31:
                    12:07:f7:a4:90:eb:19:ca:35:60:04:63:19:11:47:
                    0f:c6:0d:14:ea:0b:62:8d:44:dd:70:e9:8f:8a:12:
                    4d:ff:1b:9d:4b:0a:42:24:08:a2:99:47:e5:12:2f:
                    cd:d6:98:9b:b4:f8:34:ad:40:e9:44:19:cc:f3:be:
                    4f:b0:c3:92:0d:81:d6:74:66:95:4b:ac:f6:97:de:
                    0b:3d:b5:fc:fa:95:32:20:8c:1c:e1:5b:5a:a7:a4:
                    1b:a3:6f:04:25:7b:2f:32:64:a5:94:d8:02:3a:ac:
                    ab:e0:67:e7:82:46:af:75:dd:6c:77:86:b2:46:ac:
                    2e:62:02:94:f5:96:a3:62:33:07:a8:8a:d7:d7:6f:
                    ac:af:8e:94:41:b7:4f:a7:a5:ee:eb:c6:41:e3:ee:
                    8a:62:26:15:12:28:4f:ea:9b:f0:52:9f:90:42:f9:
                    04:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5B:73:3D:A7:8D:D3:23:B0:ED:51:48:EC:B4:8A:09:4A:BB:C6:AB
            X509v3 Authority Key Identifier:
                keyid:51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:ce:3c:33:32:9c:41:b3:6c:62:ec:5c:fd:31:dc:37:93:
         01:0c:49:f3:65:9a:91:97:62:fd:97:eb:b5:d6:e6:e8:2a:12:
         a7:48:d5:cf:0f:99:bd:91:ae:2b:97:a1:09:eb:65:e7:c8:e1:
         15:48:4c:78:2b:24:ca:98:e2:bc:02:aa:24:b1:fd:f7:49:4e:
         76:a7:60:85:ec:88:87:37:6c:9e:47:12:a9:4c:f8:3c:4f:fa:
         bc:9e:4b:f2:03:60:41:8f:f3:2d:0c:1b:ab:80:e9:fc:55:85:
         ac:d9:29:92:b2:31:2f:b1:0e:2a:bc:5d:29:67:56:88:ac:e6:
         c2:d7:54:d7:ca:66:13:b0:8b:81:c6:11:d0:7c:b9:87:19:91:
         75:d6:ce:58:f1:cb:36:ee:eb:3d:10:05:c1:39:6d:85:ce:7a:
         70:83:5b:44:b4:36:4b:4a:21:bd:eb:1e:c6:66:7d:f7:5f:b3:
         c7:54:d0:bd:55:11:c2:89:22:48:2f:09:12:77:81:af:86:fa:
         69:03:8c:ca:e7:4a:d2:c6:d9:8e:26:af:d6:18:ca:d3:36:15:
         fa:98:29:67:e1:6e:09:1a:3e:51:84:0c:d9:e3:42:c7:43:f3:
         a1:af:85:73:c5:f8:28:b2:2d:c9:56:5f:4f:79:f4:33:08:cc:
         d3:80:1b:83
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUObCVHMRcXLOlODWAKGkMgGXtadgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFEMjg3MjM4OUZBQjM5NjM2MjVENTZEOUM1Mzc1MTU4
MUI0MDk1QTAeFw0yNjA1MDMwMjIzNDRaFw0yNzA1MDIwMjI4NDRaMDMxMTAvBgNV
BAMTKDMyNUI3MzNEQTc4REQzMjNCMEVENTE0OEVDQjQ4QTA5NEFCQkM2QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/EZEsPwGAkPTZT9njDXSAMkl
FCbFA0ZgmcpnTGDZnncPydbKAySCNmm9kcR0JTwCN9K9ioJxZJoUdzKdUFLj3jpR
qo0gkkDwDXBCzMt4r1mtD4gvc46oMRIH96SQ6xnKNWAEYxkRRw/GDRTqC2KNRN1w
6Y+KEk3/G51LCkIkCKKZR+USL83WmJu0+DStQOlEGczzvk+ww5INgdZ0ZpVLrPaX
3gs9tfz6lTIgjBzhW1qnpBujbwQley8yZKWU2AI6rKvgZ+eCRq913Wx3hrJGrC5i
ApT1lqNiMweoitfXb6yvjpRBt0+npe7rxkHj7opiJhUSKE/qm/BSn5BC+QQHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUMltzPaeN0yOw7VFI7LSKCUq7xqswHwYDVR0j
BBgwFoAUUdKHI4n6s5Y2JdVtnFN1FYG0CVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDAwZWM0M2ItNDMzZC00MDdkLWJkZWUtZWVhNjIxNmE2ZmY0LzAvNTFEMjg3MjM4
OUZBQjM5NjM2MjVENTZEOUM1Mzc1MTU4MUI0MDk1QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MUQyODcyMzg5RkFCMzk2MzYyNUQ1NkQ5QzUzNzUxNTgxQjQw
OTVBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQwMGVjNDNiLTQzM2QtNDA3ZC1i
ZGVlLWVlYTYyMTZhNmZmNC8wLzMxMzAzMzJlMzIzNDMzMmUzMjM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzEzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/P2MA0GCSqG
SIb3DQEBCwUAA4IBAQCLaM48MzKcQbNsYuxc/THcN5MBDEnzZZqRl2L9l+u11ubo
KhKnSNXPD5m9ka4rl6EJ62XnyOEVSEx4KyTKmOK8Aqoksf33SU52p2CF7IiHN2ye
RxKpTPg8T/q8nkvyA2BBj/MtDBurgOn8VYWs2SmSsjEvsQ4qvF0pZ1aIrObC11TX
ymYTsIuBxhHQfLmHGZF11s5Y8cs27us9EAXBOW2Fznpwg1tEtDZLSiG96x7GZn33
X7PHVNC9VRHCiSJILwkSd4GvhvppA4zK50rSxtmOJq/WGMrTNhX6mCln4W4JGj5R
hAzZ40LHQ/Ohr4Vzxfgosi3JVl9PefQzCMzTgBuD
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:40 2026 by rpki-client