Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa
File:                     3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (raw, json)
Hash identifier:          yJtiSShonhAnbGvzDWyHd3hC3zai87d1b+TqGDBagOs=
Subject key identifier:   6C:D3:17:C4:9E:55:69:EB:7F:5B:B7:A7:D1:68:BF:7C:B3:D2:0F:33
Certificate issuer:       /CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
Certificate serial:       31C7D5C86063EDC0C53D7C1C2958184E3DE27C21
Authority key identifier: E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa
Signing time:             Sun 03 May 2026 02:29:02 +0000
ROA not before:           Sun 03 May 2026 02:24:02 +0000
ROA not after:            Sun 02 May 2027 02:29:02 +0000
asID:                     150940
IP address blocks:        103.101.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl
                          rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c7:d5:c8:60:63:ed:c0:c5:3d:7c:1c:29:58:18:4e:3d:e2:7c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
        Validity
            Not Before: May  3 02:24:02 2026 GMT
            Not After : May  2 02:29:02 2027 GMT
        Subject: CN=6CD317C49E5569EB7F5BB7A7D168BF7CB3D20F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:99:36:5e:b2:01:41:84:11:49:24:e1:e3:a5:
                    6a:a1:b0:70:47:18:b4:6a:72:de:27:32:38:d2:a3:
                    14:de:a9:02:9d:aa:4f:40:a8:2d:ac:6b:91:8e:9f:
                    53:83:16:6e:f2:ee:cf:16:83:44:3c:78:20:c7:8d:
                    a3:55:f3:78:98:e0:11:6e:5a:cb:28:c1:74:9f:2b:
                    51:7e:3c:ca:b4:9e:64:09:e3:32:02:80:08:e1:1f:
                    a6:50:6d:a8:ed:27:0f:b4:1d:67:1f:d6:b2:ff:f6:
                    ec:6f:3c:8a:b6:5d:cc:b1:ff:e3:67:73:9a:85:f4:
                    d0:a3:b3:50:32:75:a7:54:c3:4c:8a:87:f5:ac:82:
                    4c:05:c2:c5:47:c0:c0:df:cb:1b:6e:06:e2:03:c4:
                    a4:f9:ed:27:ca:f8:90:03:fc:e3:7c:24:4b:e2:c1:
                    cf:e4:d2:75:32:b9:2d:7a:40:ec:fa:cb:08:8d:ba:
                    f3:c2:8d:03:06:83:27:90:9d:a5:8f:5f:c0:8f:46:
                    e5:fb:2b:b2:52:d9:be:b4:0f:38:f7:c9:e6:40:56:
                    14:68:c9:a3:7b:16:a3:04:4c:b1:88:4d:49:55:a4:
                    65:0f:72:d6:ad:07:ad:10:5c:01:80:24:bc:00:73:
                    b8:66:6b:10:e7:07:c4:1d:5b:66:14:0b:59:03:ae:
                    fb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D3:17:C4:9E:55:69:EB:7F:5B:B7:A7:D1:68:BF:7C:B3:D2:0F:33
            X509v3 Authority Key Identifier:
                keyid:E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:93:d3:27:77:da:97:23:76:d7:fe:8a:b2:58:a2:e8:4e:
         a2:b9:3d:87:a3:d9:39:b6:f3:7d:84:5c:e7:f7:8e:4e:49:e6:
         90:14:1d:f8:a2:54:6a:36:f9:55:30:4f:f5:1a:70:a7:1a:63:
         d6:ef:b2:bb:b8:1a:1e:bb:d5:98:61:63:cd:4c:96:e8:60:6f:
         90:d3:cc:2a:12:10:e2:e2:98:f2:78:1a:00:e0:ac:26:95:63:
         bb:95:fc:ab:b1:47:07:68:da:ef:0d:bb:15:03:7d:1e:fa:84:
         08:03:02:3e:6e:b7:e6:79:68:1e:a2:84:10:ea:70:95:95:6d:
         b7:57:13:dc:29:0e:00:fc:31:58:e4:32:50:8b:17:be:fa:6b:
         b1:13:e2:e4:d0:ae:4b:49:19:54:c4:9f:f3:9d:b8:01:b6:b4:
         46:71:e7:49:67:15:23:2f:d5:94:21:24:28:6e:34:1c:53:ba:
         ba:61:a7:59:69:67:0c:15:70:1f:eb:74:b9:e0:14:91:cf:a6:
         6b:f7:2a:f0:0f:76:55:39:6d:e1:95:1e:17:ff:a5:16:13:b9:
         08:58:e0:e3:3d:35:eb:1f:57:95:f6:99:ea:36:79:33:56:ee:
         21:3c:75:7f:29:59:27:bd:59:68:db:d6:0d:ca:22:19:83:b4:
         a2:be:c1:f4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMcfVyGBj7cDFPXwcKVgYTj3ifCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyNTRFNkY4RTNFRjFGM0UyODNEMzIyRkMzN0Q4MEZF
MDZDRkNDRjAeFw0yNjA1MDMwMjI0MDJaFw0yNzA1MDIwMjI5MDJaMDMxMTAvBgNV
BAMTKDZDRDMxN0M0OUU1NTY5RUI3RjVCQjdBN0QxNjhCRjdDQjNEMjBGMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmTZesgFBhBFJJOHjpWqhsHBH
GLRqct4nMjjSoxTeqQKdqk9AqC2sa5GOn1ODFm7y7s8Wg0Q8eCDHjaNV83iY4BFu
WssowXSfK1F+PMq0nmQJ4zICgAjhH6ZQbajtJw+0HWcf1rL/9uxvPIq2Xcyx/+Nn
c5qF9NCjs1AydadUw0yKh/WsgkwFwsVHwMDfyxtuBuIDxKT57SfK+JAD/ON8JEvi
wc/k0nUyuS16QOz6ywiNuvPCjQMGgyeQnaWPX8CPRuX7K7JS2b60Dzj3yeZAVhRo
yaN7FqMETLGITUlVpGUPctatB60QXAGAJLwAc7hmaxDnB8QdW2YUC1kDrvsbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbNMXxJ5Vaet/W7en0Wi/fLPSDzMwHwYDVR0j
BBgwFoAU5iVOb44+8fPig9Mi/DfYD+Bs/M8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDE1N2M5YWMtNTJkYi00ZGJhLWFjNzctODQ1ZTJkZGQ4ODc5LzAvRTYyNTRFNkY4
RTNFRjFGM0UyODNEMzIyRkMzN0Q4MEZFMDZDRkNDRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNjI1NEU2RjhFM0VGMUYzRTI4M0QzMjJGQzM3RDgwRkUwNkNG
Q0NGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQxNTdjOWFjLTUyZGItNGRiYS1h
Yzc3LTg0NWUyZGRkODg3OS8wLzMxMzAzMzJlMzEzMDMxMmUzOTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2VgMA0GCSqG
SIb3DQEBCwUAA4IBAQCCXpPTJ3falyN21/6Kslii6E6iuT2Ho9k5tvN9hFzn945O
SeaQFB34olRqNvlVME/1GnCnGmPW77K7uBoeu9WYYWPNTJboYG+Q08wqEhDi4pjy
eBoA4KwmlWO7lfyrsUcHaNrvDbsVA30e+oQIAwI+brfmeWgeooQQ6nCVlW23VxPc
KQ4A/DFY5DJQixe++muxE+Lk0K5LSRlUxJ/znbgBtrRGcedJZxUjL9WUISQobjQc
U7q6YadZaWcMFXAf63S54BSRz6Zr9yrwD3ZVOW3hlR4X/6UWE7kIWODjPTXrH1eV
9pnqNnkzVu4hPHV/KVknvVlo29YNyiIZg7SivsH0
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:19 2026 by rpki-client