Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3130332e3234332e31302e302f32342d3234203d3e203536323334.roa
File:                     3130332e3234332e31302e302f32342d3234203d3e203536323334.roa (raw, json)
Hash identifier:          zufjgeZw/w05det8sEI0LnaWHbULyBgD0ra6w23cC5w=
Subject key identifier:   41:67:B0:4D:54:E7:0E:93:D5:45:D4:7C:3D:A1:62:7A:27:2F:EE:CD
Certificate issuer:       /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
Certificate serial:       3D3B56DD4BEAB4243280CAFC335DF53D22A292C0
Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3130332e3234332e31302e302f32342d3234203d3e203536323334.roa
Signing time:             Sun 03 May 2026 02:29:18 +0000
ROA not before:           Sun 03 May 2026 02:24:18 +0000
ROA not after:            Sun 02 May 2027 02:29:18 +0000
asID:                     56234
IP address blocks:        103.243.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl
                          rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3b:56:dd:4b:ea:b4:24:32:80:ca:fc:33:5d:f5:3d:22:a2:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
        Validity
            Not Before: May  3 02:24:18 2026 GMT
            Not After : May  2 02:29:18 2027 GMT
        Subject: CN=4167B04D54E70E93D545D47C3DA1627A272FEECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:f3:cc:0f:de:c9:31:00:e7:a2:5c:67:e8:
                    85:ec:64:b8:27:5e:9f:0f:e6:24:18:c7:4c:3c:51:
                    35:b0:a1:56:fe:53:92:28:0b:3d:e5:c4:a2:52:dc:
                    6c:31:58:96:1c:2c:57:1c:d7:3f:64:ea:19:92:11:
                    9d:27:76:44:b8:e8:8f:e4:0b:70:16:7a:c9:1c:9b:
                    b0:f9:8c:62:1a:f3:f0:24:01:1c:21:41:b6:e4:f6:
                    a8:b5:de:2c:c1:38:a4:44:42:7e:6b:09:7a:2c:47:
                    ad:cd:de:ed:35:81:7c:be:5b:e5:42:b4:42:21:c6:
                    63:c7:70:11:ff:c8:d1:88:1e:1b:00:f7:40:bb:ed:
                    8f:2d:aa:5f:02:28:54:f4:99:d2:d9:3e:56:11:1e:
                    35:7a:54:8e:00:84:18:78:78:5c:68:2e:2b:9b:a5:
                    e0:dd:aa:67:6c:e7:ff:b8:17:66:f0:e0:9a:88:e7:
                    91:9f:30:4b:2a:a8:14:b7:c3:20:cb:c9:03:8d:e4:
                    af:b2:fa:a1:63:ac:89:ba:03:8c:2c:78:9d:91:af:
                    06:7e:14:c1:7b:1d:4f:f7:8b:37:c9:a4:43:05:1a:
                    22:2d:8b:c4:1d:a1:78:9e:b1:ca:16:c9:0a:50:95:
                    6c:9f:b2:21:c2:a6:f7:1a:b7:2a:90:d5:c7:84:27:
                    44:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:67:B0:4D:54:E7:0E:93:D5:45:D4:7C:3D:A1:62:7A:27:2F:EE:CD
            X509v3 Authority Key Identifier:
                keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3130332e3234332e31302e302f32342d3234203d3e203536323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:88:2a:03:da:cc:a0:16:be:d8:fe:ba:43:3f:76:84:11:9e:
         3e:15:c3:d2:8e:57:cb:1c:da:7c:c6:94:a4:f7:f5:fe:ac:e3:
         e6:b5:46:4e:f9:d7:b6:82:77:8f:34:03:3a:a3:bf:d9:6f:3e:
         2f:38:32:35:07:77:9d:7f:c2:5e:a4:67:b6:40:76:c4:d9:58:
         06:b3:58:65:c3:3a:cc:53:49:98:da:94:7c:d6:b8:ff:c6:4f:
         0a:38:85:7f:72:03:ed:a0:98:93:a4:7f:94:dd:3e:bc:18:6a:
         03:17:5a:04:70:82:fa:06:3f:62:27:58:72:98:d1:43:89:76:
         9d:81:21:ba:68:a5:5e:ae:ea:ab:ee:1e:e0:ac:15:c5:b7:50:
         fc:2f:d8:59:4c:26:84:e0:38:46:e2:76:8e:5d:31:6f:af:43:
         0f:56:38:28:39:75:3d:6b:38:f2:c9:c2:ea:80:fd:f2:cf:e5:
         86:06:c9:17:8e:9e:f6:6f:a7:3c:af:8e:3e:42:c8:ee:55:d4:
         f3:6e:ff:fe:a5:a3:0e:c7:86:8c:4e:0f:ec:38:1b:5a:07:1b:
         e1:8d:14:4a:e1:d4:18:34:87:08:2f:d4:f6:c7:3b:e4:93:6b:
         9e:c6:6b:b4:2e:b1:9d:5c:a0:d7:ce:c7:87:de:81:6d:86:dd:
         64:0a:66:1b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPTtW3UvqtCQygMr8M131PSKiksAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5
RDRCNkFEQTAeFw0yNjA1MDMwMjI0MThaFw0yNzA1MDIwMjI5MThaMDMxMTAvBgNV
BAMTKDQxNjdCMDRENTRFNzBFOTNENTQ1RDQ3QzNEQTE2MjdBMjcyRkVFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+/PMD97JMQDnolxn6IXsZLgn
Xp8P5iQYx0w8UTWwoVb+U5IoCz3lxKJS3GwxWJYcLFcc1z9k6hmSEZ0ndkS46I/k
C3AWeskcm7D5jGIa8/AkARwhQbbk9qi13izBOKREQn5rCXosR63N3u01gXy+W+VC
tEIhxmPHcBH/yNGIHhsA90C77Y8tql8CKFT0mdLZPlYRHjV6VI4AhBh4eFxoLiub
peDdqmds5/+4F2bw4JqI55GfMEsqqBS3wyDLyQON5K+y+qFjrIm6A4wseJ2RrwZ+
FMF7HU/3izfJpEMFGiIti8QdoXiescoWyQpQlWyfsiHCpvcatyqQ1ceEJ0RNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQWewTVTnDpPVRdR8PaFieicv7s0wHwYDVR0j
BBgwFoAUkkJ5kIpHwQEbS2pUqgXHvZ1LatowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDJjN2RmZDQtZTUxMC00NzA3LTk4MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4
QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5RDRCNkFEQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MjQyNzk5MDhBNDdDMTAxMUI0QjZBNTRBQTA1QzdCRDlENEI2
QURBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQyYzdkZmQ0LWU1MTAtNDcwNy05
ODE4LWEyYjFlMmM2YjIxNi8wLzMxMzAzMzJlMzIzNDMzMmUzMTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfzCjANBgkqhkiG
9w0BAQsFAAOCAQEApogqA9rMoBa+2P66Qz92hBGePhXD0o5XyxzafMaUpPf1/qzj
5rVGTvnXtoJ3jzQDOqO/2W8+LzgyNQd3nX/CXqRntkB2xNlYBrNYZcM6zFNJmNqU
fNa4/8ZPCjiFf3ID7aCYk6R/lN0+vBhqAxdaBHCC+gY/YidYcpjRQ4l2nYEhumil
Xq7qq+4e4KwVxbdQ/C/YWUwmhOA4RuJ2jl0xb69DD1Y4KDl1PWs48snC6oD98s/l
hgbJF46e9m+nPK+OPkLI7lXU827//qWjDseGjE4P7DgbWgcb4Y0USuHUGDSHCC/U
9sc75JNrnsZrtC6xnVyg187Hh96BbYbdZApmGw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:10:28 2026 by rpki-client