Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa
File:                     3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (raw, json)
Hash identifier:          1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=
Subject key identifier:   3B:11:FD:E9:96:87:BD:7C:9D:E9:98:7A:F7:A1:21:A2:F5:08:A4:85
Certificate issuer:       /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC
Certificate serial:       2C9377E6BDE834109E7110972CA0D2A36E56E928
Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa
Signing time:             Sun 03 May 2026 02:29:31 +0000
ROA not before:           Sun 03 May 2026 02:24:31 +0000
ROA not after:            Sun 02 May 2027 02:29:31 +0000
asID:                     133832
IP address blocks:        103.58.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl
                          rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:93:77:e6:bd:e8:34:10:9e:71:10:97:2c:a0:d2:a3:6e:56:e9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC
        Validity
            Not Before: May  3 02:24:31 2026 GMT
            Not After : May  2 02:29:31 2027 GMT
        Subject: CN=3B11FDE99687BD7C9DE9987AF7A121A2F508A485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:5b:15:34:75:54:6d:79:b3:ec:21:95:36:
                    c9:a5:c0:20:09:47:de:1c:aa:69:81:99:17:fa:b5:
                    69:62:f3:38:3d:9c:3c:85:10:3a:cd:e9:dc:29:7b:
                    7c:02:e4:cd:66:26:7a:0b:d1:fb:d3:6e:1a:ac:c1:
                    0e:c9:fd:73:4a:5e:4c:6c:98:2c:46:46:cb:08:03:
                    ce:32:af:8d:19:79:63:f6:37:70:ac:62:0b:9d:31:
                    a4:3b:21:e8:f1:f5:c2:33:79:e2:c0:b4:83:74:27:
                    9e:9a:fd:e9:f5:40:15:b7:0c:1b:cb:6f:e5:f9:a0:
                    fd:ff:72:6d:5a:37:f2:13:52:a7:5d:5e:f8:bc:fa:
                    0b:2a:3f:a9:6e:82:b9:47:71:12:86:cc:6a:c6:55:
                    0e:da:e5:ae:0f:b0:eb:1b:f3:c7:b9:75:89:f0:3d:
                    6b:04:f6:87:05:83:2e:12:9f:4d:6b:a9:4b:63:bc:
                    a2:de:f0:01:b8:25:24:7d:65:a2:4f:53:22:c3:3e:
                    00:da:d4:aa:8c:18:2d:56:ec:6b:68:ff:4b:4b:cb:
                    36:f6:c0:43:6b:1d:15:53:5c:fd:f5:30:04:0a:ba:
                    e2:cf:f2:fd:83:76:68:c2:5e:4a:38:b4:02:fd:c9:
                    f5:ff:53:5f:bd:0e:2a:bb:49:af:e8:9f:fa:d4:05:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:11:FD:E9:96:87:BD:7C:9D:E9:98:7A:F7:A1:21:A2:F5:08:A4:85
            X509v3 Authority Key Identifier:
                keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:b8:33:ad:51:5a:44:fa:ce:81:10:72:5b:12:64:1f:90:
         4e:cf:87:b6:51:4a:aa:a1:15:2a:91:9c:80:23:a9:d1:8e:ac:
         4c:e6:ff:c1:f7:12:34:bb:4c:92:f0:02:2e:32:40:06:4b:69:
         5a:b6:71:a2:97:78:6a:e6:3a:c2:b5:bb:5f:2e:84:44:9b:6f:
         71:d9:d1:25:9c:3e:62:d4:d8:89:08:70:36:5f:0c:94:17:ab:
         ce:77:2a:70:60:96:de:e2:7a:66:6a:e3:2b:e2:34:78:be:51:
         bc:11:e4:b4:c1:3d:ce:5e:12:79:cb:26:d5:b1:19:c0:8b:f7:
         83:87:9a:cc:08:ec:11:df:b8:eb:94:3e:14:a2:22:17:b8:fa:
         a6:8f:22:1b:3a:39:38:61:63:7a:e8:f2:9b:dd:02:a9:1b:9a:
         71:ff:8a:1a:e6:8e:c4:2e:dc:a3:39:a6:0a:63:6c:48:b8:f0:
         37:04:bd:52:7f:1b:c5:28:18:68:99:70:8d:b2:1c:ab:29:70:
         79:ca:f4:7b:50:2b:6f:9f:5d:34:a1:d7:91:4e:dd:5a:ad:76:
         47:21:aa:64:a4:d9:f9:a5:d9:aa:29:9f:63:57:73:55:1d:0f:
         d5:45:c7:ec:8d:50:d6:26:d0:fa:b3:9e:03:5f:d7:b4:d4:0f:
         13:2e:59:3f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULJN35r3oNBCecRCXLKDSo25W6SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5QzcyNjRE
QTFFMjNCQzAeFw0yNjA1MDMwMjI0MzFaFw0yNzA1MDIwMjI5MzFaMDMxMTAvBgNV
BAMTKDNCMTFGREU5OTY4N0JEN0M5REU5OTg3QUY3QTEyMUEyRjUwOEE0ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0lsVNHVUbXmz7CGVNsmlwCAJ
R94cqmmBmRf6tWli8zg9nDyFEDrN6dwpe3wC5M1mJnoL0fvTbhqswQ7J/XNKXkxs
mCxGRssIA84yr40ZeWP2N3CsYgudMaQ7Iejx9cIzeeLAtIN0J56a/en1QBW3DBvL
b+X5oP3/cm1aN/ITUqddXvi8+gsqP6lugrlHcRKGzGrGVQ7a5a4PsOsb88e5dYnw
PWsE9ocFgy4Sn01rqUtjvKLe8AG4JSR9ZaJPUyLDPgDa1KqMGC1W7Gto/0tLyzb2
wENrHRVTXP31MAQKuuLP8v2DdmjCXko4tAL9yfX/U1+9Diq7Sa/on/rUBVYZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOxH96ZaHvXyd6Zh696EhovUIpIUwHwYDVR0j
BBgwFoAUo5AH8+Kii458C3qpJZxyZNoeI7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDNlNDE3N2QtODA5My00NDdjLTg3YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNF
MkEyOEI4RTdDMEI3QUE5MjU5QzcyNjREQTFFMjNCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMzkwMDdGM0UyQTI4QjhFN0MwQjdBQTkyNTlDNzI2NERBMUUy
M0JDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQzZTQxNzdkLTgwOTMtNDQ3Yy04
N2I1LWM3OWM4Y2I0YzczMy8wLzMxMzAzMzJlMzUzODJlMzEzMTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzpvMA0GCSqG
SIb3DQEBCwUAA4IBAQB83LgzrVFaRPrOgRByWxJkH5BOz4e2UUqqoRUqkZyAI6nR
jqxM5v/B9xI0u0yS8AIuMkAGS2latnGil3hq5jrCtbtfLoREm29x2dElnD5i1NiJ
CHA2XwyUF6vOdypwYJbe4npmauMr4jR4vlG8EeS0wT3OXhJ5yybVsRnAi/eDh5rM
COwR37jrlD4UoiIXuPqmjyIbOjk4YWN66PKb3QKpG5px/4oa5o7ELtyjOaYKY2xI
uPA3BL1SfxvFKBhomXCNshyrKXB5yvR7UCtvn100odeRTt1arXZHIapkpNn5pdmq
KZ9jV3NVHQ/VRcfsjVDWJtD6s54DX9e01A8TLlk/
-----END CERTIFICATE-----
Generated at Wed May 13 06:04:30 2026 by rpki-client