Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
File:                     3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (raw, json)
Hash identifier:          JR5WOntI+i6T1zRjrN8zT02s0LTFAvw0fmSCSLj0TTI=
Subject key identifier:   55:FE:41:FB:A6:09:32:A5:28:7B:8C:75:5A:0B:B6:AA:1A:DF:F8:FF
Certificate issuer:       /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9
Certificate serial:       252668CB986DBA4B8206B0197D85DE07386A60D7
Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
Signing time:             Sun 03 May 2026 02:31:04 +0000
ROA not before:           Sun 03 May 2026 02:26:04 +0000
ROA not after:            Sun 02 May 2027 02:31:04 +0000
asID:                     64297
IP address blocks:        103.77.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl
                          rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:26:68:cb:98:6d:ba:4b:82:06:b0:19:7d:85:de:07:38:6a:60:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9
        Validity
            Not Before: May  3 02:26:04 2026 GMT
            Not After : May  2 02:31:04 2027 GMT
        Subject: CN=55FE41FBA60932A5287B8C755A0BB6AA1ADFF8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:45:10:50:52:46:5f:b2:a4:a6:c8:18:11:
                    82:d4:87:45:c6:48:4c:30:32:65:8e:c7:27:bc:06:
                    6d:c9:b4:00:3f:df:98:e1:20:68:33:11:f3:26:72:
                    95:67:04:16:34:57:23:d9:39:46:e9:f8:45:dc:66:
                    32:a7:fd:e4:91:c4:ec:37:74:62:82:d1:f0:9f:c6:
                    94:8e:a5:fa:2c:24:96:0c:02:91:f3:01:75:9a:42:
                    d3:14:dd:4c:af:ce:df:2e:07:33:cd:5d:2a:d7:16:
                    f9:fb:24:fc:dc:1e:38:14:06:97:f5:6f:74:37:4d:
                    d8:2f:e9:71:36:21:e8:7e:cc:4b:19:8d:64:5a:1a:
                    fc:dd:3c:40:dd:aa:38:78:73:ec:9e:f9:ec:61:1f:
                    79:11:3c:cc:0b:12:fe:5e:ce:52:c8:63:97:75:a6:
                    ff:13:51:af:30:58:54:65:d3:a1:b2:a8:fc:0b:21:
                    b3:02:70:18:15:2c:85:8a:fe:ab:12:ec:d6:74:08:
                    39:2b:7e:fe:3d:2a:7b:12:68:32:a4:ec:0e:ee:c6:
                    67:59:5c:7b:ae:bb:50:d3:57:6b:6f:0b:cb:71:bf:
                    e1:af:cb:a2:0c:ea:03:a8:d1:ed:00:93:71:11:d7:
                    bc:4c:3f:b4:ef:74:a4:51:79:ac:e6:81:fc:94:8b:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FE:41:FB:A6:09:32:A5:28:7B:8C:75:5A:0B:B6:AA:1A:DF:F8:FF
            X509v3 Authority Key Identifier:
                keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:53:d7:1a:3d:0f:a6:af:b8:90:7d:4b:48:87:b5:d7:6d:4b:
         97:68:94:44:ce:ce:f1:ae:f3:ba:56:67:5f:c3:b6:95:8c:a2:
         27:72:60:f2:d4:48:a6:f2:cf:5f:3d:04:52:64:60:46:80:1b:
         a8:93:af:e4:8f:fe:3f:f2:ef:6f:3a:04:e9:7b:f9:87:33:32:
         0d:ab:dd:eb:57:7a:59:fe:93:2a:1f:ce:7a:2b:4e:3e:a8:58:
         c7:9a:11:4c:9d:cf:d8:a6:a1:21:a0:fb:9a:7e:7a:d7:90:80:
         f6:5f:f6:1b:8d:a9:7b:b9:74:dd:91:90:24:fc:bf:ad:71:67:
         be:63:36:65:a0:ac:64:bf:7a:d3:37:1d:9c:13:0f:b2:3d:3b:
         f8:ca:61:c9:8c:84:a1:2f:59:2c:a0:dc:d2:46:74:32:e1:ae:
         b4:d8:90:ff:98:99:ec:d6:cf:49:03:dd:87:b5:62:ff:22:5f:
         66:af:f7:a0:a8:7e:be:00:02:47:a6:6a:f8:b4:b5:df:56:be:
         0e:c6:fb:02:be:19:b0:1a:05:06:ab:4b:ec:84:44:3c:b3:f5:
         a3:52:b9:72:73:28:98:b7:20:d9:1c:5e:82:88:a4:6c:fd:ee:
         d2:20:ad:e4:28:24:7e:62:bb:a1:9b:5f:8f:1a:05:3d:0f:ed:
         17:ed:8d:ea
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJSZoy5htukuCBrAZfYXeBzhqYNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0
NjFFMUJGOTAeFw0yNjA1MDMwMjI2MDRaFw0yNzA1MDIwMjMxMDRaMDMxMTAvBgNV
BAMTKDU1RkU0MUZCQTYwOTMyQTUyODdCOEM3NTVBMEJCNkFBMUFERkY4RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBkUQUFJGX7KkpsgYEYLUh0XG
SEwwMmWOxye8Bm3JtAA/35jhIGgzEfMmcpVnBBY0VyPZOUbp+EXcZjKn/eSRxOw3
dGKC0fCfxpSOpfosJJYMApHzAXWaQtMU3Uyvzt8uBzPNXSrXFvn7JPzcHjgUBpf1
b3Q3Tdgv6XE2Ieh+zEsZjWRaGvzdPEDdqjh4c+ye+exhH3kRPMwLEv5ezlLIY5d1
pv8TUa8wWFRl06GyqPwLIbMCcBgVLIWK/qsS7NZ0CDkrfv49KnsSaDKk7A7uxmdZ
XHuuu1DTV2tvC8txv+Gvy6IM6gOo0e0Ak3ER17xMP7TvdKRReazmgfyUi/TjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVf5B+6YJMqUoe4x1Wgu2qhrf+P8wHwYDVR0j
BBgwFoAU2D1uOjRJYNkeEIhKoc7jo0YeG/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDlkYTdiNmEtNGUxYS00MWZmLWI4ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0Ez
NDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0NjFFMUJGOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EODNENkUzQTM0NDk2MEQ5MUUxMDg4NEFBMUNFRTNBMzQ2MUUx
QkY5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ5ZGE3YjZhLTRlMWEtNDFmZi1i
OGViLThjMzY0Y2QyNjRiMS8wLzMxMzAzMzJlMzczNzJlMzIzMDM0MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdNzDANBgkqhkiG
9w0BAQsFAAOCAQEAVVPXGj0Ppq+4kH1LSIe1121Ll2iURM7O8a7zulZnX8O2lYyi
J3Jg8tRIpvLPXz0EUmRgRoAbqJOv5I/+P/LvbzoE6Xv5hzMyDavd61d6Wf6TKh/O
eitOPqhYx5oRTJ3P2KahIaD7mn5615CA9l/2G42pe7l03ZGQJPy/rXFnvmM2ZaCs
ZL960zcdnBMPsj07+MphyYyEoS9ZLKDc0kZ0MuGutNiQ/5iZ7NbPSQPdh7Vi/yJf
Zq/3oKh+vgACR6Zq+LS131a+Dsb7Ar4ZsBoFBqtL7IREPLP1o1K5cnMomLcg2Rxe
goikbP3u0iCt5CgkfmK7oZtfjxoFPQ/tF+2N6g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:34:38 2026 by rpki-client