Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa
File:                     3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (raw, json)
Hash identifier:          nJnlMgxQpBrYqZycvGCzonJXiZwDsWr34U7o3OPt3ps=
Subject key identifier:   A8:26:04:06:87:FD:8C:A6:3E:81:4C:54:BA:8F:77:B1:B3:8F:60:C0
Certificate issuer:       /CN=F92C9917A30302FCE264D46D8FE65A1CEA194138
Certificate serial:       5D82F4C5A5CFE62D5062CFBE6430C3D4E5AD1B99
Authority key identifier: F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa
Signing time:             Sun 03 May 2026 02:31:20 +0000
ROA not before:           Sun 03 May 2026 02:26:20 +0000
ROA not after:            Sun 02 May 2027 02:31:20 +0000
asID:                     134644
IP address blocks:        103.207.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl
                          rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:82:f4:c5:a5:cf:e6:2d:50:62:cf:be:64:30:c3:d4:e5:ad:1b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F92C9917A30302FCE264D46D8FE65A1CEA194138
        Validity
            Not Before: May  3 02:26:20 2026 GMT
            Not After : May  2 02:31:20 2027 GMT
        Subject: CN=A826040687FD8CA63E814C54BA8F77B1B38F60C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4f:e4:64:dd:c6:35:36:8e:09:a2:ea:f1:62:
                    0e:ad:76:a6:ea:c9:a1:2f:9b:e8:64:a6:f0:dc:c2:
                    11:c2:22:b3:2e:0c:01:b3:56:b1:9f:c1:52:88:1c:
                    38:8b:e9:cb:db:91:fa:6c:2f:98:1e:10:dd:9b:4b:
                    d5:4c:f0:11:d9:b0:d0:39:39:25:79:43:81:e1:cb:
                    1a:4a:28:6f:fc:3c:25:87:34:b1:a6:85:b5:7c:3f:
                    58:ff:56:63:06:1f:4d:62:55:14:85:3a:72:ae:98:
                    52:11:94:ce:35:a0:c7:4e:b7:a7:5d:00:e7:50:a2:
                    e2:95:d0:6a:3a:1a:a4:85:22:3f:53:89:50:a7:46:
                    9a:a9:6e:c9:61:dc:36:57:24:b9:a2:3f:83:02:2f:
                    c1:11:8f:b3:88:65:16:4b:08:c4:ba:45:58:68:cb:
                    93:91:52:ac:72:77:29:78:d3:86:82:3b:e9:f8:5e:
                    f7:27:82:17:18:c4:17:4c:5a:69:c3:f2:8e:cf:0b:
                    ad:3d:63:86:cb:21:c8:b9:2d:36:e5:95:47:f4:6a:
                    d1:12:db:2e:b5:28:8a:a1:aa:61:b6:2a:19:ad:7a:
                    24:2b:23:bc:0e:12:68:6c:f0:7a:e7:a9:85:9d:63:
                    a4:8e:f4:42:17:53:19:8a:53:06:39:eb:35:cb:3f:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:26:04:06:87:FD:8C:A6:3E:81:4C:54:BA:8F:77:B1:B3:8F:60:C0
            X509v3 Authority Key Identifier:
                keyid:F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:57:ed:40:c6:80:65:5d:bb:43:5e:39:19:ac:3d:f0:96:94:
         de:4b:98:ef:79:45:c2:04:91:2a:b8:b4:4d:b4:d8:90:cc:7c:
         c2:e8:37:9e:13:65:8b:67:ed:c4:aa:6d:ba:79:44:7c:a5:d9:
         08:a1:0e:11:00:b0:77:b8:b4:b6:46:0a:6c:fc:51:9d:8c:2a:
         46:a7:30:0c:49:22:39:3b:72:2f:a0:eb:b6:81:f2:26:5b:6e:
         70:15:b3:a4:1b:4e:e1:cb:19:86:e7:9c:aa:81:2b:95:09:4f:
         3c:65:1e:c3:1e:61:df:81:98:4f:d0:1d:92:f1:0e:da:37:bf:
         d3:59:73:a9:05:4f:79:e2:50:1c:3d:77:d6:cd:b4:aa:8f:98:
         0b:3d:0f:a4:f5:0f:2c:de:85:1e:00:d4:c4:2a:4c:ae:08:c8:
         cd:22:f3:07:7e:22:a2:c9:35:53:6c:7e:13:71:19:c8:7f:80:
         b3:c8:7c:0b:c3:19:d4:94:d6:23:9a:13:28:0e:1d:48:ae:2b:
         08:c4:af:68:5d:1f:4b:c9:5e:d6:97:be:d6:53:fb:fc:41:6b:
         c6:5b:5f:5e:40:73:11:b8:1c:58:83:c0:e9:bd:90:e3:67:e2:
         09:9e:55:f4:5e:40:85:be:d2:ff:b5:60:4b:e4:1b:c8:b7:fb:
         ae:1d:d6:e2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUXYL0xaXP5i1QYs++ZDDD1OWtG5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkyQzk5MTdBMzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNF
QTE5NDEzODAeFw0yNjA1MDMwMjI2MjBaFw0yNzA1MDIwMjMxMjBaMDMxMTAvBgNV
BAMTKEE4MjYwNDA2ODdGRDhDQTYzRTgxNEM1NEJBOEY3N0IxQjM4RjYwQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZT+Rk3cY1No4JourxYg6tdqbq
yaEvm+hkpvDcwhHCIrMuDAGzVrGfwVKIHDiL6cvbkfpsL5geEN2bS9VM8BHZsNA5
OSV5Q4HhyxpKKG/8PCWHNLGmhbV8P1j/VmMGH01iVRSFOnKumFIRlM41oMdOt6dd
AOdQouKV0Go6GqSFIj9TiVCnRpqpbslh3DZXJLmiP4MCL8ERj7OIZRZLCMS6RVho
y5ORUqxydyl404aCO+n4XvcnghcYxBdMWmnD8o7PC609Y4bLIci5LTbllUf0atES
2y61KIqhqmG2KhmteiQrI7wOEmhs8HrnqYWdY6SO9EIXUxmKUwY56zXLP+CvAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUqCYEBof9jKY+gUxUuo93sbOPYMAwHwYDVR0j
BBgwFoAU+SyZF6MDAvziZNRtj+ZaHOoZQTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGIwZTdmOGUtYzI5Zi00ZTZiLWFkMGEtOTk1N2ZiZDU2OTUzLzAvRjkyQzk5MTdB
MzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNFQTE5NDEzOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTJDOTkxN0EzMDMwMkZDRTI2NEQ0NkQ4RkU2NUExQ0VBMTk0
MTM4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRiMGU3ZjhlLWMyOWYtNGU2Yi1h
ZDBhLTk5NTdmYmQ1Njk1My8wLzMxMzAzMzJlMzIzMDM3MmUzMjMzMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzQzNjM0MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnz+wwDQYJ
KoZIhvcNAQELBQADggEBAJ5X7UDGgGVdu0NeORmsPfCWlN5LmO95RcIEkSq4tE20
2JDMfMLoN54TZYtn7cSqbbp5RHyl2QihDhEAsHe4tLZGCmz8UZ2MKkanMAxJIjk7
ci+g67aB8iZbbnAVs6QbTuHLGYbnnKqBK5UJTzxlHsMeYd+BmE/QHZLxDto3v9NZ
c6kFT3niUBw9d9bNtKqPmAs9D6T1DyzehR4A1MQqTK4IyM0i8wd+IqLJNVNsfhNx
Gch/gLPIfAvDGdSU1iOaEygOHUiuKwjEr2hdH0vJXtaXvtZT+/xBa8ZbX15AcxG4
HFiDwOm9kONn4gmeVfReQIW+0v+1YEvkG8i3+64d1uI=
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:51 2026 by rpki-client