Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134392e302f32342d3234203d3e203538343737.roa
File:                     3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          qDJ/c5qWojiJYfc9eIqgLudqj78rlDzX+1L2SPWNYTQ=
Subject key identifier:   CB:62:1D:A8:55:F5:14:B8:FD:CB:17:BF:51:52:EE:9F:D6:3E:66:9D
Certificate issuer:       /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Certificate serial:       3C6E033A8613657671FF66CAED97468E8C102982
Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134392e302f32342d3234203d3e203538343737.roa
Signing time:             Sun 03 May 2026 02:31:32 +0000
ROA not before:           Sun 03 May 2026 02:26:32 +0000
ROA not after:            Sun 02 May 2027 02:31:32 +0000
asID:                     58477
IP address blocks:        103.28.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
                          rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6e:03:3a:86:13:65:76:71:ff:66:ca:ed:97:46:8e:8c:10:29:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
        Validity
            Not Before: May  3 02:26:32 2026 GMT
            Not After : May  2 02:31:32 2027 GMT
        Subject: CN=CB621DA855F514B8FDCB17BF5152EE9FD63E669D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:a8:66:ad:4f:96:d6:8c:72:d2:ad:51:39:
                    e6:02:a8:08:75:23:6b:6a:9a:a8:f0:ff:84:f9:c4:
                    12:e8:e8:f8:56:bf:2a:52:15:6e:f5:cf:8a:b7:52:
                    a0:d2:96:d0:8d:b3:5e:78:3f:b0:e7:09:a3:32:8c:
                    73:40:27:0d:dd:e2:f8:df:a5:1f:ff:74:c2:98:16:
                    c2:62:29:e1:25:ad:5d:33:af:0a:9e:c6:14:6b:2c:
                    a8:ba:62:a8:54:8c:39:3b:98:02:04:f5:d4:69:56:
                    80:ee:8d:8d:ca:f1:66:00:e5:9b:2d:10:d3:f9:d8:
                    01:11:91:74:f8:d6:04:e6:23:c9:a5:67:f1:69:32:
                    db:94:bd:d8:09:5b:ec:86:4f:31:9d:09:6a:fc:c6:
                    b5:2d:93:4c:46:3c:8d:e6:f6:57:2e:f6:cb:a3:4c:
                    17:99:ef:0b:8c:bf:02:bd:ca:d4:85:5b:87:75:9d:
                    68:a6:1c:ee:e0:5b:21:9a:a4:59:be:0d:88:83:a6:
                    80:1d:9d:79:e8:f4:11:b4:07:23:00:63:f3:86:a7:
                    63:3c:63:3a:3f:5d:ec:c0:bd:d7:e8:d4:bf:47:ab:
                    2a:bf:3f:cf:d9:6f:28:cf:4e:5c:bb:d2:b8:1f:0d:
                    a3:60:d4:85:80:11:7a:ad:84:33:79:5d:a3:c3:23:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:62:1D:A8:55:F5:14:B8:FD:CB:17:BF:51:52:EE:9F:D6:3E:66:9D
            X509v3 Authority Key Identifier:
                keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134392e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:31:e3:ac:55:24:56:75:79:ce:10:9b:2b:48:4b:ed:94:8a:
         2b:f6:a6:65:39:0b:d2:b3:31:d1:ba:a2:4c:47:60:e5:36:19:
         59:d8:63:b7:e4:af:7d:d6:d8:91:a1:36:49:7c:76:72:40:1e:
         32:9a:cc:cf:be:be:b5:03:d6:a5:b1:4c:7a:ad:b0:96:ef:23:
         67:48:d7:36:1c:56:d6:b3:e4:6f:31:46:97:61:ec:5a:94:97:
         2b:ca:0a:f8:21:d4:46:68:af:57:97:23:ac:b6:9d:95:8a:09:
         63:cf:78:21:45:45:a0:88:b8:f9:74:c0:18:2b:f5:2e:4c:94:
         34:d2:4f:f4:64:9f:43:a9:fc:bf:a8:36:85:d7:c3:a6:5e:5e:
         99:55:30:9e:17:46:05:3b:58:32:b0:c6:7f:29:5f:85:00:c6:
         21:7d:6c:31:c8:5d:7e:27:a6:0f:8b:6e:71:91:7c:da:c3:da:
         fe:71:bd:bc:3c:f6:34:88:84:0f:47:1f:8b:7e:de:f6:97:c4:
         61:1d:20:23:fc:17:93:bc:d5:1c:f2:2f:25:82:13:56:c5:4b:
         64:39:1d:4a:4f:ac:54:04:71:cd:40:12:f3:74:cc:10:66:5f:
         cd:60:51:81:53:b1:44:e5:d6:ba:a1:de:ac:3c:20:61:1f:b8:
         c6:25:19:97
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPG4DOoYTZXZx/2bK7ZdGjowQKYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx
RjMzNDlGMzAeFw0yNjA1MDMwMjI2MzJaFw0yNzA1MDIwMjMxMzJaMDMxMTAvBgNV
BAMTKENCNjIxREE4NTVGNTE0QjhGRENCMTdCRjUxNTJFRTlGRDYzRTY2OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjahmrU+W1oxy0q1ROeYCqAh1
I2tqmqjw/4T5xBLo6PhWvypSFW71z4q3UqDSltCNs154P7DnCaMyjHNAJw3d4vjf
pR//dMKYFsJiKeElrV0zrwqexhRrLKi6YqhUjDk7mAIE9dRpVoDujY3K8WYA5Zst
ENP52AERkXT41gTmI8mlZ/FpMtuUvdgJW+yGTzGdCWr8xrUtk0xGPI3m9lcu9suj
TBeZ7wuMvwK9ytSFW4d1nWimHO7gWyGapFm+DYiDpoAdnXno9BG0ByMAY/OGp2M8
Yzo/XezAvdfo1L9Hqyq/P8/ZbyjPTly70rgfDaNg1IWAEXqthDN5XaPDI69VAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUy2IdqFX1FLj9yxe/UVLun9Y+Zp0wHwYDVR0j
BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4
ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0
OUYzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRiYzZhYTAzLTFiNGQtNDM4ZS1h
OWYzLWVmZWFhZTZiMDkyMS8wLzMxMzAzMzJlMzIzODJlMzEzNDM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcclTANBgkqhkiG
9w0BAQsFAAOCAQEALzHjrFUkVnV5zhCbK0hL7ZSKK/amZTkL0rMx0bqiTEdg5TYZ
Wdhjt+SvfdbYkaE2SXx2ckAeMprMz76+tQPWpbFMeq2wlu8jZ0jXNhxW1rPkbzFG
l2HsWpSXK8oK+CHURmivV5cjrLadlYoJY894IUVFoIi4+XTAGCv1LkyUNNJP9GSf
Q6n8v6g2hdfDpl5emVUwnhdGBTtYMrDGfylfhQDGIX1sMchdfiemD4tucZF82sPa
/nG9vDz2NIiED0cfi37e9pfEYR0gI/wXk7zVHPIvJYITVsVLZDkdSk+sVARxzUAS
83TMEGZfzWBRgVOxROXWuqHerDwgYR+4xiUZlw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:43 2026 by rpki-client