Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa
File:                     3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa (raw, json)
Hash identifier:          FEkvsfE4ha6uu8kBv920BlUS4PCELQ7grX+3/QQrY20=
Subject key identifier:   88:9F:D8:53:02:AD:56:0D:16:31:BC:A1:DE:57:90:2F:69:CC:8C:8E
Certificate issuer:       /CN=91C44F4E918B247652B1384F03FD41D436EEC992
Certificate serial:       694A5A80F792BB30AA5BCDFB918929D950E9C75A
Authority key identifier: 91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa
Signing time:             Sun 03 May 2026 02:31:50 +0000
ROA not before:           Sun 03 May 2026 02:26:50 +0000
ROA not after:            Sun 02 May 2027 02:31:50 +0000
asID:                     137356
IP address blocks:        103.115.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl
                          rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4a:5a:80:f7:92:bb:30:aa:5b:cd:fb:91:89:29:d9:50:e9:c7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C44F4E918B247652B1384F03FD41D436EEC992
        Validity
            Not Before: May  3 02:26:50 2026 GMT
            Not After : May  2 02:31:50 2027 GMT
        Subject: CN=889FD85302AD560D1631BCA1DE57902F69CC8C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:f7:b0:6d:5d:be:4d:f4:64:66:32:b4:40:
                    66:64:5e:dd:ba:a5:53:4f:d4:51:d8:e9:a7:81:64:
                    be:90:25:1f:72:83:d6:87:41:0c:59:8b:a0:f8:0d:
                    f1:ff:9e:83:87:06:1e:e8:de:a3:4d:f3:08:21:3c:
                    86:0a:4b:79:74:9c:d7:3c:8e:4d:95:f4:4c:eb:bd:
                    81:aa:e3:fd:69:13:76:11:f1:bb:bc:3f:5d:cb:dc:
                    48:67:6f:03:3b:77:20:7c:db:8e:eb:58:3d:b4:0c:
                    92:41:40:de:fd:30:b4:43:56:4e:53:e8:63:8e:6c:
                    fe:2e:ea:47:3a:4c:c3:c2:78:7d:3f:8d:7e:67:85:
                    7e:ea:d7:25:b8:21:66:0d:59:57:31:d1:36:70:44:
                    d3:f3:99:82:9f:d1:69:b8:06:a1:91:00:a2:cb:73:
                    ea:6d:8d:7d:39:6e:a7:8f:58:ca:2d:df:f9:1f:c1:
                    d9:f2:27:43:b1:86:cb:83:50:96:98:40:67:d0:03:
                    36:73:92:eb:5c:ca:c7:15:7c:ea:12:5a:68:9c:33:
                    9d:07:c4:5c:14:cc:75:32:9e:26:ad:ae:2c:ca:36:
                    da:74:88:5c:c6:de:0e:7b:d4:5b:2a:ed:4d:3a:31:
                    50:31:40:83:55:8c:a5:80:ee:a8:b3:41:77:c3:d8:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9F:D8:53:02:AD:56:0D:16:31:BC:A1:DE:57:90:2F:69:CC:8C:8E
            X509v3 Authority Key Identifier:
                keyid:91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:3e:8a:b4:b2:1d:aa:7b:bd:5b:e8:cf:6c:3d:7b:a9:d2:d7:
         e3:e6:1c:53:35:4f:28:12:af:4e:e5:08:50:cc:6c:5c:b7:39:
         d0:76:36:5c:3d:b9:f7:5a:9d:7a:7c:10:50:d5:4b:d0:4c:a3:
         90:34:48:d5:1a:d7:6c:7c:df:c4:8f:1e:0d:3f:ec:05:71:42:
         b8:ed:f9:70:36:57:c1:5b:ab:50:c8:90:3a:09:a0:a8:0a:ac:
         d9:e3:f4:18:cf:25:0a:14:86:71:d5:90:3a:71:4e:1f:d5:a2:
         b2:fc:fc:4d:70:75:af:5f:0a:95:50:2a:d8:5d:3e:56:45:54:
         7c:e7:13:de:95:5a:9c:68:81:ef:9c:c4:13:87:a1:65:21:83:
         ee:7c:e7:c3:a4:eb:fc:f7:67:9d:92:ef:bc:c6:b9:ae:e7:c7:
         1e:16:7f:46:26:b4:d1:c6:9e:fe:8c:31:6f:5f:f5:52:9f:b4:
         24:46:18:61:0b:51:7b:e6:37:02:47:53:cc:24:b4:ef:3a:49:
         48:02:9a:5f:c4:72:c9:a7:8c:7b:98:24:5a:18:2d:98:e6:61:
         e0:b4:ac:1e:13:a3:ad:98:28:83:d5:cb:ca:57:81:20:47:46:
         cc:ce:4b:5f:01:ff:f8:8f:5f:3e:ce:04:94:81:fe:7d:85:34:
         b1:5b:70:44
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUaUpagPeSuzCqW837kYkp2VDpx1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNDRGNEU5MThCMjQ3NjUyQjEzODRGMDNGRDQxRDQz
NkVFQzk5MjAeFw0yNjA1MDMwMjI2NTBaFw0yNzA1MDIwMjMxNTBaMDMxMTAvBgNV
BAMTKDg4OUZEODUzMDJBRDU2MEQxNjMxQkNBMURFNTc5MDJGNjlDQzhDOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFvewbV2+TfRkZjK0QGZkXt26
pVNP1FHY6aeBZL6QJR9yg9aHQQxZi6D4DfH/noOHBh7o3qNN8wghPIYKS3l0nNc8
jk2V9EzrvYGq4/1pE3YR8bu8P13L3EhnbwM7dyB8247rWD20DJJBQN79MLRDVk5T
6GOObP4u6kc6TMPCeH0/jX5nhX7q1yW4IWYNWVcx0TZwRNPzmYKf0Wm4BqGRAKLL
c+ptjX05bqePWMot3/kfwdnyJ0OxhsuDUJaYQGfQAzZzkutcyscVfOoSWmicM50H
xFwUzHUyniatrizKNtp0iFzG3g571Fsq7U06MVAxQINVjKWA7qizQXfD2ANHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUiJ/YUwKtVg0WMbyh3leQL2nMjI4wHwYDVR0j
BBgwFoAUkcRPTpGLJHZSsThPA/1B1DbuyZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGM0YzJmNjItZjczNS00ZDYwLTkyMzctOTI3ZWZhZDlkYWQwLzAvOTFDNDRGNEU5
MThCMjQ3NjUyQjEzODRGMDNGRDQxRDQzNkVFQzk5Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MUM0NEY0RTkxOEIyNDc2NTJCMTM4NEYwM0ZENDFENDM2RUVD
OTkyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRjNGMyZjYyLWY3MzUtNGQ2MC05
MjM3LTkyN2VmYWQ5ZGFkMC8wLzMxMzAzMzJlMzEzMTM1MmUzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3NjMA0GCSqG
SIb3DQEBCwUAA4IBAQASPoq0sh2qe71b6M9sPXup0tfj5hxTNU8oEq9O5QhQzGxc
tznQdjZcPbn3Wp16fBBQ1UvQTKOQNEjVGtdsfN/Ejx4NP+wFcUK47flwNlfBW6tQ
yJA6CaCoCqzZ4/QYzyUKFIZx1ZA6cU4f1aKy/PxNcHWvXwqVUCrYXT5WRVR85xPe
lVqcaIHvnMQTh6FlIYPufOfDpOv892edku+8xrmu58ceFn9GJrTRxp7+jDFvX/VS
n7QkRhhhC1F75jcCR1PMJLTvOklIAppfxHLJp4x7mCRaGC2Y5mHgtKweE6OtmCiD
1cvKV4EgR0bMzktfAf/4j18+zgSUgf59hTSxW3BE
-----END CERTIFICATE-----
Generated at Wed May 13 12:39:32 2026 by rpki-client