Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e32382e3136332e302f32342d3234203d3e203536323539.roa
File:                     3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (raw, json)
Hash identifier:          f3/5ZWIk2JVAliu7yKS60dOELpXPYdbw36ijNFDWyYM=
Subject key identifier:   3C:A8:CE:EA:6E:93:0B:F1:10:34:95:3D:27:FA:DE:03:8B:C9:DE:D4
Certificate issuer:       /CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
Certificate serial:       42DA1D3E2638C8D051D79165D24FB1365860F172
Authority key identifier: E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e32382e3136332e302f32342d3234203d3e203536323539.roa
Signing time:             Sun 03 May 2026 02:32:04 +0000
ROA not before:           Sun 03 May 2026 02:27:04 +0000
ROA not after:            Sun 02 May 2027 02:32:04 +0000
asID:                     56259
IP address blocks:        103.28.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl
                          rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:da:1d:3e:26:38:c8:d0:51:d7:91:65:d2:4f:b1:36:58:60:f1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09CA942BC63A46AC14108FB56751F1D3DB2B40D
        Validity
            Not Before: May  3 02:27:04 2026 GMT
            Not After : May  2 02:32:04 2027 GMT
        Subject: CN=3CA8CEEA6E930BF11034953D27FADE038BC9DED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:30:ad:22:d7:68:1c:44:e5:2f:b2:7a:bd:78:
                    51:c9:d4:05:1e:04:2f:ce:ad:06:ef:82:0d:1c:8e:
                    19:84:2d:4f:de:10:6d:17:4d:81:ff:c9:e0:5d:ec:
                    e5:8c:c1:d1:40:c9:8c:fd:1e:3e:dd:34:d5:49:3c:
                    eb:1e:09:b5:86:16:55:0a:cd:80:48:c4:9e:36:31:
                    96:74:bf:e7:53:3e:35:d3:bb:56:58:ac:ca:e0:8d:
                    52:a6:31:2e:86:c0:39:65:98:85:79:d8:8e:6d:a0:
                    2f:c2:90:65:91:c4:de:b9:f0:c6:74:ff:79:a8:98:
                    76:85:2c:0c:a5:b9:e5:03:48:1d:5e:45:39:3b:76:
                    d7:95:9f:14:e1:66:cc:1d:e1:38:d5:e6:98:e1:44:
                    f5:5d:11:d8:74:fd:51:f6:b6:8b:0b:3a:7d:1e:0d:
                    6b:74:75:29:4c:5a:09:9e:8b:f5:54:fb:6c:8f:a4:
                    15:a3:99:2f:a0:97:f7:2d:e4:6d:f6:e3:e7:fd:04:
                    51:ea:33:44:8f:61:b1:2b:34:16:27:57:1c:85:74:
                    1a:f7:97:f8:15:ab:82:fe:a1:3d:ca:be:be:74:85:
                    0a:34:8c:b5:dc:54:80:21:ee:25:68:38:1b:59:aa:
                    ab:c4:a0:de:c1:e2:f7:8d:2f:f6:ec:c6:cd:38:af:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A8:CE:EA:6E:93:0B:F1:10:34:95:3D:27:FA:DE:03:8B:C9:DE:D4
            X509v3 Authority Key Identifier:
                keyid:E0:9C:A9:42:BC:63:A4:6A:C1:41:08:FB:56:75:1F:1D:3D:B2:B4:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E09CA942BC63A46AC14108FB56751F1D3DB2B40D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e32382e3136332e302f32342d3234203d3e203536323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:cd:a6:92:ae:ae:df:bd:18:8f:f2:b4:ba:63:cf:7d:a3:
         d1:3f:c6:f2:3b:55:f5:e3:ac:6c:27:2c:9f:0c:e6:74:70:00:
         2e:b1:21:59:63:8d:9b:69:15:6c:97:dc:b2:1f:fc:9f:75:ad:
         1d:d9:0b:4b:a3:44:f8:73:3a:15:d7:f4:3f:ea:bc:25:cd:e5:
         88:a3:c6:97:0c:92:a1:5c:77:cd:1b:f5:03:a4:8f:7d:51:0a:
         ad:64:1c:04:e0:75:05:d9:00:be:de:d7:ff:99:e4:43:41:d0:
         d7:67:25:1d:f7:3f:79:da:57:98:d2:1c:bd:c1:fa:f2:b3:bd:
         63:09:ca:55:43:60:d8:20:1d:1f:82:4c:80:79:9a:f6:65:ea:
         35:65:c0:90:44:fd:a7:92:da:f9:f6:94:3c:14:dd:59:ab:d1:
         67:a3:7b:90:af:56:7d:31:e6:9a:9a:17:28:b6:e7:c4:a7:d7:
         99:a3:2d:c5:7f:cd:0e:22:4b:c3:f9:e2:4d:4a:6a:f7:f7:0b:
         50:58:e9:09:40:92:5a:70:59:7d:10:0a:28:68:f3:44:12:cb:
         26:47:49:30:0e:0a:c6:1e:73:7a:af:bf:b6:cc:5c:1c:37:ac:
         77:07:27:9a:ac:fd:c8:cc:b8:56:b9:57:68:bc:14:de:6f:0f:
         45:63:c7:8b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQtodPiY4yNBR15Fl0k+xNlhg8XIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5Q0E5NDJCQzYzQTQ2QUMxNDEwOEZCNTY3NTFGMUQz
REIyQjQwRDAeFw0yNjA1MDMwMjI3MDRaFw0yNzA1MDIwMjMyMDRaMDMxMTAvBgNV
BAMTKDNDQThDRUVBNkU5MzBCRjExMDM0OTUzRDI3RkFERTAzOEJDOURFRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhMK0i12gcROUvsnq9eFHJ1AUe
BC/OrQbvgg0cjhmELU/eEG0XTYH/yeBd7OWMwdFAyYz9Hj7dNNVJPOseCbWGFlUK
zYBIxJ42MZZ0v+dTPjXTu1ZYrMrgjVKmMS6GwDllmIV52I5toC/CkGWRxN658MZ0
/3momHaFLAylueUDSB1eRTk7dteVnxThZswd4TjV5pjhRPVdEdh0/VH2tosLOn0e
DWt0dSlMWgmei/VU+2yPpBWjmS+gl/ct5G324+f9BFHqM0SPYbErNBYnVxyFdBr3
l/gVq4L+oT3Kvr50hQo0jLXcVIAh7iVoOBtZqqvEoN7B4veNL/bsxs04r31NAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUPKjO6m6TC/EQNJU9J/reA4vJ3tQwHwYDVR0j
BBgwFoAU4JypQrxjpGrBQQj7VnUfHT2ytA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGQ5NzAwMzItMDhlYS00ODkwLWJkYmEtNjMwOWE0OTc5MTdkLzAvRTA5Q0E5NDJC
QzYzQTQ2QUMxNDEwOEZCNTY3NTFGMUQzREIyQjQwRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMDlDQTk0MkJDNjNBNDZBQzE0MTA4RkI1Njc1MUYxRDNEQjJC
NDBELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRkOTcwMDMyLTA4ZWEtNDg5MC1i
ZGJhLTYzMDlhNDk3OTE3ZC8wLzMxMzAzMzJlMzIzODJlMzEzNjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGccozANBgkqhkiG
9w0BAQsFAAOCAQEAqLbNppKurt+9GI/ytLpjz32j0T/G8jtV9eOsbCcsnwzmdHAA
LrEhWWONm2kVbJfcsh/8n3WtHdkLS6NE+HM6Fdf0P+q8Jc3liKPGlwySoVx3zRv1
A6SPfVEKrWQcBOB1BdkAvt7X/5nkQ0HQ12clHfc/edpXmNIcvcH68rO9YwnKVUNg
2CAdH4JMgHma9mXqNWXAkET9p5La+faUPBTdWavRZ6N7kK9WfTHmmpoXKLbnxKfX
maMtxX/NDiJLw/niTUpq9/cLUFjpCUCSWnBZfRAKKGjzRBLLJkdJMA4Kxh5zeq+/
tsxcHDesdwcnmqz9yMy4VrlXaLwU3m8PRWPHiw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:58:19 2026 by rpki-client