Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa
File:                     3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (raw, json)
Hash identifier:          1ZSbqejAXASSMS+yiCaDvvpugHjgj1M6wD3m+4/7wrE=
Subject key identifier:   50:E9:C6:F8:14:5D:50:2E:B6:BF:05:5C:F4:DE:58:C2:D0:C7:C5:4B
Certificate issuer:       /CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5
Certificate serial:       31A9257080E491D5664A0888D69FEFEF3BF0CE85
Authority key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa
Signing time:             Sun 03 May 2026 02:32:13 +0000
ROA not before:           Sun 03 May 2026 02:27:13 +0000
ROA not after:            Sun 02 May 2027 02:32:13 +0000
asID:                     136064
IP address blocks:        103.83.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl
                          rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a9:25:70:80:e4:91:d5:66:4a:08:88:d6:9f:ef:ef:3b:f0:ce:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5
        Validity
            Not Before: May  3 02:27:13 2026 GMT
            Not After : May  2 02:32:13 2027 GMT
        Subject: CN=50E9C6F8145D502EB6BF055CF4DE58C2D0C7C54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:10:23:ce:9b:6b:be:81:25:63:22:16:81:
                    2e:f2:af:7a:bb:8d:b0:d2:9d:70:30:6d:49:f9:be:
                    58:9a:dc:67:e7:94:20:32:92:ad:1d:51:63:cb:29:
                    62:f6:f2:8f:90:d5:b9:65:eb:21:94:d0:48:f5:c1:
                    5a:f1:ca:7c:f8:87:1d:9e:a5:f7:02:d2:02:a8:53:
                    02:cc:af:74:16:69:bf:9d:bc:c0:3f:ed:0f:50:32:
                    1e:62:f1:d3:c2:14:3c:d3:c5:dd:a3:69:e5:77:0e:
                    74:01:43:46:e7:3d:7d:ff:29:33:ff:6e:25:ab:92:
                    80:72:19:23:a5:5c:d8:bc:9a:6c:ef:b9:fb:ad:bf:
                    11:c4:9b:ca:32:cf:61:db:f7:11:77:05:99:06:d7:
                    d7:e8:ea:7e:85:f7:c4:e7:f5:cc:a0:5c:0a:73:a9:
                    b5:34:67:a1:e0:22:a4:9e:41:e3:40:89:cc:62:2b:
                    b2:68:9f:1c:1a:01:05:1c:55:24:fa:1b:3a:86:3c:
                    ea:14:c3:4d:a1:93:41:ad:e7:54:41:6f:cc:da:ef:
                    27:71:16:3c:14:ca:bc:8c:91:b0:7f:2f:68:2b:7c:
                    50:bb:1c:a6:a1:d1:57:17:3e:5d:4a:ce:8c:b2:72:
                    ca:4f:0c:88:6d:b7:ea:f3:de:87:e3:11:5d:5e:0a:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:C6:F8:14:5D:50:2E:B6:BF:05:5C:F4:DE:58:C2:D0:C7:C5:4B
            X509v3 Authority Key Identifier:
                keyid:79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:28:96:54:dc:06:7d:2a:8d:cc:44:40:26:8d:1e:ee:ac:f7:
         8c:09:b5:f4:12:8f:ac:24:41:c4:0f:10:29:44:42:f8:f5:d6:
         68:c1:fc:c1:a5:53:49:6d:b3:31:0f:cc:b7:0c:b1:ae:99:24:
         c6:24:ad:f9:82:db:27:7e:26:3d:63:23:8e:07:94:71:d8:ac:
         68:01:c7:dc:b9:db:77:38:33:b0:1f:6b:d9:2f:cc:91:d7:ce:
         35:1b:65:46:ee:32:92:f4:ac:63:ef:d0:d1:f8:8a:3b:3a:c5:
         4f:2b:b3:2d:73:46:81:fb:83:58:a3:88:39:dc:ba:19:f6:6a:
         cb:7c:ea:2a:11:46:97:73:85:3b:82:4f:73:72:03:ba:ce:03:
         86:a5:4d:74:1d:70:e9:28:9d:f0:07:94:27:2c:82:f5:ff:b3:
         f4:3b:ef:dd:99:4b:ca:95:f2:64:c6:dd:11:4f:78:65:53:15:
         bc:bf:23:a3:93:58:f1:c8:86:ba:83:eb:a1:51:8e:d8:4b:d3:
         f5:e1:d6:80:9a:c7:2d:a1:67:c0:30:0c:7a:d7:a7:25:e1:55:
         e7:65:92:a3:15:82:63:09:67:03:e8:90:50:76:af:42:c7:aa:
         26:6d:17:a9:63:27:51:8a:25:4a:a8:53:cd:bf:6d:77:5e:94:
         e0:a3:b2:ad
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMaklcIDkkdVmSgiI1p/v7zvwzoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1
Q0JGMkRGNTAeFw0yNjA1MDMwMjI3MTNaFw0yNzA1MDIwMjMyMTNaMDMxMTAvBgNV
BAMTKDUwRTlDNkY4MTQ1RDUwMkVCNkJGMDU1Q0Y0REU1OEMyRDBDN0M1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDhAjzptrvoElYyIWgS7yr3q7
jbDSnXAwbUn5vlia3GfnlCAykq0dUWPLKWL28o+Q1bll6yGU0Ej1wVrxynz4hx2e
pfcC0gKoUwLMr3QWab+dvMA/7Q9QMh5i8dPCFDzTxd2jaeV3DnQBQ0bnPX3/KTP/
biWrkoByGSOlXNi8mmzvufutvxHEm8oyz2Hb9xF3BZkG19fo6n6F98Tn9cygXApz
qbU0Z6HgIqSeQeNAicxiK7JonxwaAQUcVST6GzqGPOoUw02hk0Gt51RBb8za7ydx
FjwUyryMkbB/L2grfFC7HKah0VcXPl1KzoyycspPDIhtt+rz3ofjEV1eCiVZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUUOnG+BRdUC62vwVc9N5YwtDHxUswHwYDVR0j
BBgwFoAUeTKQ5+wVX/ccRNtkaM7XmFy/LfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGU5OGIzYmQtMjg0ZC00YTdkLTlmMjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdF
QzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1Q0JGMkRGNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83OTMyOTBFN0VDMTU1RkY3MUM0NERCNjQ2OENFRDc5ODVDQkYy
REY1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRlOThiM2JkLTI4NGQtNGE3ZC05
ZjI3LWNiNTg3ZTlkZDg0MS8wLzMxMzAzMzJlMzgzMzJlMzEzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1N0MA0GCSqG
SIb3DQEBCwUAA4IBAQBnKJZU3AZ9Ko3MREAmjR7urPeMCbX0Eo+sJEHEDxApREL4
9dZowfzBpVNJbbMxD8y3DLGumSTGJK35gtsnfiY9YyOOB5Rx2KxoAcfcudt3ODOw
H2vZL8yR1841G2VG7jKS9Kxj79DR+Io7OsVPK7Mtc0aB+4NYo4g53LoZ9mrLfOoq
EUaXc4U7gk9zcgO6zgOGpU10HXDpKJ3wB5QnLIL1/7P0O+/dmUvKlfJkxt0RT3hl
UxW8vyOjk1jxyIa6g+uhUY7YS9P14daAmsctoWfAMAx616cl4VXnZZKjFYJjCWcD
6JBQdq9Cx6ombRepYydRiiVKqFPNv213XpTgo7Kt
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:46 2026 by rpki-client