Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32322d3232203d3e203234353139.roa
File:                     3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (raw, json)
Hash identifier:          iaB2BU40NYYT5gzoU2/HVHmJ1OLrV8vuDA/NUX6fKHM=
Subject key identifier:   6A:10:28:1B:0F:8B:5D:26:EF:08:38:B8:67:0C:53:A4:77:4A:93:C5
Certificate issuer:       /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Certificate serial:       5943EE434E2529986EFE856775E9D8C470710030
Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32322d3232203d3e203234353139.roa
Signing time:             Sun 03 May 2026 02:32:21 +0000
ROA not before:           Sun 03 May 2026 02:27:21 +0000
ROA not after:            Sun 02 May 2027 02:32:21 +0000
asID:                     24519
IP address blocks:        103.42.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
                          rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:43:ee:43:4e:25:29:98:6e:fe:85:67:75:e9:d8:c4:70:71:00:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
        Validity
            Not Before: May  3 02:27:21 2026 GMT
            Not After : May  2 02:32:21 2027 GMT
        Subject: CN=6A10281B0F8B5D26EF0838B8670C53A4774A93C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:c0:92:cb:ce:ff:bd:4a:92:f2:aa:da:42:
                    56:f9:52:e9:6f:91:f2:31:12:2a:30:3d:31:6d:b8:
                    68:d3:8c:d0:31:4f:39:8c:87:59:05:7c:9a:07:cf:
                    f7:75:da:82:8b:6f:e2:e3:8e:63:79:98:16:6f:55:
                    65:18:d5:03:b8:1a:ca:42:92:19:37:d3:56:44:47:
                    aa:3d:f2:6f:74:6b:1b:56:88:ab:73:da:9d:7f:5c:
                    6e:e7:43:39:3d:e1:35:8a:c8:42:a1:6b:96:a5:fb:
                    5a:58:27:5f:4e:26:b0:bc:cc:7d:c8:d7:67:ea:6e:
                    4f:72:a2:79:8e:84:ca:e5:38:00:22:39:60:9a:a8:
                    ba:52:4c:05:db:c2:c9:8e:85:7e:5c:e3:a1:c5:92:
                    b2:7d:00:d3:19:03:23:bd:3f:9c:35:aa:88:7a:26:
                    79:26:0e:a4:8a:07:ed:ac:65:7e:a5:d8:6f:2e:d2:
                    50:7b:a4:d6:b8:ac:68:20:e3:5b:74:e2:96:6e:3b:
                    40:30:7f:17:79:41:8a:1a:81:8c:ff:8c:df:9d:7a:
                    76:50:8f:3e:5d:4e:65:71:3c:24:43:b3:c3:a4:e4:
                    fd:d4:42:7d:30:01:5b:3a:6c:19:e2:52:74:3a:18:
                    06:5e:c2:f1:7c:bb:9d:40:f5:9b:49:01:dd:fc:ec:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:10:28:1B:0F:8B:5D:26:EF:08:38:B8:67:0C:53:A4:77:4A:93:C5
            X509v3 Authority Key Identifier:
                keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32322d3232203d3e203234353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:64:74:b2:c4:32:9a:42:f0:4c:43:bf:34:76:0b:13:54:d3:
         bb:d5:fa:e4:b6:39:00:50:2a:b5:cb:7e:e1:45:5a:06:c3:ea:
         c2:fa:cd:48:d4:57:a8:99:ea:88:57:87:b5:9b:7b:7a:02:fd:
         3c:1e:c2:a5:10:38:af:db:44:56:a9:46:80:b3:17:2c:f0:72:
         52:92:f7:7f:e3:fd:22:80:e4:8e:0e:29:a9:0a:91:8f:08:88:
         58:85:ad:9f:03:0e:57:ad:e4:b1:72:42:a7:c8:f7:f2:bb:6e:
         98:ef:a3:1c:83:22:cc:15:7d:bc:02:57:38:de:70:06:38:32:
         88:2c:23:f8:e9:28:d3:47:b1:af:1f:8e:7d:9c:5e:90:ec:17:
         c7:ba:a1:19:52:2d:23:d9:c0:e9:30:b2:a1:cf:b7:73:00:db:
         fd:f7:4e:0a:1d:6b:f5:3c:0c:77:e4:de:dc:66:7c:ba:96:1c:
         69:8d:25:7d:64:20:62:3d:88:50:1b:3a:62:38:d9:ce:66:73:
         25:22:b9:0f:e0:88:52:f2:c2:40:09:71:29:b8:20:f8:37:fa:
         0f:c0:75:af:ec:69:43:c9:18:2e:14:f4:d6:88:80:b4:d2:b4:
         5e:5a:5a:bb:3e:7b:74:ee:40:8d:ab:96:95:02:d2:45:5b:9e:
         ee:d3:6a:e8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWUPuQ04lKZhu/oVndenYxHBxADAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBQ0FDOEMxQTZENTY3QzcwMjE2N0MzQkY1RDU1RENB
ODA2MUQwOTAeFw0yNjA1MDMwMjI3MjFaFw0yNzA1MDIwMjMyMjFaMDMxMTAvBgNV
BAMTKDZBMTAyODFCMEY4QjVEMjZFRjA4MzhCODY3MEM1M0E0Nzc0QTkzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1cCSy87/vUqS8qraQlb5Uulv
kfIxEiowPTFtuGjTjNAxTzmMh1kFfJoHz/d12oKLb+LjjmN5mBZvVWUY1QO4GspC
khk301ZER6o98m90axtWiKtz2p1/XG7nQzk94TWKyEKha5al+1pYJ19OJrC8zH3I
12fqbk9yonmOhMrlOAAiOWCaqLpSTAXbwsmOhX5c46HFkrJ9ANMZAyO9P5w1qoh6
JnkmDqSKB+2sZX6l2G8u0lB7pNa4rGgg41t04pZuO0Awfxd5QYoagYz/jN+denZQ
jz5dTmVxPCRDs8Ok5P3UQn0wAVs6bBniUnQ6GAZewvF8u51A9ZtJAd387F8XAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUahAoGw+LXSbvCDi4ZwxTpHdKk8UwHwYDVR0j
BBgwFoAUt6ysjBptVnxwIWfDv11V3KgGHQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGY1ODkzNGQtMWIwMC00NDg5LTkyZWQtMWNhNmRjNGIyOTBmLzAvQjdBQ0FDOEMx
QTZENTY3QzcwMjE2N0MzQkY1RDU1RENBODA2MUQwOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CN0FDQUM4QzFBNkQ1NjdDNzAyMTY3QzNCRjVENTVEQ0E4MDYx
RDA5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRmNTg5MzRkLTFiMDAtNDQ4OS05
MmVkLTFjYTZkYzRiMjkwZi8wLzMxMzAzMzJlMzQzMjJlMzEzMTM2MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzIzNDM1MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcqdDANBgkqhkiG
9w0BAQsFAAOCAQEAA2R0ssQymkLwTEO/NHYLE1TTu9X65LY5AFAqtct+4UVaBsPq
wvrNSNRXqJnqiFeHtZt7egL9PB7CpRA4r9tEVqlGgLMXLPByUpL3f+P9IoDkjg4p
qQqRjwiIWIWtnwMOV63ksXJCp8j38rtumO+jHIMizBV9vAJXON5wBjgyiCwj+Oko
00exrx+OfZxekOwXx7qhGVItI9nA6TCyoc+3cwDb/fdOCh1r9TwMd+Te3GZ8upYc
aY0lfWQgYj2IUBs6YjjZzmZzJSK5D+CIUvLCQAlxKbgg+Df6D8B1r+xpQ8kYLhT0
1oiAtNK0Xlpauz57dO5AjauWlQLSRVue7tNq6A==
-----END CERTIFICATE-----
Generated at Wed May 13 07:53:01 2026 by rpki-client