Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230362e302f32332d3233203d3e203538353033.roa
File:                     3130332e362e3230362e302f32332d3233203d3e203538353033.roa (raw, json)
Hash identifier:          6DMCC4zoM0ufHjG0QUaKmWhWVe5X3d0md3DvFqu2AIs=
Subject key identifier:   16:55:91:9B:45:AA:74:C3:26:C4:73:05:0E:41:BD:09:E7:19:1B:72
Certificate issuer:       /CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
Certificate serial:       099745676285D263F56ACF7DA9469A95FD142372
Authority key identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230362e302f32332d3233203d3e203538353033.roa
Signing time:             Sun 03 May 2026 02:34:51 +0000
ROA not before:           Sun 03 May 2026 02:29:51 +0000
ROA not after:            Sun 02 May 2027 02:34:51 +0000
asID:                     58503
IP address blocks:        103.6.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl
                          rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:97:45:67:62:85:d2:63:f5:6a:cf:7d:a9:46:9a:95:fd:14:23:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
        Validity
            Not Before: May  3 02:29:51 2026 GMT
            Not After : May  2 02:34:51 2027 GMT
        Subject: CN=1655919B45AA74C326C473050E41BD09E7191B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:c1:54:28:70:8a:24:59:82:bc:fa:ce:6a:
                    93:01:40:15:c9:e9:74:e4:a0:01:66:65:7d:60:71:
                    bc:d1:2d:99:80:8e:c1:55:12:b4:44:fb:32:8c:66:
                    6f:5d:d3:fd:21:71:aa:ac:36:d0:7e:aa:83:b8:c0:
                    24:0b:1b:90:cf:d5:c9:27:6b:92:55:57:8b:13:f8:
                    bd:f5:a9:be:c0:49:6a:fb:fd:a7:ee:07:d4:33:b5:
                    ae:98:5b:55:f7:69:92:24:38:6a:c7:41:53:60:a5:
                    37:08:b0:6a:ed:aa:1c:a1:6f:04:22:ac:a3:67:c6:
                    a3:e1:32:33:07:d5:ed:53:c7:c1:08:71:ec:d2:64:
                    49:d3:e9:ae:99:42:5c:42:41:c9:ac:7e:42:5a:5a:
                    42:2b:d2:e7:02:7e:b6:f9:4e:b8:d1:b6:5f:6c:64:
                    57:d1:cd:38:fa:74:92:86:9d:8a:30:3f:0f:b3:f7:
                    a9:43:33:0e:9b:a1:f1:44:5f:11:85:fc:04:b3:2d:
                    9c:40:7d:6d:ee:c3:3b:e9:01:11:28:65:bf:b0:fb:
                    f0:58:44:10:35:6f:e9:97:6b:c8:ce:c8:90:40:70:
                    2b:cc:b5:28:7a:7d:b9:f6:00:8a:bb:e8:87:4d:70:
                    10:d9:78:8c:13:29:6b:ec:37:3e:23:49:70:f9:c4:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:91:9B:45:AA:74:C3:26:C4:73:05:0E:41:BD:09:E7:19:1B:72
            X509v3 Authority Key Identifier:
                keyid:55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230362e302f32332d3233203d3e203538353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:ad:3b:bf:09:96:d6:b9:db:e8:9e:f9:96:ab:64:97:52:90:
         d7:68:5a:15:cc:d7:d1:dc:37:51:74:80:9e:57:2a:19:08:39:
         08:f2:a2:6e:2c:33:77:c2:10:6a:ab:4f:16:b3:ca:b0:dc:06:
         02:13:bc:df:c4:ff:24:f7:ae:dd:48:46:70:36:8c:79:42:b0:
         6e:d2:8c:af:af:92:0d:af:52:ba:69:ba:1b:ec:68:ed:7c:8e:
         67:50:5e:51:f7:09:b9:61:cc:c2:61:fc:19:e2:6d:45:d1:46:
         27:68:5f:c1:e7:c3:3d:44:8a:b3:49:47:21:58:f7:be:de:31:
         d8:85:0c:31:53:e9:8f:46:8a:65:1c:f6:a3:70:8e:05:d4:6a:
         bb:2b:7b:28:88:c0:eb:07:94:91:9c:b1:a1:f9:74:fc:70:7f:
         1d:af:5e:d2:8b:1a:e9:d0:d8:74:b7:22:c2:ce:8b:85:05:b4:
         f8:28:ee:72:29:32:99:45:66:c4:61:08:c4:35:d5:7e:30:23:
         bd:e2:9d:99:47:75:3c:cb:6f:eb:de:48:1a:62:b6:68:d2:54:
         5c:44:09:94:f3:af:78:5c:87:cd:9d:2f:08:77:4c:3f:86:f2:
         bf:32:96:46:5f:75:58:92:cf:bb:c6:51:37:38:6a:1e:a5:5b:
         8e:c2:95:1f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUCZdFZ2KF0mP1as99qUaalf0UI3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVEMEE0QkREMzBBQjBGMjM0NkE3MjNDRUZCNkM3NkU4
QUQ5OTY3NzAeFw0yNjA1MDMwMjI5NTFaFw0yNzA1MDIwMjM0NTFaMDMxMTAvBgNV
BAMTKDE2NTU5MTlCNDVBQTc0QzMyNkM0NzMwNTBFNDFCRDA5RTcxOTFCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7cFUKHCKJFmCvPrOapMBQBXJ
6XTkoAFmZX1gcbzRLZmAjsFVErRE+zKMZm9d0/0hcaqsNtB+qoO4wCQLG5DP1ckn
a5JVV4sT+L31qb7ASWr7/afuB9Qzta6YW1X3aZIkOGrHQVNgpTcIsGrtqhyhbwQi
rKNnxqPhMjMH1e1Tx8EIcezSZEnT6a6ZQlxCQcmsfkJaWkIr0ucCfrb5TrjRtl9s
ZFfRzTj6dJKGnYowPw+z96lDMw6bofFEXxGF/ASzLZxAfW3uwzvpAREoZb+w+/BY
RBA1b+mXa8jOyJBAcCvMtSh6fbn2AIq76IdNcBDZeIwTKWvsNz4jSXD5xGvPAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUFlWRm0WqdMMmxHMFDkG9CecZG3IwHwYDVR0j
BBgwFoAUVdCkvdMKsPI0anI877bHborZlncwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTgyZjJiMzgtYWRkZi00YmQzLTkyNDktZTViYTU2Y2QwNTJlLzAvNTVEMEE0QkRE
MzBBQjBGMjM0NkE3MjNDRUZCNkM3NkU4QUQ5OTY3Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NUQwQTRCREQzMEFCMEYyMzQ2QTcyM0NFRkI2Qzc2RThBRDk5
Njc3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU4MmYyYjM4LWFkZGYtNGJkMy05
MjQ5LWU1YmE1NmNkMDUyZS8wLzMxMzAzMzJlMzYyZTMyMzAzNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM1MzgzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnBs4wDQYJKoZIhvcN
AQELBQADggEBAFCtO78Jlta52+ie+ZarZJdSkNdoWhXM19HcN1F0gJ5XKhkIOQjy
om4sM3fCEGqrTxazyrDcBgITvN/E/yT3rt1IRnA2jHlCsG7SjK+vkg2vUrppuhvs
aO18jmdQXlH3CblhzMJh/BnibUXRRidoX8Hnwz1EirNJRyFY977eMdiFDDFT6Y9G
imUc9qNwjgXUarsreyiIwOsHlJGcsaH5dPxwfx2vXtKLGunQ2HS3IsLOi4UFtPgo
7nIpMplFZsRhCMQ11X4wI73inZlHdTzLb+veSBpitmjSVFxECZTzr3hch82dLwh3
TD+G8r8ylkZfdViSz7vGUTc4ah6lW47ClR8=
-----END CERTIFICATE-----
Generated at Wed May 13 01:38:07 2026 by rpki-client