Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3130332e34392e3232322e302f32332d3233203d3e203234323131.roa
File:                     3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (raw, json)
Hash identifier:          CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=
Subject key identifier:   AB:F6:D8:AA:83:13:13:01:BC:FD:C6:BC:97:47:1B:C2:12:34:56:21
Certificate issuer:       /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial:       0D529FD9752A6F7FF9E664CE8962E0108A08355F
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3130332e34392e3232322e302f32332d3233203d3e203234323131.roa
Signing time:             Sun 03 May 2026 02:35:14 +0000
ROA not before:           Sun 03 May 2026 02:30:14 +0000
ROA not after:            Sun 02 May 2027 02:35:14 +0000
asID:                     24211
IP address blocks:        103.49.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
                          rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:52:9f:d9:75:2a:6f:7f:f9:e6:64:ce:89:62:e0:10:8a:08:35:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
        Validity
            Not Before: May  3 02:30:14 2026 GMT
            Not After : May  2 02:35:14 2027 GMT
        Subject: CN=ABF6D8AA83131301BCFDC6BC97471BC212345621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:b2:d9:27:d9:29:d9:95:00:8c:3f:6c:17:
                    80:32:52:f7:9c:a4:fa:70:a6:c4:50:2e:56:3e:43:
                    fa:36:47:bd:8f:58:95:3d:85:d8:91:95:84:dc:bd:
                    4c:bf:ac:14:6f:06:2e:8a:9c:96:45:a2:21:eb:51:
                    35:f1:40:56:d5:b8:c8:9a:8f:fb:36:84:8f:a6:59:
                    16:34:3c:e4:ba:3b:23:41:bf:df:ae:3a:b0:b9:d4:
                    a0:d3:7d:2e:d2:06:72:41:28:f4:5c:2e:d2:5c:72:
                    1c:8d:8a:5e:8d:3e:d1:03:7a:12:8b:fd:af:0e:84:
                    f8:d2:6f:4e:ac:8c:8f:19:c8:76:5e:bb:80:25:69:
                    cf:ad:7c:9d:c7:f1:9c:b6:51:2e:fc:92:d1:c4:1c:
                    c6:b2:78:00:7e:34:94:4d:12:8c:15:27:83:35:b4:
                    bc:e5:f1:a5:6b:70:ab:2d:8a:dc:3e:c3:2c:79:f6:
                    1f:d5:9a:50:b2:12:14:df:0a:e9:2e:5b:ca:e2:4e:
                    4e:2b:67:4c:0e:02:14:81:4d:ec:cc:0e:fe:46:dd:
                    25:81:56:70:f8:d8:e1:a5:e0:30:67:14:49:dd:27:
                    66:4e:46:1b:3b:12:71:05:a4:7f:6b:29:23:a7:c8:
                    ad:8c:95:ff:65:34:0d:ac:06:4e:dd:c2:19:d4:4d:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F6:D8:AA:83:13:13:01:BC:FD:C6:BC:97:47:1B:C2:12:34:56:21
            X509v3 Authority Key Identifier:
                keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3130332e34392e3232322e302f32332d3233203d3e203234323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:f2:7d:9a:3a:49:97:5d:a3:dc:ba:39:0a:27:e5:9c:cd:3b:
         17:54:0f:9b:29:86:f1:3d:06:7a:72:8d:eb:e6:fe:16:7e:31:
         18:e4:ba:23:0c:23:74:99:1c:3e:a2:4d:5c:e5:35:5c:bb:ca:
         3e:73:8c:04:b5:0d:0e:1f:58:c5:c6:77:d7:cb:ea:05:aa:bb:
         90:9a:32:e6:68:60:8c:b4:24:68:96:6c:fa:df:f6:73:50:74:
         97:2e:87:69:60:6a:ee:99:8f:a1:aa:e8:10:88:0c:f0:38:4f:
         71:56:de:13:47:ee:9f:a7:7b:01:e7:71:05:95:60:d3:58:39:
         b2:83:de:96:de:a2:8e:e5:6d:37:04:77:e0:09:f3:a9:df:e3:
         07:cb:48:5f:55:36:13:f6:3b:3c:a0:c1:35:84:06:e7:6a:99:
         98:f0:20:ec:82:17:e7:f6:b2:cc:6c:62:91:9b:dd:16:1d:41:
         ef:35:a2:4b:16:51:d3:41:6d:58:8b:c3:69:fb:e9:4c:d5:6d:
         f2:34:ce:32:69:90:7a:40:5f:1e:db:e7:1f:c6:74:8e:a2:55:
         92:57:ab:8d:a9:85:9e:78:35:b8:34:f2:ef:9c:15:fb:d1:8a:
         95:e6:4a:52:fe:0b:00:85:63:49:dd:ad:e7:50:06:6c:02:94:
         63:53:17:df
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDVKf2XUqb3/55mTOiWLgEIoINV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhBNzI3ODc4NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFB
NkIzRjc1QzAeFw0yNjA1MDMwMjMwMTRaFw0yNzA1MDIwMjM1MTRaMDMxMTAvBgNV
BAMTKEFCRjZEOEFBODMxMzEzMDFCQ0ZEQzZCQzk3NDcxQkMyMTIzNDU2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPErLZJ9kp2ZUAjD9sF4AyUvec
pPpwpsRQLlY+Q/o2R72PWJU9hdiRlYTcvUy/rBRvBi6KnJZFoiHrUTXxQFbVuMia
j/s2hI+mWRY0POS6OyNBv9+uOrC51KDTfS7SBnJBKPRcLtJcchyNil6NPtEDehKL
/a8OhPjSb06sjI8ZyHZeu4Alac+tfJ3H8Zy2US78ktHEHMayeAB+NJRNEowVJ4M1
tLzl8aVrcKstitw+wyx59h/VmlCyEhTfCukuW8riTk4rZ0wOAhSBTezMDv5G3SWB
VnD42OGl4DBnFEndJ2ZORhs7EnEFpH9rKSOnyK2Mlf9lNA2sBk7dwhnUTSRDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUq/bYqoMTEwG8/ca8l0cbwhI0ViEwHwYDVR0j
BBgwFoAUaKcnh4dI9A72LXRLBjA/caaz91wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTlmMDEzZjktYjRmNy00NThjLWFhYzUtMDgwNDFiM2Y2NWU2LzAvNjhBNzI3ODc4
NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFBNkIzRjc1Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OEE3Mjc4Nzg3NDhGNDBFRjYyRDc0NEIwNjMwM0Y3MUE2QjNG
NzVDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h
YWM1LTA4MDQxYjNmNjVlNi8wLzMxMzAzMzJlMzQzOTJlMzIzMjMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzIzNDMyMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcx3jANBgkqhkiG
9w0BAQsFAAOCAQEAovJ9mjpJl12j3Lo5CiflnM07F1QPmymG8T0GenKN6+b+Fn4x
GOS6IwwjdJkcPqJNXOU1XLvKPnOMBLUNDh9YxcZ318vqBaq7kJoy5mhgjLQkaJZs
+t/2c1B0ly6HaWBq7pmPoaroEIgM8DhPcVbeE0fun6d7AedxBZVg01g5soPelt6i
juVtNwR34Anzqd/jB8tIX1U2E/Y7PKDBNYQG52qZmPAg7IIX5/ayzGxikZvdFh1B
7zWiSxZR00FtWIvDafvpTNVt8jTOMmmQekBfHtvnH8Z0jqJVklerjamFnng1uDTy
75wV+9GKleZKUv4LAIVjSd2t51AGbAKUY1MX3w==
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:41 2026 by rpki-client