Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132302e302f32332d3233203d3e203536323436.roa
File:                     3130332e31302e3132302e302f32332d3233203d3e203536323436.roa (raw, json)
Hash identifier:          pVgfiZFAO0fcprvoOMlGwNe4d+AbQWlVQORze4BKyt0=
Subject key identifier:   A2:74:96:41:10:12:59:D9:F6:12:F8:AD:D6:E3:C0:97:A8:D0:C4:D5
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       140A7F8A78F16E9F0F3C586B9FCC3FBE5B8047DA
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132302e302f32332d3233203d3e203536323436.roa
Signing time:             Sun 03 May 2026 02:36:43 +0000
ROA not before:           Sun 03 May 2026 02:31:43 +0000
ROA not after:            Sun 02 May 2027 02:36:43 +0000
asID:                     56246
IP address blocks:        103.10.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0a:7f:8a:78:f1:6e:9f:0f:3c:58:6b:9f:cc:3f:be:5b:80:47:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:43 2026 GMT
            Not After : May  2 02:36:43 2027 GMT
        Subject: CN=A2749641101259D9F612F8ADD6E3C097A8D0C4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:5a:7b:e7:ea:58:ba:b4:82:53:7b:3f:8f:
                    5e:00:b5:b0:f5:b1:88:4e:63:6a:b0:84:3f:08:a8:
                    48:6c:c7:3b:43:5e:47:c4:33:16:b5:6b:7c:4b:10:
                    21:55:d2:bc:0a:6c:03:ab:53:67:55:62:2a:6b:8e:
                    35:1c:ef:03:30:2e:2e:e1:5b:25:61:6a:c8:5e:70:
                    95:8f:df:9f:0d:5a:1a:be:d6:a3:83:15:c8:25:04:
                    c7:09:18:20:c1:e4:83:6a:a1:c6:b0:e8:af:d3:97:
                    f3:54:86:61:b6:5e:d9:f2:e8:cd:fd:a5:60:70:27:
                    68:29:65:a5:37:82:7d:ff:d9:b9:03:2e:fb:a1:ae:
                    82:57:86:a0:df:35:69:61:92:02:c1:e4:ca:ad:d8:
                    6f:85:4a:55:48:78:77:02:de:73:0d:23:03:62:53:
                    24:2f:e6:72:2e:e1:fd:3e:f2:0e:d3:ce:5f:c6:2c:
                    29:97:bf:7d:81:b3:61:86:e1:0b:c2:b3:0c:e0:12:
                    f6:86:c4:34:c7:59:e0:0f:f4:66:08:8c:d2:69:ba:
                    ed:dd:8b:51:ce:36:0b:39:db:3a:28:ec:a7:74:85:
                    57:4f:09:d9:fe:e0:ef:ee:1c:dc:aa:bf:c3:85:6d:
                    11:ea:a7:06:b2:4d:13:c5:0d:5b:00:47:be:99:c9:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:96:41:10:12:59:D9:F6:12:F8:AD:D6:E3:C0:97:A8:D0:C4:D5
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132302e302f32332d3233203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:2d:79:c3:de:61:09:ee:10:ad:8e:c8:cb:1e:8e:08:c2:55:
         f1:bd:b3:85:19:1a:7b:27:71:83:08:a5:88:6a:b3:3e:f5:c8:
         56:fd:35:81:44:af:55:00:ef:bf:05:49:ec:ce:03:e9:71:45:
         98:e5:23:78:ce:c2:ef:bb:6c:bf:20:c0:62:5f:22:28:1a:d8:
         21:14:76:7b:b0:0d:19:9f:c3:9b:5b:1a:f9:21:9a:eb:39:e8:
         ec:b9:66:2d:9a:cf:ae:78:22:ec:81:9b:99:66:7d:a2:3d:1f:
         e4:d2:1e:27:19:af:c3:e7:60:00:b9:78:15:b4:3a:2a:8e:29:
         03:87:14:56:f8:33:94:a3:1e:52:17:76:26:aa:76:0a:9e:8e:
         7a:5c:13:c0:69:4f:43:93:4b:46:d9:f8:24:75:a9:f4:6f:c7:
         52:8d:32:83:00:ee:e2:fa:09:e9:c0:c0:bf:b7:a8:3c:b1:7b:
         19:e5:f3:dd:bb:f1:23:df:18:5f:84:8e:47:ac:37:a0:96:ea:
         7b:4d:97:ca:b0:aa:5d:fe:6b:09:46:69:7c:d8:58:6a:90:d8:
         62:42:72:e0:62:1f:b9:70:b1:94:f4:b6:4a:76:6d:40:a8:da:
         8a:a0:12:41:a9:19:84:a3:b4:fd:f1:e1:72:59:ac:1f:2e:40:
         c7:6d:65:f8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFAp/injxbp8PPFhrn8w/vluAR9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw
OTAxREI1MjAeFw0yNjA1MDMwMjMxNDNaFw0yNzA1MDIwMjM2NDNaMDMxMTAvBgNV
BAMTKEEyNzQ5NjQxMTAxMjU5RDlGNjEyRjhBREQ2RTNDMDk3QThEMEM0RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLFp75+pYurSCU3s/j14AtbD1
sYhOY2qwhD8IqEhsxztDXkfEMxa1a3xLECFV0rwKbAOrU2dVYiprjjUc7wMwLi7h
WyVhashecJWP358NWhq+1qODFcglBMcJGCDB5INqocaw6K/Tl/NUhmG2Xtny6M39
pWBwJ2gpZaU3gn3/2bkDLvuhroJXhqDfNWlhkgLB5Mqt2G+FSlVIeHcC3nMNIwNi
UyQv5nIu4f0+8g7Tzl/GLCmXv32Bs2GG4QvCswzgEvaGxDTHWeAP9GYIjNJpuu3d
i1HONgs52zoo7Kd0hVdPCdn+4O/uHNyqv8OFbRHqpwayTRPFDVsAR76ZyamlAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUonSWQRASWdn2Evit1uPAl6jQxNUwHwYDVR0j
BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF
MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE
QjUyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05
NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMDJlMzEzMjMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcKeDANBgkqhkiG
9w0BAQsFAAOCAQEAdC15w95hCe4QrY7Iyx6OCMJV8b2zhRkaeydxgwiliGqzPvXI
Vv01gUSvVQDvvwVJ7M4D6XFFmOUjeM7C77tsvyDAYl8iKBrYIRR2e7ANGZ/Dm1sa
+SGa6zno7LlmLZrPrngi7IGbmWZ9oj0f5NIeJxmvw+dgALl4FbQ6Ko4pA4cUVvgz
lKMeUhd2Jqp2Cp6OelwTwGlPQ5NLRtn4JHWp9G/HUo0ygwDu4voJ6cDAv7eoPLF7
GeXz3bvxI98YX4SOR6w3oJbqe02XyrCqXf5rCUZpfNhYapDYYkJy4GIfuXCxlPS2
SnZtQKjaiqASQakZhKO0/fHhclmsHy5Ax21l+A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:54 2026 by rpki-client