Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132312e302f32342d3234203d3e203536323436.roa
File:                     3130332e31302e3132312e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          mlr4nQLpiJm8JjpaABNWRZ5/4qHIMbgTmxwSW/U2eW8=
Subject key identifier:   96:98:0E:B6:B1:8A:50:BF:5D:F7:BE:37:DD:8B:D6:85:3D:35:CD:07
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       636ADA9EE225D75B8E68440024F01A78A9633326
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132312e302f32342d3234203d3e203536323436.roa
Signing time:             Sun 03 May 2026 02:36:39 +0000
ROA not before:           Sun 03 May 2026 02:31:39 +0000
ROA not after:            Sun 02 May 2027 02:36:39 +0000
asID:                     56246
IP address blocks:        103.10.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6a:da:9e:e2:25:d7:5b:8e:68:44:00:24:f0:1a:78:a9:63:33:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:39 2026 GMT
            Not After : May  2 02:36:39 2027 GMT
        Subject: CN=96980EB6B18A50BF5DF7BE37DD8BD6853D35CD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:09:bc:6e:16:c7:e2:83:21:e8:9f:46:f6:47:
                    00:7a:c4:b3:02:02:ca:d8:7d:57:88:92:0c:86:c1:
                    1f:18:cf:af:8d:5f:fa:86:b5:d9:39:1f:a9:da:18:
                    45:3b:7a:aa:c6:af:a5:c2:5f:b7:9e:f1:50:70:32:
                    d4:a9:75:34:34:3b:4d:f5:17:9d:36:0f:ac:95:fc:
                    fc:ba:35:1a:57:f6:7d:e8:ee:18:51:3b:54:65:75:
                    18:b8:a2:d6:cd:df:9f:24:81:7b:ec:94:4d:8e:27:
                    38:aa:7d:83:9b:3a:d9:10:fa:97:30:ad:32:f4:e6:
                    62:a2:dc:3d:99:28:1d:42:e1:94:a7:23:56:d4:90:
                    7f:61:9e:84:c3:8a:0a:ab:06:a7:01:e1:d2:22:fb:
                    9a:5f:6e:c5:95:d1:e3:45:6b:bc:82:91:ef:ff:a2:
                    48:22:6b:5d:c9:27:66:ea:7d:57:7b:68:7f:88:58:
                    9e:f9:3b:20:06:b0:1f:cd:45:0e:df:11:71:a2:70:
                    ff:16:a6:cb:4f:9d:f8:89:e2:f8:11:06:62:89:e5:
                    ac:94:c6:24:e2:29:f8:a5:0e:ff:be:10:51:dc:37:
                    22:f7:90:bb:b0:53:f6:ce:32:cc:43:6e:f9:ce:92:
                    f6:e0:f6:ff:3e:13:68:c0:29:7f:1f:8e:30:00:41:
                    2a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:98:0E:B6:B1:8A:50:BF:5D:F7:BE:37:DD:8B:D6:85:3D:35:CD:07
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132312e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ab:98:9d:a1:f3:f4:e7:16:2a:ef:42:2f:47:dc:22:40:d4:
         3d:d5:a5:67:22:51:5a:df:31:18:f4:0b:72:89:fb:01:9a:b1:
         ff:b3:d4:48:2a:e6:e0:00:c2:bd:a0:21:77:fc:fa:19:7e:81:
         65:4c:a5:0d:4c:37:d9:e0:55:a6:b0:de:f6:c1:07:1b:3f:2b:
         9d:e2:67:39:a3:64:58:28:a5:64:95:6c:af:77:d2:f4:82:20:
         aa:e1:f2:b6:1b:8c:19:06:f7:23:a3:74:80:2a:69:ae:57:f0:
         ab:2c:cd:c4:8e:58:be:8f:ef:e6:cb:41:4f:ad:0f:bb:af:23:
         e9:e1:ed:df:c5:05:34:55:64:c9:6a:d9:1a:00:a3:74:44:37:
         3e:35:ad:09:fb:83:a7:8f:ed:16:ae:87:5b:6a:38:76:52:cf:
         5a:4d:8c:15:44:88:4a:cd:1f:d6:11:27:4a:6a:58:68:a1:6a:
         c6:e2:ae:67:e9:db:b4:1a:9a:77:40:f6:5c:77:32:4a:b6:44:
         2b:5a:e6:76:f2:93:5d:30:e7:05:47:df:24:75:2d:a3:a9:0e:
         63:96:0d:c2:d9:01:4b:98:c2:c8:99:29:87:d1:0f:9b:41:e3:
         b3:f9:1f:54:3c:02:40:eb:d9:d5:b1:bb:07:75:87:d9:a2:df:
         74:07:4a:20
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUY2ranuIl11uOaEQAJPAaeKljMyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw
OTAxREI1MjAeFw0yNjA1MDMwMjMxMzlaFw0yNzA1MDIwMjM2MzlaMDMxMTAvBgNV
BAMTKDk2OTgwRUI2QjE4QTUwQkY1REY3QkUzN0REOEJENjg1M0QzNUNEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrCbxuFsfigyHon0b2RwB6xLMC
AsrYfVeIkgyGwR8Yz6+NX/qGtdk5H6naGEU7eqrGr6XCX7ee8VBwMtSpdTQ0O031
F502D6yV/Py6NRpX9n3o7hhRO1RldRi4otbN358kgXvslE2OJziqfYObOtkQ+pcw
rTL05mKi3D2ZKB1C4ZSnI1bUkH9hnoTDigqrBqcB4dIi+5pfbsWV0eNFa7yCke//
okgia13JJ2bqfVd7aH+IWJ75OyAGsB/NRQ7fEXGicP8WpstPnfiJ4vgRBmKJ5ayU
xiTiKfilDv++EFHcNyL3kLuwU/bOMsxDbvnOkvbg9v8+E2jAKX8fjjAAQSqhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUlpgOtrGKUL9d97433YvWhT01zQcwHwYDVR0j
BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF
MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE
QjUyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05
NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMDJlMzEzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKeTANBgkqhkiG
9w0BAQsFAAOCAQEAE6uYnaHz9OcWKu9CL0fcIkDUPdWlZyJRWt8xGPQLcon7AZqx
/7PUSCrm4ADCvaAhd/z6GX6BZUylDUw32eBVprDe9sEHGz8rneJnOaNkWCilZJVs
r3fS9IIgquHythuMGQb3I6N0gCpprlfwqyzNxI5Yvo/v5stBT60Pu68j6eHt38UF
NFVkyWrZGgCjdEQ3PjWtCfuDp4/tFq6HW2o4dlLPWk2MFUSISs0f1hEnSmpYaKFq
xuKuZ+nbtBqad0D2XHcySrZEK1rmdvKTXTDnBUffJHUto6kOY5YNwtkBS5jCyJkp
h9EPm0Hjs/kfVDwCQOvZ1bG7B3WH2aLfdAdKIA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:59:39 2026 by rpki-client