Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa
File:                     3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (raw, json)
Hash identifier:          mckJR6NOoa+yl4WEvk2NXD7USkbc88RSKMqJlOr2OEY=
Subject key identifier:   43:64:C1:1D:E7:D2:2D:6F:D4:D7:BC:A7:4E:D9:64:24:5D:3A:ED:BC
Certificate issuer:       /CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
Certificate serial:       2DB7C6CF66C14386EE2A1CF408EBB7520ADBA4BD
Authority key identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa
Signing time:             Sun 03 May 2026 02:36:58 +0000
ROA not before:           Sun 03 May 2026 02:31:58 +0000
ROA not after:            Sun 02 May 2027 02:36:58 +0000
asID:                     149901
IP address blocks:        103.190.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl
                          rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b7:c6:cf:66:c1:43:86:ee:2a:1c:f4:08:eb:b7:52:0a:db:a4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
        Validity
            Not Before: May  3 02:31:58 2026 GMT
            Not After : May  2 02:36:58 2027 GMT
        Subject: CN=4364C11DE7D22D6FD4D7BCA74ED964245D3AEDBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:08:f4:65:6d:84:9f:2a:5a:72:1e:d7:85:cd:
                    11:25:3b:3f:d6:f7:d5:25:5a:4b:ad:dc:77:b6:ec:
                    b7:9b:b9:48:f6:67:73:b3:da:ab:73:06:58:c9:47:
                    ab:4a:5b:4c:83:ea:e9:8c:84:78:8e:02:45:b1:33:
                    27:3b:8d:12:06:e3:ab:6d:a1:bd:e3:7a:50:ad:99:
                    9c:18:b1:46:5b:9b:41:a8:f2:91:27:6a:ff:2f:5d:
                    14:93:17:21:5c:f1:5d:29:99:ac:41:72:39:74:e2:
                    9a:20:ab:aa:d0:e4:39:ce:33:fb:7c:c7:1a:08:9e:
                    09:6e:a8:a0:b0:2c:40:d6:ee:18:72:48:ba:68:b0:
                    58:b7:ee:66:c5:b7:d1:c5:78:e0:c4:78:17:ad:3c:
                    99:ad:4a:7d:1e:e2:f9:46:a3:dc:f8:de:75:cb:1a:
                    6b:9d:3b:27:15:2b:4e:18:92:ef:3c:dc:2f:46:16:
                    57:52:d8:50:34:e3:58:c7:8c:bd:9a:80:12:ac:66:
                    6f:b7:18:3e:91:e1:70:44:4f:19:2a:04:a3:60:10:
                    fd:44:1e:1a:9e:af:0f:d5:1e:d0:71:1d:47:86:b8:
                    77:63:34:39:c6:67:f8:83:a7:d7:36:a3:f7:ba:55:
                    cc:e0:68:e3:cf:17:38:5a:1d:44:62:ae:c5:3d:07:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:64:C1:1D:E7:D2:2D:6F:D4:D7:BC:A7:4E:D9:64:24:5D:3A:ED:BC
            X509v3 Authority Key Identifier:
                keyid:02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:a0:78:16:f4:a0:ac:b2:19:0b:62:39:e7:e3:fa:de:e2:
         bc:82:b0:12:c7:c5:d5:74:86:cc:1e:70:64:86:63:b9:6b:87:
         3a:d6:b6:46:76:37:ee:03:21:23:66:1f:72:b5:2e:f9:dd:c4:
         28:c2:af:dd:b2:42:41:4f:42:f7:c4:14:87:4b:c5:8e:65:a0:
         8a:40:e2:89:b8:7e:18:f1:b5:39:fc:c4:66:26:79:7c:da:b9:
         ac:18:88:97:27:86:4e:84:4a:29:bd:a8:b6:bd:05:4a:3d:ff:
         9b:68:01:bb:10:62:80:ed:05:f8:50:e5:69:3b:06:bf:b2:db:
         86:09:de:ae:5b:df:d7:eb:bc:78:d1:ef:97:4e:18:ec:5e:0e:
         f7:06:2c:e9:ee:95:e7:13:1e:e4:f2:ba:af:95:91:d0:3f:1d:
         fa:cf:54:df:9b:2f:4b:1b:f2:36:89:37:98:b8:36:c0:fa:01:
         69:3e:d9:17:15:39:44:e9:69:06:e1:13:db:88:b5:a7:cc:f8:
         e3:fc:55:c7:5f:df:38:7d:45:e7:fe:87:b2:7e:ba:b4:69:e0:
         fb:f4:9a:ba:4d:97:42:4e:fc:87:3c:47:8d:30:78:61:dc:e0:
         0d:c8:51:ff:d2:30:c6:f4:60:24:0d:6b:30:72:49:bd:ed:2d:
         0e:dd:ee:64
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULbfGz2bBQ4buKhz0COu3UgrbpL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJGODZENzkzMDY2NkFDOUIwODA5RDdBRTQyQzIwQjFE
MjlDQTk5NzAeFw0yNjA1MDMwMjMxNThaFw0yNzA1MDIwMjM2NThaMDMxMTAvBgNV
BAMTKDQzNjRDMTFERTdEMjJENkZENEQ3QkNBNzRFRDk2NDI0NUQzQUVEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuCPRlbYSfKlpyHteFzRElOz/W
99UlWkut3He27LebuUj2Z3Oz2qtzBljJR6tKW0yD6umMhHiOAkWxMyc7jRIG46tt
ob3jelCtmZwYsUZbm0Go8pEnav8vXRSTFyFc8V0pmaxBcjl04pogq6rQ5DnOM/t8
xxoIngluqKCwLEDW7hhySLposFi37mbFt9HFeODEeBetPJmtSn0e4vlGo9z43nXL
GmudOycVK04Yku883C9GFldS2FA041jHjL2agBKsZm+3GD6R4XBETxkqBKNgEP1E
Hhqerw/VHtBxHUeGuHdjNDnGZ/iDp9c2o/e6VczgaOPPFzhaHURirsU9B5UNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUQ2TBHefSLW/U17ynTtlkJF067bwwHwYDVR0j
BBgwFoAUAvhteTBmasmwgJ165CwgsdKcqZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWUzMTQ4NTgtYjMzYS00YjY1LTlhNTUtZGNlNDFlMjIzODczLzAvMDJGODZENzkz
MDY2NkFDOUIwODA5RDdBRTQyQzIwQjFEMjlDQTk5Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMkY4NkQ3OTMwNjY2QUM5QjA4MDlEN0FFNDJDMjBCMUQyOUNB
OTk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVlMzE0ODU4LWIzM2EtNGI2NS05
YTU1LWRjZTQxZTIyMzg3My8wLzMxMzAzMzJlMzEzOTMwMmUzNjMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzkzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ748MA0GCSqG
SIb3DQEBCwUAA4IBAQB0v6B4FvSgrLIZC2I55+P63uK8grASx8XVdIbMHnBkhmO5
a4c61rZGdjfuAyEjZh9ytS753cQowq/dskJBT0L3xBSHS8WOZaCKQOKJuH4Y8bU5
/MRmJnl82rmsGIiXJ4ZOhEopvai2vQVKPf+baAG7EGKA7QX4UOVpOwa/stuGCd6u
W9/X67x40e+XThjsXg73Bizp7pXnEx7k8rqvlZHQPx36z1Tfmy9LG/I2iTeYuDbA
+gFpPtkXFTlE6WkG4RPbiLWnzPjj/FXHX984fUXn/oeyfrq0aeD79Jq6TZdCTvyH
PEeNMHhh3OANyFH/0jDG9GAkDWswckm97S0O3e5k
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:08 2026 by rpki-client