Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
File:                     3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (raw, json)
Hash identifier:          yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=
Subject key identifier:   3C:D0:96:2E:33:2A:25:AB:E1:98:FB:04:58:A2:EB:CD:31:93:44:F9
Certificate issuer:       /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
Certificate serial:       694E761D97804AA492C26FF5A7B9213E02D1808B
Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa
Signing time:             Sun 03 May 2026 02:37:44 +0000
ROA not before:           Sun 03 May 2026 02:32:44 +0000
ROA not after:            Sun 02 May 2027 02:37:44 +0000
asID:                     149943
IP address blocks:        103.191.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl
                          rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4e:76:1d:97:80:4a:a4:92:c2:6f:f5:a7:b9:21:3e:02:d1:80:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
        Validity
            Not Before: May  3 02:32:44 2026 GMT
            Not After : May  2 02:37:44 2027 GMT
        Subject: CN=3CD0962E332A25ABE198FB0458A2EBCD319344F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f7:02:9d:29:6e:9b:61:b8:e2:f0:f6:e5:38:
                    ea:7a:b5:cb:3f:87:0f:52:24:97:e8:3c:33:ee:5c:
                    59:84:3f:23:56:12:02:1f:58:c2:d6:d2:23:cb:da:
                    a3:e0:d4:24:8f:26:2f:cc:75:0f:92:60:0e:f3:ca:
                    bd:a1:52:da:34:02:da:5d:6a:ed:dc:55:9a:29:aa:
                    94:fc:69:9b:f6:17:73:52:02:bc:45:68:fd:0a:03:
                    d7:df:55:b4:27:89:a5:be:a9:16:d6:ee:6d:02:43:
                    51:01:00:cc:f5:c1:a2:53:11:14:2d:90:1b:f8:69:
                    b2:2f:33:17:ec:80:14:01:65:fc:c0:57:7e:54:e7:
                    a7:41:51:d7:25:13:6d:8d:c1:96:dc:5b:f9:0a:4a:
                    3a:e9:85:50:4d:91:e7:58:02:ee:03:7d:2a:5a:f8:
                    ef:4d:40:88:7d:7b:22:4a:56:f7:c1:d9:4c:cf:8c:
                    df:d3:2b:9c:31:e1:18:5f:d7:13:8b:68:7f:fa:cd:
                    45:a8:72:f9:73:e4:3d:ab:d0:8a:d3:f7:75:b4:61:
                    96:dc:c5:77:a8:bb:79:0d:f3:31:d0:aa:4d:c7:14:
                    fa:d2:ac:45:50:5a:a7:13:d8:1b:cb:59:04:96:5c:
                    31:9f:f5:22:92:21:43:c1:41:56:79:5f:5c:ae:8e:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D0:96:2E:33:2A:25:AB:E1:98:FB:04:58:A2:EB:CD:31:93:44:F9
            X509v3 Authority Key Identifier:
                keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a8:a8:75:99:1f:d3:8e:64:ae:5d:09:8f:ca:83:aa:53:ec:
         88:e1:62:cb:6c:3c:b4:77:53:1d:06:2c:cc:44:52:ca:3b:0b:
         a7:39:28:2d:92:d0:48:73:a2:b3:23:02:8d:ba:19:00:e2:7b:
         6a:3b:c2:28:8e:6c:0f:ac:08:c0:c4:f1:d9:b4:d1:19:99:95:
         0b:30:60:4a:e5:29:48:c5:25:11:85:23:82:57:47:33:e3:27:
         79:d9:35:cc:1e:11:5c:64:f2:85:f6:3b:0c:4e:fc:72:82:e0:
         d3:77:7e:80:9b:93:44:b8:58:3d:f3:53:4b:4a:5d:f9:47:33:
         08:54:9b:a2:d0:c7:05:a0:b9:6a:5c:40:fd:a0:36:6d:11:50:
         92:fb:77:89:10:c3:17:d6:17:f1:fa:79:62:89:c7:db:d9:a8:
         62:17:47:6f:ae:eb:a9:67:71:9b:49:b2:ad:19:8c:af:c3:0b:
         1b:36:31:2c:09:80:32:a3:3b:15:6b:46:58:bc:1a:b4:7a:9f:
         6a:4a:94:a0:68:a3:b8:5c:2a:c4:12:fe:5b:75:5c:81:22:e0:
         45:17:d5:ea:cb:8d:b5:44:92:cc:40:64:96:a3:93:38:fb:d2:
         80:f3:ff:21:33:d3:a1:e6:53:bb:c2:5c:e8:d0:0c:e2:fd:aa:
         b5:af:88:57
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUaU52HZeASqSSwm/1p7khPgLRgIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3
RDRENzJCQzAeFw0yNjA1MDMwMjMyNDRaFw0yNzA1MDIwMjM3NDRaMDMxMTAvBgNV
BAMTKDNDRDA5NjJFMzMyQTI1QUJFMTk4RkIwNDU4QTJFQkNEMzE5MzQ0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv9wKdKW6bYbji8PblOOp6tcs/
hw9SJJfoPDPuXFmEPyNWEgIfWMLW0iPL2qPg1CSPJi/MdQ+SYA7zyr2hUto0Atpd
au3cVZopqpT8aZv2F3NSArxFaP0KA9ffVbQniaW+qRbW7m0CQ1EBAMz1waJTERQt
kBv4abIvMxfsgBQBZfzAV35U56dBUdclE22NwZbcW/kKSjrphVBNkedYAu4DfSpa
+O9NQIh9eyJKVvfB2UzPjN/TK5wx4Rhf1xOLaH/6zUWocvlz5D2r0IrT93W0YZbc
xXeou3kN8zHQqk3HFPrSrEVQWqcT2BvLWQSWXDGf9SKSIUPBQVZ5X1yuju7JAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUPNCWLjMqJavhmPsEWKLrzTGTRPkwHwYDVR0j
BBgwFoAUsp2H4Hiu0UJv5928FEFaK31NcrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjA5OGY5MjQtOWYyZS00OTliLTgxMDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3
OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3RDRENzJCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMjlEODdFMDc4QUVEMTQyNkZFN0REQkMxNDQxNUEyQjdENEQ3
MkJDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwOThmOTI0LTlmMmUtNDk5Yi04
MTAxLTAyZjc1MDY5MzJiZi8wLzMxMzAzMzJlMzEzOTMxMmUzMjM1MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv/4wDQYJ
KoZIhvcNAQELBQADggEBABSoqHWZH9OOZK5dCY/Kg6pT7IjhYstsPLR3Ux0GLMxE
Uso7C6c5KC2S0EhzorMjAo26GQDie2o7wiiObA+sCMDE8dm00RmZlQswYErlKUjF
JRGFI4JXRzPjJ3nZNcweEVxk8oX2OwxO/HKC4NN3foCbk0S4WD3zU0tKXflHMwhU
m6LQxwWguWpcQP2gNm0RUJL7d4kQwxfWF/H6eWKJx9vZqGIXR2+u66lncZtJsq0Z
jK/DCxs2MSwJgDKjOxVrRli8GrR6n2pKlKBoo7hcKsQS/lt1XIEi4EUX1erLjbVE
ksxAZJajkzj70oDz/yEz06HmU7vCXOjQDOL9qrWviFc=
-----END CERTIFICATE-----
Generated at Wed May 13 14:09:09 2026 by rpki-client