Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa
File:                     3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (raw, json)
Hash identifier:          /FAsg1d5HOXN4IRL/RMI5oxHPMjWm4jYt7UGojb2reQ=
Subject key identifier:   50:F5:C8:88:88:B0:87:87:89:3C:99:08:82:D9:16:D1:A6:58:0A:50
Certificate issuer:       /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3
Certificate serial:       59439FDF42CC140CA8F2D62EE90EB4F26DF7A52B
Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa
Signing time:             Sun 03 May 2026 02:37:51 +0000
ROA not before:           Sun 03 May 2026 02:32:51 +0000
ROA not after:            Sun 02 May 2027 02:37:51 +0000
asID:                     64029
IP address blocks:        103.214.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl
                          rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:43:9f:df:42:cc:14:0c:a8:f2:d6:2e:e9:0e:b4:f2:6d:f7:a5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3
        Validity
            Not Before: May  3 02:32:51 2026 GMT
            Not After : May  2 02:37:51 2027 GMT
        Subject: CN=50F5C88888B08787893C990882D916D1A6580A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:35:bf:6e:1d:c8:46:eb:ee:39:99:e9:87:
                    d4:9e:c5:db:32:1b:3e:ec:b0:ac:b7:0e:3f:cb:47:
                    1c:c2:63:28:fd:40:d3:dd:6a:4d:3e:1c:1b:85:a5:
                    96:0d:6c:06:98:1d:86:a4:4c:ac:59:d9:f8:0f:4c:
                    78:fa:a5:05:4f:e2:6d:c9:4d:69:8a:cd:bb:c2:dc:
                    50:fe:c4:38:92:3d:70:32:2f:1c:9c:b7:ec:68:fa:
                    de:3d:df:2a:47:5d:c5:af:05:8d:8e:4b:22:7b:07:
                    2d:60:75:b2:ce:e8:28:ba:ca:5a:eb:ad:66:b0:6c:
                    15:67:49:18:ea:c9:e5:7f:fc:9f:27:65:7b:9e:35:
                    d0:fb:84:19:c7:47:81:5b:c7:bb:5d:f9:ca:5a:5e:
                    89:53:3b:88:38:08:71:82:6e:ed:89:5e:57:3b:56:
                    4c:3a:e8:dd:30:b6:fe:6c:31:6a:ef:67:b4:71:2b:
                    c6:dd:b0:0c:fb:c1:65:e5:54:96:34:25:32:14:4c:
                    4b:03:e5:5c:95:cc:66:b0:83:f3:36:b4:cd:e2:ce:
                    37:93:ad:05:43:17:48:01:b5:4c:be:fe:e4:53:c6:
                    8c:19:a9:0d:54:6a:ba:40:17:99:4f:34:2c:c9:ea:
                    2e:28:36:d6:01:3e:6a:84:78:0d:2e:29:1f:df:7f:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F5:C8:88:88:B0:87:87:89:3C:99:08:82:D9:16:D1:A6:58:0A:50
            X509v3 Authority Key Identifier:
                keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:03:da:f6:15:0a:4a:27:bc:f6:a7:dc:71:62:c3:ff:4a:89:
         8e:d8:5a:c6:df:00:70:1f:2e:c3:fb:99:94:68:f5:ab:45:56:
         21:52:68:34:34:8b:a3:f2:df:ac:85:dd:95:9e:0e:20:a1:21:
         9e:b8:df:11:cb:15:95:d1:63:12:2a:de:94:61:c2:6b:9a:62:
         e5:45:8f:8e:32:21:d1:8e:16:ad:08:90:c2:b5:0f:9a:39:ae:
         58:e2:f0:83:b9:81:49:3f:bf:80:0f:c7:e6:ab:be:62:e6:d7:
         5d:88:bf:42:c9:6e:b3:05:d3:8c:fa:24:93:63:39:e2:5b:f9:
         e0:64:60:96:2d:80:ed:eb:20:6d:c5:4f:05:22:cf:53:87:b9:
         a4:17:e7:c7:84:57:7a:5d:95:6a:d9:55:7c:1e:89:8c:86:a2:
         54:ce:0a:a6:f4:ae:7d:9c:a9:73:c2:7b:18:d4:f0:a2:ae:25:
         12:1c:b4:d1:15:39:55:17:35:03:59:5a:83:da:ca:9b:8a:09:
         30:fb:80:09:a4:2e:f4:73:72:b2:e3:a1:e9:bb:74:ab:63:5f:
         b4:29:b0:fd:6c:bb:7a:47:35:9e:c7:3c:a1:7b:24:ca:b9:3e:
         f6:7d:2e:0f:3d:f2:72:6c:89:1b:33:f6:8d:47:c8:ed:c1:04:
         db:a9:fb:ed
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWUOf30LMFAyo8tYu6Q608m33pSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0
OUJFNDdBMzAeFw0yNjA1MDMwMjMyNTFaFw0yNzA1MDIwMjM3NTFaMDMxMTAvBgNV
BAMTKDUwRjVDODg4ODhCMDg3ODc4OTNDOTkwODgyRDkxNkQxQTY1ODBBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kTW/bh3IRuvuOZnph9Sexdsy
Gz7ssKy3Dj/LRxzCYyj9QNPdak0+HBuFpZYNbAaYHYakTKxZ2fgPTHj6pQVP4m3J
TWmKzbvC3FD+xDiSPXAyLxyct+xo+t493ypHXcWvBY2OSyJ7By1gdbLO6Ci6ylrr
rWawbBVnSRjqyeV//J8nZXueNdD7hBnHR4Fbx7td+cpaXolTO4g4CHGCbu2JXlc7
Vkw66N0wtv5sMWrvZ7RxK8bdsAz7wWXlVJY0JTIUTEsD5VyVzGawg/M2tM3izjeT
rQVDF0gBtUy+/uRTxowZqQ1UarpAF5lPNCzJ6i4oNtYBPmqEeA0uKR/ff5zdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUUPXIiIiwh4eJPJkIgtkW0aZYClAwHwYDVR0j
BBgwFoAU8yjq76YKoLV7BAwE1UETgkm+R6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjEwN2ZkOGEtMTUwZi00NTNmLWEwZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZB
NjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0OUJFNDdBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMzI4RUFFRkE2MEFBMEI1N0IwNDBDMDRENTQxMTM4MjQ5QkU0
N0EzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYxMDdmZDhhLTE1MGYtNDUzZi1h
MGY1LTU3ZWFkNDFlZDAzMi8wLzMxMzAzMzJlMzIzMTM0MmUzMTM4MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjM0MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9a7MA0GCSqG
SIb3DQEBCwUAA4IBAQBpA9r2FQpKJ7z2p9xxYsP/SomO2FrG3wBwHy7D+5mUaPWr
RVYhUmg0NIuj8t+shd2Vng4goSGeuN8RyxWV0WMSKt6UYcJrmmLlRY+OMiHRjhat
CJDCtQ+aOa5Y4vCDuYFJP7+AD8fmq75i5tddiL9CyW6zBdOM+iSTYzniW/ngZGCW
LYDt6yBtxU8FIs9Th7mkF+fHhFd6XZVq2VV8HomMhqJUzgqm9K59nKlzwnsY1PCi
riUSHLTRFTlVFzUDWVqD2sqbigkw+4AJpC70c3Ky46Hpu3SrY1+0KbD9bLt6RzWe
xzyheyTKuT72fS4PPfJybIkbM/aNR8jtwQTbqfvt
-----END CERTIFICATE-----
Generated at Wed May 13 03:00:03 2026 by rpki-client