Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa
File:                     3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (raw, json)
Hash identifier:          DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=
Subject key identifier:   6D:FF:32:3B:B1:60:8F:B4:96:A1:04:15:4B:FC:C7:B3:54:90:40:DB
Certificate issuer:       /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5
Certificate serial:       42A2FE3CF0FC5D18248677F2E818AAA213127A98
Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa
Signing time:             Sun 03 May 2026 02:40:02 +0000
ROA not before:           Sun 03 May 2026 02:35:02 +0000
ROA not after:            Sun 02 May 2027 02:40:02 +0000
asID:                     56286
IP address blocks:        103.26.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl
                          rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:fe:3c:f0:fc:5d:18:24:86:77:f2:e8:18:aa:a2:13:12:7a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5
        Validity
            Not Before: May  3 02:35:02 2026 GMT
            Not After : May  2 02:40:02 2027 GMT
        Subject: CN=6DFF323BB1608FB496A104154BFCC7B3549040DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:c4:ac:d9:b0:10:c8:8a:1d:a5:45:6a:80:
                    98:22:fc:57:c1:87:67:e2:3b:9b:e9:fc:06:87:d1:
                    39:9f:70:91:ac:2c:7b:85:67:46:1d:c0:d2:88:ce:
                    0b:05:fa:80:37:e9:4a:1f:36:ca:0e:fa:b9:fa:e6:
                    4b:28:02:72:0b:ba:bd:e5:31:b7:b4:18:39:53:bf:
                    71:68:6d:ed:fd:6a:87:8b:e9:95:85:51:d8:42:74:
                    e8:35:3f:05:cd:a2:d6:43:58:c1:c0:7a:07:de:44:
                    ed:26:3e:4d:9b:e5:e4:41:3e:96:e6:e7:1a:83:66:
                    dd:78:3d:b3:e6:07:7d:5f:e2:87:fd:89:c3:78:58:
                    9f:18:f5:ec:28:fc:a5:21:00:21:d9:c9:29:1c:e1:
                    63:2d:8b:e4:a6:62:ab:47:00:f9:0c:17:80:11:51:
                    f2:e1:68:9f:c2:0a:44:46:ff:2a:b9:c7:df:66:8c:
                    b6:a2:b1:ef:7f:b9:a2:9a:f7:18:5e:bf:21:6a:78:
                    55:2e:48:b5:cf:aa:c4:6b:97:bd:5f:e2:b2:ef:87:
                    83:a5:c0:4e:89:7d:8e:4e:7d:82:3e:bf:6e:c5:70:
                    c6:c7:bd:3d:27:7c:65:7d:8c:e7:4e:d9:a0:83:4c:
                    df:23:5c:d3:21:7f:e3:a0:f1:19:94:81:10:96:bd:
                    83:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:32:3B:B1:60:8F:B4:96:A1:04:15:4B:FC:C7:B3:54:90:40:DB
            X509v3 Authority Key Identifier:
                keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:34:34:23:09:1c:a4:59:a6:e5:db:b2:bf:c8:23:e2:bd:
         0c:0c:b8:f6:9a:39:fb:c2:cd:33:67:2f:a5:a1:40:d4:4f:fb:
         91:f5:e4:61:6c:14:21:61:c3:90:38:0f:2f:43:66:be:7d:5a:
         dd:e7:51:c3:db:31:ec:25:93:9c:1a:d4:87:94:5c:78:af:54:
         43:62:d3:84:8a:1a:e8:03:5b:fa:d7:34:a8:7b:fc:a2:f8:ba:
         13:30:d1:3c:a1:ed:74:07:06:37:33:f4:9e:82:47:d4:5c:bd:
         6a:1b:d7:5e:b6:b3:22:42:71:d1:17:5a:39:c3:b5:a4:15:25:
         7d:63:25:06:70:dd:2a:d2:7d:81:52:8f:7f:8c:e9:2f:3d:6a:
         11:de:41:51:87:b1:9c:ac:da:41:f5:6b:ba:2f:2f:17:c1:53:
         10:82:c6:1c:a0:1b:2c:8f:82:e6:a1:ef:16:2d:57:44:c0:a5:
         59:08:e6:0d:64:8b:10:88:7e:dd:9e:e3:3f:aa:56:c5:40:8b:
         b9:af:e8:01:5d:a3:ee:3c:b2:76:03:46:53:22:79:ae:05:11:
         66:f1:8e:06:f3:ab:36:37:aa:ff:0b:dd:e7:5f:dc:22:5c:51:
         81:40:cd:58:0c:a5:f1:36:9b:a6:be:23:0b:2e:1d:ce:0e:13:
         af:fc:5b:27
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQqL+PPD8XRgkhnfy6BiqohMSepgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC
ODE0NDNBNTAeFw0yNjA1MDMwMjM1MDJaFw0yNzA1MDIwMjQwMDJaMDMxMTAvBgNV
BAMTKDZERkYzMjNCQjE2MDhGQjQ5NkExMDQxNTRCRkNDN0IzNTQ5MDQwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcIsSs2bAQyIodpUVqgJgi/FfB
h2fiO5vp/AaH0TmfcJGsLHuFZ0YdwNKIzgsF+oA36UofNsoO+rn65ksoAnILur3l
Mbe0GDlTv3Fobe39aoeL6ZWFUdhCdOg1PwXNotZDWMHAegfeRO0mPk2b5eRBPpbm
5xqDZt14PbPmB31f4of9icN4WJ8Y9ewo/KUhACHZySkc4WMti+SmYqtHAPkMF4AR
UfLhaJ/CCkRG/yq5x99mjLaise9/uaKa9xhevyFqeFUuSLXPqsRrl71f4rLvh4Ol
wE6JfY5OfYI+v27FcMbHvT0nfGV9jOdO2aCDTN8jXNMhf+Og8RmUgRCWvYMLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUbf8yO7Fgj7SWoQQVS/zHs1SQQNswHwYDVR0j
BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz
MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0
M0E1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY2OTI2YzgyLWM4ZTUtNGY5Ny04
OTk0LTJjNDA2NTM4MTdjZS8wLzMxMzAzMzJlMzIzNjJlMzEzOTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzNjMyMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcavjANBgkqhkiG
9w0BAQsFAAOCAQEAD1o0NCMJHKRZpuXbsr/II+K9DAy49po5+8LNM2cvpaFA1E/7
kfXkYWwUIWHDkDgPL0Nmvn1a3edRw9sx7CWTnBrUh5RceK9UQ2LThIoa6ANb+tc0
qHv8ovi6EzDRPKHtdAcGNzP0noJH1Fy9ahvXXrazIkJx0RdaOcO1pBUlfWMlBnDd
KtJ9gVKPf4zpLz1qEd5BUYexnKzaQfVrui8vF8FTEILGHKAbLI+C5qHvFi1XRMCl
WQjmDWSLEIh+3Z7jP6pWxUCLua/oAV2j7jyydgNGUyJ5rgURZvGOBvOrNjeq/wvd
51/cIlxRgUDNWAyl8Tabpr4jCy4dzg4Tr/xbJw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:54:50 2026 by rpki-client