Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa
File:                     3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (raw, json)
Hash identifier:          b/v/p4XXRhwRyIRQmWyoUAD/7oSBMCFky65Xuz73r7o=
Subject key identifier:   05:A1:C0:34:8D:F5:25:19:26:B6:BC:61:CB:5B:62:AE:03:AB:C5:66
Certificate issuer:       /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC
Certificate serial:       1C9E7A5616AE2DE4DC7EB098EDAE6B9B93CD1EA2
Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa
Signing time:             Sun 03 May 2026 02:40:13 +0000
ROA not before:           Sun 03 May 2026 02:35:13 +0000
ROA not after:            Sun 02 May 2027 02:40:13 +0000
asID:                     142370
IP address blocks:        103.169.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl
                          rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9e:7a:56:16:ae:2d:e4:dc:7e:b0:98:ed:ae:6b:9b:93:cd:1e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC
        Validity
            Not Before: May  3 02:35:13 2026 GMT
            Not After : May  2 02:40:13 2027 GMT
        Subject: CN=05A1C0348DF5251926B6BC61CB5B62AE03ABC566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:8f:13:16:89:2b:30:a9:b5:5c:c1:23:f4:
                    94:e6:09:de:b6:1a:65:72:b2:fe:99:9f:9b:52:0a:
                    69:f5:b7:e3:42:89:12:c1:3d:3f:77:04:43:ce:86:
                    e2:a9:00:71:c9:5d:a1:5c:8c:f5:18:76:93:2c:a3:
                    85:19:2c:a4:1d:eb:e1:2f:28:50:db:68:83:82:18:
                    db:af:50:af:9c:86:ff:08:45:31:c2:30:78:e1:68:
                    72:00:48:32:31:33:84:7d:8a:b7:2a:57:ff:5b:8c:
                    db:5f:7a:20:5b:34:4e:bf:a2:fd:83:8b:74:15:ec:
                    01:85:e5:cf:8c:8c:6b:f2:06:06:55:f5:8b:9a:f7:
                    5f:50:cb:b1:24:b6:14:26:e3:e8:18:d3:28:67:9b:
                    a2:b9:62:46:8e:cb:41:06:5b:29:88:ef:0c:52:b9:
                    c8:51:c9:55:92:33:68:52:33:04:b4:4f:d3:f0:2a:
                    5d:3d:4d:df:69:b3:13:79:f7:20:d5:4d:8d:3f:c9:
                    a4:51:45:5c:5d:9d:79:17:44:e9:d4:03:b0:eb:de:
                    2d:6d:aa:4f:6b:e7:df:0a:ed:e3:65:81:6e:50:cf:
                    0d:47:a7:13:ba:ca:e4:6b:11:4a:3f:62:68:04:f4:
                    fd:bc:7a:fa:cb:ca:15:e8:4b:f6:b4:4b:00:a0:65:
                    53:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A1:C0:34:8D:F5:25:19:26:B6:BC:61:CB:5B:62:AE:03:AB:C5:66
            X509v3 Authority Key Identifier:
                keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:1f:ed:31:93:f2:3f:8e:49:08:d2:98:38:2c:cd:22:59:a3:
         ba:5d:13:41:6c:2b:52:ed:95:3b:c2:bf:ef:b6:ec:4e:9d:ef:
         1e:fc:e2:6e:41:3e:a8:c5:cd:75:2e:4b:85:42:19:5c:64:fd:
         e2:02:c1:81:aa:18:d4:d6:45:92:dc:bc:08:20:80:e1:83:42:
         83:f3:4c:c2:c5:bc:31:ff:28:7d:1c:a6:3b:6e:d3:12:b6:5b:
         bf:52:d3:71:3d:c2:9e:f4:a9:ba:9d:9f:53:d5:db:52:2e:db:
         f1:30:eb:8c:13:6c:68:02:92:ea:11:03:71:f9:1c:d9:ce:98:
         bb:5f:ab:0f:e3:86:5a:65:83:7f:94:d1:19:ab:fd:c8:fb:bf:
         dc:f3:f3:9e:38:a5:e0:5e:58:0f:ef:30:63:52:58:7c:87:2a:
         01:de:07:4b:46:4a:f9:46:41:f2:d0:86:f8:73:81:65:1b:6f:
         60:36:e5:32:f7:e7:ee:f9:ea:85:9f:9f:63:dd:1c:2b:e0:f9:
         b2:46:2d:6a:1a:fe:a7:a8:77:e5:c8:f7:fa:e6:01:62:34:d2:
         f3:2e:4e:3a:25:52:7f:db:c5:02:f8:5f:cc:5b:0d:c2:74:a8:
         30:0c:d2:b7:d1:5b:05:a8:21:54:5b:7e:c8:b2:c8:ea:19:57:
         74:39:73:c6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUHJ56VhauLeTcfrCY7a5rm5PNHqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIx
RDk4MkZEQzAeFw0yNjA1MDMwMjM1MTNaFw0yNzA1MDIwMjQwMTNaMDMxMTAvBgNV
BAMTKDA1QTFDMDM0OERGNTI1MTkyNkI2QkM2MUNCNUI2MkFFMDNBQkM1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9o8TFokrMKm1XMEj9JTmCd62
GmVysv6Zn5tSCmn1t+NCiRLBPT93BEPOhuKpAHHJXaFcjPUYdpMso4UZLKQd6+Ev
KFDbaIOCGNuvUK+chv8IRTHCMHjhaHIASDIxM4R9ircqV/9bjNtfeiBbNE6/ov2D
i3QV7AGF5c+MjGvyBgZV9Yua919Qy7EkthQm4+gY0yhnm6K5YkaOy0EGWymI7wxS
uchRyVWSM2hSMwS0T9PwKl09Td9psxN59yDVTY0/yaRRRVxdnXkXROnUA7Dr3i1t
qk9r598K7eNlgW5Qzw1HpxO6yuRrEUo/YmgE9P28evrLyhXoS/a0SwCgZVOnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBaHANI31JRkmtrxhy1tirgOrxWYwHwYDVR0j
BBgwFoAUH81vYIBopWsrpcrVWJUS0h2YL9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Njc1MmIzYzItM2YzMC00MDQwLThiMDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4
MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIxRDk4MkZEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRkNENkY2MDgwNjhBNTZCMkJBNUNBRDU1ODk1MTJEMjFEOTgy
RkRDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY3NTJiM2MyLTNmMzAtNDA0MC04
YjA1LTgzODIxNzc3MDQ4Zi8wLzMxMzAzMzJlMzEzNjM5MmUzMjM1MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqf4wDQYJ
KoZIhvcNAQELBQADggEBAMof7TGT8j+OSQjSmDgszSJZo7pdE0FsK1LtlTvCv++2
7E6d7x784m5BPqjFzXUuS4VCGVxk/eICwYGqGNTWRZLcvAgggOGDQoPzTMLFvDH/
KH0cpjtu0xK2W79S03E9wp70qbqdn1PV21Iu2/Ew64wTbGgCkuoRA3H5HNnOmLtf
qw/jhlplg3+U0Rmr/cj7v9zz8544peBeWA/vMGNSWHyHKgHeB0tGSvlGQfLQhvhz
gWUbb2A25TL35+756oWfn2PdHCvg+bJGLWoa/qeod+XI9/rmAWI00vMuTjolUn/b
xQL4X8xbDcJ0qDAM0rfRWwWoIVRbfsiyyOoZV3Q5c8Y=
-----END CERTIFICATE-----
Generated at Wed May 13 14:53:05 2026 by rpki-client