Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa
File:                     3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (raw, json)
Hash identifier:          LvmXxn8tofzUOQD7Y8MBoEUbiMdg2W3vi+Y9WTB64Ck=
Subject key identifier:   46:0A:20:B2:C6:D8:08:7E:B1:BF:FE:C1:38:F3:A0:E9:86:86:2E:9E
Certificate issuer:       /CN=EC464ACDD6858B613E13B13344BB988E92418A08
Certificate serial:       748E80B98B446635D23DEED12DD2C45A871828B3
Authority key identifier: EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa
Signing time:             Sun 03 May 2026 02:40:23 +0000
ROA not before:           Sun 03 May 2026 02:35:23 +0000
ROA not after:            Sun 02 May 2027 02:40:23 +0000
asID:                     134655
IP address blocks:        103.209.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl
                          rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8e:80:b9:8b:44:66:35:d2:3d:ee:d1:2d:d2:c4:5a:87:18:28:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC464ACDD6858B613E13B13344BB988E92418A08
        Validity
            Not Before: May  3 02:35:23 2026 GMT
            Not After : May  2 02:40:23 2027 GMT
        Subject: CN=460A20B2C6D8087EB1BFFEC138F3A0E986862E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:fc:5b:99:93:36:3f:5e:b2:c5:08:49:92:
                    a3:ad:15:37:e7:76:66:a0:da:5e:37:4d:e5:b7:a8:
                    7e:f0:39:d7:fc:3a:25:a6:c1:40:84:35:33:3c:ec:
                    9e:70:11:84:cf:48:90:b6:cd:39:bb:d9:54:b8:1c:
                    5b:77:c2:1c:e2:71:d9:50:d5:c6:ec:57:db:69:84:
                    f6:0e:69:50:67:fd:44:3b:8e:78:5c:25:68:66:38:
                    0a:e8:1f:1c:a8:3f:fb:fa:49:98:1b:68:fc:90:d6:
                    d8:89:c6:4b:37:d1:65:d7:0d:4c:ee:4e:c7:39:73:
                    f5:4e:fa:f3:0f:be:00:a8:c8:1c:fe:69:a6:ef:9e:
                    2d:71:0f:66:b9:c5:e9:0e:b4:e4:66:22:15:88:14:
                    ff:f1:05:4a:36:d7:ac:b5:8c:a2:4e:0a:e9:2c:fd:
                    e3:9d:73:38:5c:54:ca:73:9f:93:60:a6:10:4f:e6:
                    a8:4b:ab:06:68:55:a2:43:98:ad:4c:31:e7:1d:3e:
                    be:58:0e:5c:4b:8b:5f:12:fc:24:cd:cc:87:0a:f7:
                    56:7a:10:ed:cd:5d:87:2d:02:2e:41:87:a0:55:08:
                    aa:b2:47:34:8c:7a:f3:5e:4d:9c:a3:1c:00:4f:ba:
                    f8:18:d0:24:35:d3:8e:75:9d:b3:29:63:ad:fd:7a:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0A:20:B2:C6:D8:08:7E:B1:BF:FE:C1:38:F3:A0:E9:86:86:2E:9E
            X509v3 Authority Key Identifier:
                keyid:EC:46:4A:CD:D6:85:8B:61:3E:13:B1:33:44:BB:98:8E:92:41:8A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/EC464ACDD6858B613E13B13344BB988E92418A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC464ACDD6858B613E13B13344BB988E92418A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:fe:66:88:75:e0:70:c5:80:c6:0b:30:53:ad:96:d9:fe:e5:
         50:8e:30:57:a2:7a:2f:16:f4:73:1e:30:88:c9:1c:2c:ea:5c:
         ff:86:dc:70:2b:7c:b9:48:0a:08:6b:9d:1d:39:52:b5:c9:24:
         04:a4:6b:7d:6b:e2:24:2b:8e:fd:3f:21:58:5c:69:fb:f2:e2:
         2f:fa:ac:1f:2d:1d:cd:49:9d:c8:8f:a8:6d:39:72:35:64:2d:
         9f:08:ba:d6:c2:02:62:9d:07:48:01:a0:96:0e:af:de:7a:c6:
         35:82:6d:de:0c:57:ad:55:4f:28:a8:2e:30:7d:c0:1c:31:6b:
         ed:54:51:17:66:fb:7d:8f:52:0c:a5:90:c7:d2:2c:97:e9:b4:
         ce:dd:9f:e7:4a:ee:f3:84:08:e9:a0:6e:d4:e0:9e:b4:aa:53:
         99:d6:3c:4f:e4:30:bd:f5:00:5b:64:56:52:3d:cb:fd:34:16:
         7c:01:10:9c:3b:8d:a9:d1:27:6a:d9:55:5c:3b:e3:20:75:ed:
         82:74:54:93:ff:ec:60:e9:03:62:df:74:12:24:65:3f:5e:b2:
         f1:8f:c4:eb:65:00:67:15:0e:65:ce:52:b5:1c:f9:c9:e4:9f:
         d7:f9:f1:47:95:76:d4:c9:fe:bc:3f:60:63:fe:ed:73:d3:49:
         5d:88:a9:c1
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdI6AuYtEZjXSPe7RLdLEWocYKLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM0NjRBQ0RENjg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5
MjQxOEEwODAeFw0yNjA1MDMwMjM1MjNaFw0yNzA1MDIwMjQwMjNaMDMxMTAvBgNV
BAMTKDQ2MEEyMEIyQzZEODA4N0VCMUJGRkVDMTM4RjNBMEU5ODY4NjJFOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYavxbmZM2P16yxQhJkqOtFTfn
dmag2l43TeW3qH7wOdf8OiWmwUCENTM87J5wEYTPSJC2zTm72VS4HFt3whzicdlQ
1cbsV9tphPYOaVBn/UQ7jnhcJWhmOAroHxyoP/v6SZgbaPyQ1tiJxks30WXXDUzu
Tsc5c/VO+vMPvgCoyBz+aabvni1xD2a5xekOtORmIhWIFP/xBUo216y1jKJOCuks
/eOdczhcVMpzn5NgphBP5qhLqwZoVaJDmK1MMecdPr5YDlxLi18S/CTNzIcK91Z6
EO3NXYctAi5Bh6BVCKqyRzSMevNeTZyjHABPuvgY0CQ10451nbMpY639eu21AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURgogssbYCH6xv/7BOPOg6YaGLp4wHwYDVR0j
BBgwFoAU7EZKzdaFi2E+E7EzRLuYjpJBiggwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjkzOWRiZjEtMzA3NS00NTE5LWJhOTAtY2VlOGQzOTc5ZmNkLzAvRUM0NjRBQ0RE
Njg1OEI2MTNFMTNCMTMzNDRCQjk4OEU5MjQxOEEwOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQzQ2NEFDREQ2ODU4QjYxM0UxM0IxMzM0NEJCOTg4RTkyNDE4
QTA4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYxLTMwNzUtNDUxOS1i
YTkwLWNlZThkMzk3OWZjZC8wLzMxMzAzMzJlMzIzMDM5MmUzMTM4MzQyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzQzNjM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn0bgwDQYJ
KoZIhvcNAQELBQADggEBAIb+Zoh14HDFgMYLMFOtltn+5VCOMFeiei8W9HMeMIjJ
HCzqXP+G3HArfLlICghrnR05UrXJJASka31r4iQrjv0/IVhcafvy4i/6rB8tHc1J
nciPqG05cjVkLZ8IutbCAmKdB0gBoJYOr956xjWCbd4MV61VTyioLjB9wBwxa+1U
URdm+32PUgylkMfSLJfptM7dn+dK7vOECOmgbtTgnrSqU5nWPE/kML31AFtkVlI9
y/00FnwBEJw7janRJ2rZVVw74yB17YJ0VJP/7GDpA2LfdBIkZT9esvGPxOtlAGcV
DmXOUrUc+cnkn9f58UeVdtTJ/rw/YGP+7XPTSV2IqcE=
-----END CERTIFICATE-----
Generated at Wed May 13 05:36:03 2026 by rpki-client