Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32342d3234203d3e203538343832.roa
File:                     3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (raw, json)
Hash identifier:          FeOCNATRe1P03rtWdLCfDMUmsd9Gj/jfRgjyvKKk3Rw=
Subject key identifier:   78:15:B0:21:AF:70:9E:2A:B4:AB:17:1B:EB:B9:E2:3A:4A:EA:B9:91
Certificate issuer:       /CN=797581F67816C4132050EC6348DBB15EBC5C0189
Certificate serial:       0F3BB4BBC5DA8B9EF34D213B1978C7AC9804B9A6
Authority key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32342d3234203d3e203538343832.roa
Signing time:             Sun 03 May 2026 02:40:41 +0000
ROA not before:           Sun 03 May 2026 02:35:41 +0000
ROA not after:            Sun 02 May 2027 02:40:41 +0000
asID:                     58482
IP address blocks:        103.28.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
                          rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3b:b4:bb:c5:da:8b:9e:f3:4d:21:3b:19:78:c7:ac:98:04:b9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797581F67816C4132050EC6348DBB15EBC5C0189
        Validity
            Not Before: May  3 02:35:41 2026 GMT
            Not After : May  2 02:40:41 2027 GMT
        Subject: CN=7815B021AF709E2AB4AB171BEBB9E23A4AEAB991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:2f:30:61:b1:9e:fe:b8:c4:b3:0b:af:f0:
                    ea:e4:7c:b3:80:98:1f:f9:2a:06:a7:86:ce:ad:18:
                    f6:59:0f:5a:2e:f5:d2:a4:01:e5:08:d6:05:f8:31:
                    42:c1:f1:c9:f5:8c:80:0b:16:23:36:32:4a:13:ce:
                    cc:92:0d:25:8d:15:37:27:e1:bb:27:3b:57:56:e8:
                    87:e0:13:f1:5e:a5:be:f1:40:1c:47:c7:bc:0a:9c:
                    36:0b:c4:d0:53:78:82:1b:a3:25:61:13:87:04:ba:
                    80:60:ce:cf:0e:60:d7:06:61:9d:30:58:2c:43:da:
                    11:79:d4:59:2f:19:d8:f6:bd:82:e4:ee:11:77:e3:
                    26:38:df:09:5a:03:c7:ac:b1:e8:ca:d5:ad:2a:18:
                    b2:e3:f5:55:aa:c1:df:2a:80:3e:a6:66:f8:93:8a:
                    2d:69:a6:ee:32:7c:5a:5f:2a:7f:6e:2a:e0:68:b9:
                    2f:90:bf:a1:20:cf:7c:ab:3a:38:81:e4:1a:0e:79:
                    8a:c8:67:b4:e4:d2:f5:8e:c3:0c:e4:df:80:a4:70:
                    c9:27:fd:af:57:61:0c:f7:c2:a5:64:39:7d:be:34:
                    aa:d5:69:66:ae:25:3e:83:5f:f0:c1:3b:08:ad:4b:
                    e1:80:e9:45:1c:d2:2d:fa:a5:ba:bf:a0:ed:7c:8e:
                    10:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:15:B0:21:AF:70:9E:2A:B4:AB:17:1B:EB:B9:E2:3A:4A:EA:B9:91
            X509v3 Authority Key Identifier:
                keyid:79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32342d3234203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a6:ba:65:f7:b2:f2:b4:ee:80:4d:29:21:49:22:3f:93:9b:
         aa:a4:47:e0:48:db:63:25:17:d8:1e:33:74:a6:c3:2d:f0:d7:
         ad:7e:36:13:8b:04:0f:3a:5e:46:b2:31:74:e4:db:55:79:8b:
         a9:4e:37:4a:3e:0a:79:67:29:9e:62:30:d9:30:5d:c2:6c:2b:
         9e:e2:82:41:09:31:44:25:d8:65:b1:4f:46:c0:db:12:b2:1f:
         21:76:26:c1:38:03:c8:cb:09:8d:d3:97:2c:3d:01:2c:d2:fd:
         32:b7:49:21:67:fd:22:5d:29:21:df:0c:fb:54:a8:d3:d7:d3:
         fa:ed:be:fe:43:ca:53:09:a8:af:fa:96:69:eb:8f:bc:2c:32:
         1b:6c:c4:9f:10:71:11:15:16:8c:f4:b0:87:ca:23:1b:1a:72:
         af:d8:18:7c:8c:be:54:28:24:41:16:27:57:40:12:52:5d:2d:
         65:33:5c:88:a2:d9:9a:8d:c5:c5:d8:e5:0d:20:f4:ed:42:2a:
         9f:18:39:1f:c4:c0:10:8d:98:2e:69:f1:ca:ab:7e:f8:4b:b2:
         99:d0:9a:c4:8d:4b:b5:f3:45:e5:43:69:27:64:23:2b:9b:93:
         33:09:d8:9a:eb:71:66:cd:53:4f:f8:ce:de:b7:a4:2c:e1:ec:
         ad:eb:14:ab
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDzu0u8Xai57zTSE7GXjHrJgEuaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk3NTgxRjY3ODE2QzQxMzIwNTBFQzYzNDhEQkIxNUVC
QzVDMDE4OTAeFw0yNjA1MDMwMjM1NDFaFw0yNzA1MDIwMjQwNDFaMDMxMTAvBgNV
BAMTKDc4MTVCMDIxQUY3MDlFMkFCNEFCMTcxQkVCQjlFMjNBNEFFQUI5OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTli8wYbGe/rjEswuv8OrkfLOA
mB/5Kganhs6tGPZZD1ou9dKkAeUI1gX4MULB8cn1jIALFiM2MkoTzsySDSWNFTcn
4bsnO1dW6IfgE/Fepb7xQBxHx7wKnDYLxNBTeIIboyVhE4cEuoBgzs8OYNcGYZ0w
WCxD2hF51FkvGdj2vYLk7hF34yY43wlaA8essejK1a0qGLLj9VWqwd8qgD6mZviT
ii1ppu4yfFpfKn9uKuBouS+Qv6Egz3yrOjiB5BoOeYrIZ7Tk0vWOwwzk34CkcMkn
/a9XYQz3wqVkOX2+NKrVaWauJT6DX/DBOwitS+GA6UUc0i36pbq/oO18jhAXAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUeBWwIa9wniq0qxcb67niOkrquZEwHwYDVR0j
BBgwFoAUeXWB9ngWxBMgUOxjSNuxXrxcAYkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjllMmYzYmQtZDRlYy00MmNiLWFhY2YtYWRjMjgyNWMxODRiLzAvNzk3NTgxRjY3
ODE2QzQxMzIwNTBFQzYzNDhEQkIxNUVCQzVDMDE4OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83OTc1ODFGNjc4MTZDNDEzMjA1MEVDNjM0OERCQjE1RUJDNUMw
MTg5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5ZTJmM2JkLWQ0ZWMtNDJjYi1h
YWNmLWFkYzI4MjVjMTg0Yi8wLzMxMzAzMzJlMzIzODJlMzIzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcc4DANBgkqhkiG
9w0BAQsFAAOCAQEAFqa6Zfey8rTugE0pIUkiP5ObqqRH4EjbYyUX2B4zdKbDLfDX
rX42E4sEDzpeRrIxdOTbVXmLqU43Sj4KeWcpnmIw2TBdwmwrnuKCQQkxRCXYZbFP
RsDbErIfIXYmwTgDyMsJjdOXLD0BLNL9MrdJIWf9Il0pId8M+1So09fT+u2+/kPK
Uwmor/qWaeuPvCwyG2zEnxBxERUWjPSwh8ojGxpyr9gYfIy+VCgkQRYnV0ASUl0t
ZTNciKLZmo3FxdjlDSD07UIqnxg5H8TAEI2YLmnxyqt++EuymdCaxI1LtfNF5UNp
J2QjK5uTMwnYmutxZs1TT/jO3rekLOHsresUqw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:44 2026 by rpki-client