Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32342d3234203d3e20313331373831.roa
File:                     3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (raw, json)
Hash identifier:          0nfe7ULTCbnllmGpbf8D6GJGB5XbaGw6kKl4Vys0voA=
Subject key identifier:   24:76:20:C0:F2:FE:7F:05:E7:E0:96:95:47:3E:07:83:87:10:4F:DF
Certificate issuer:       /CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A
Certificate serial:       623568F7B47A592E743C21CBFF2F9FBEF852C006
Authority key identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32342d3234203d3e20313331373831.roa
Signing time:             Sun 03 May 2026 02:40:45 +0000
ROA not before:           Sun 03 May 2026 02:35:45 +0000
ROA not after:            Sun 02 May 2027 02:40:45 +0000
asID:                     131781
IP address blocks:        103.17.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl
                          rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:35:68:f7:b4:7a:59:2e:74:3c:21:cb:ff:2f:9f:be:f8:52:c0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A
        Validity
            Not Before: May  3 02:35:45 2026 GMT
            Not After : May  2 02:40:45 2027 GMT
        Subject: CN=247620C0F2FE7F05E7E09695473E078387104FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:6f:2e:52:95:cc:95:a9:1f:4f:66:a0:c2:
                    9e:1e:0b:37:38:b9:f0:17:9e:43:58:eb:97:72:ad:
                    05:06:b6:8c:e3:f1:0a:86:01:46:a9:c6:1a:76:d6:
                    fc:67:01:c1:ca:52:71:72:ca:c9:56:0b:b5:4d:89:
                    e3:97:98:99:06:38:7b:68:73:9f:ee:6b:23:7f:68:
                    76:dd:71:0f:4d:dc:e3:04:6d:42:2d:0f:ce:aa:ed:
                    5a:55:b3:53:12:9d:1d:b0:7f:d1:5b:bc:0f:eb:88:
                    5c:54:1d:04:9a:86:21:70:e6:c8:6b:e0:05:ec:49:
                    62:87:3b:0a:c5:f3:bd:00:e9:37:c7:b6:a4:bb:09:
                    95:e5:4f:19:53:9b:1e:fd:61:40:20:bd:00:24:03:
                    88:7c:2a:19:ed:e9:28:f3:7a:52:05:b2:61:ac:92:
                    21:05:b9:bf:eb:ad:a7:a2:23:5a:49:dd:b6:00:05:
                    35:74:eb:4f:e5:fc:e0:49:ed:68:db:8e:a4:e9:c7:
                    7d:23:99:38:26:35:83:aa:35:f0:e2:f0:65:a7:03:
                    95:55:26:aa:b9:97:1b:ec:ae:ac:32:64:23:ca:90:
                    b8:9e:17:13:05:79:57:04:4b:73:40:8c:7b:f2:c1:
                    2b:c4:86:db:c2:78:a6:c5:da:f5:6b:c8:47:ae:11:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:20:C0:F2:FE:7F:05:E7:E0:96:95:47:3E:07:83:87:10:4F:DF
            X509v3 Authority Key Identifier:
                keyid:5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32342d3234203d3e20313331373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:5a:0f:f4:0c:59:d8:2a:6b:57:52:ae:c8:df:fc:e6:da:
         d6:92:02:56:b8:f0:72:bb:aa:7f:5c:00:33:14:db:24:ce:39:
         66:b7:00:ce:54:35:a8:73:bc:35:1a:50:08:0f:1f:e4:2a:0c:
         fc:b5:3e:a2:79:0e:44:bc:4b:9c:59:1f:81:58:c5:e9:33:fc:
         2d:25:2a:36:43:7c:68:af:f1:3b:53:59:08:84:18:65:e8:9c:
         56:db:1b:8c:b7:a7:df:47:6a:ca:49:79:6c:a0:b0:62:9e:bc:
         3c:6b:6b:d7:f5:60:cb:c0:36:d1:17:b3:fc:40:0c:a0:d2:88:
         bc:85:47:e0:e9:ce:48:2c:76:10:5f:d5:fb:5e:50:5e:58:19:
         da:b1:0d:6c:17:08:11:2c:8c:94:ab:b7:bd:6f:dd:13:16:22:
         bb:a4:3a:3b:16:72:32:d7:72:46:53:b4:ab:76:38:73:ce:cd:
         62:ba:85:e0:78:35:43:e0:b8:85:42:b6:c5:b2:6a:1e:14:e5:
         5e:35:c1:22:2d:16:72:9c:ef:1f:7b:09:93:b9:d4:b0:13:93:
         e3:c2:bb:ba:31:39:b1:f6:a2:e4:5e:55:6d:7d:79:86:c4:1f:
         1c:9b:e9:b4:64:9a:d5:1a:05:2b:82:62:f2:69:95:a9:e8:de:
         a3:74:aa:1a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYjVo97R6WS50PCHL/y+fvvhSwAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJBQjhC
Q0Q5REE2QTAeFw0yNjA1MDMwMjM1NDVaFw0yNzA1MDIwMjQwNDVaMDMxMTAvBgNV
BAMTKDI0NzYyMEMwRjJGRTdGMDVFN0UwOTY5NTQ3M0UwNzgzODcxMDRGREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HW8uUpXMlakfT2agwp4eCzc4
ufAXnkNY65dyrQUGtozj8QqGAUapxhp21vxnAcHKUnFyyslWC7VNieOXmJkGOHto
c5/uayN/aHbdcQ9N3OMEbUItD86q7VpVs1MSnR2wf9FbvA/riFxUHQSahiFw5shr
4AXsSWKHOwrF870A6TfHtqS7CZXlTxlTmx79YUAgvQAkA4h8Khnt6SjzelIFsmGs
kiEFub/rraeiI1pJ3bYABTV060/l/OBJ7WjbjqTpx30jmTgmNYOqNfDi8GWnA5VV
Jqq5lxvsrqwyZCPKkLieFxMFeVcES3NAjHvywSvEhtvCeKbF2vVryEeuEZepAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJHYgwPL+fwXn4JaVRz4Hg4cQT98wHwYDVR0j
BBgwFoAUW+TCnuo92TuhwnHcuoi6uLzZ2mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmEwNzE1MTQtZTRkZS00YWNlLWEwZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVF
QTNERDkzQkExQzI3MURDQkE4OEJBQjhCQ0Q5REE2QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QkU0QzI5RUVBM0REOTNCQTFDMjcxRENCQTg4QkFCOEJDRDlE
QTZBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZhMDcxNTE0LWU0ZGUtNGFjZS1h
MGRmLWY3YzRhYjgwNzRhNS8wLzMxMzAzMzJlMzEzNzJlMzczNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcRTDANBgkqhkiG
9w0BAQsFAAOCAQEALgFaD/QMWdgqa1dSrsjf/Oba1pICVrjwcruqf1wAMxTbJM45
ZrcAzlQ1qHO8NRpQCA8f5CoM/LU+onkORLxLnFkfgVjF6TP8LSUqNkN8aK/xO1NZ
CIQYZeicVtsbjLen30dqykl5bKCwYp68PGtr1/Vgy8A20Rez/EAMoNKIvIVH4OnO
SCx2EF/V+15QXlgZ2rENbBcIESyMlKu3vW/dExYiu6Q6OxZyMtdyRlO0q3Y4c87N
YrqF4Hg1Q+C4hUK2xbJqHhTlXjXBIi0WcpzvH3sJk7nUsBOT48K7ujE5sfai5F5V
bX15hsQfHJvptGSa1RoFK4Ji8mmVqejeo3SqGg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:25:46 2026 by rpki-client