Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa
File:                     3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          DI7hDV1OTLP39XVo+YW9KKO4/kMRYV/SO7cO9DgG86Q=
Subject key identifier:   85:45:AE:C3:8A:79:43:12:FC:11:30:E8:8B:B4:9F:74:D7:12:E2:AC
Certificate issuer:       /CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
Certificate serial:       2A9E0A6A495365580FBBD261B412D1BDA95C9D47
Authority key identifier: 92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa
Signing time:             Sun 03 May 2026 02:42:12 +0000
ROA not before:           Sun 03 May 2026 02:37:12 +0000
ROA not after:            Sun 02 May 2027 02:42:12 +0000
asID:                     58816
IP address blocks:        103.248.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9e:0a:6a:49:53:65:58:0f:bb:d2:61:b4:12:d1:bd:a9:5c:9d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
        Validity
            Not Before: May  3 02:37:12 2026 GMT
            Not After : May  2 02:42:12 2027 GMT
        Subject: CN=8545AEC38A794312FC1130E88BB49F74D712E2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:45:95:34:bf:54:cf:37:f3:9c:e0:8a:47:
                    eb:38:55:2a:2c:67:65:9a:66:d2:56:c5:16:4c:0a:
                    79:52:c3:9b:a1:39:49:b5:af:e6:3f:d8:da:97:18:
                    fe:19:f6:2e:c6:f7:f4:56:5c:d8:7d:1c:6f:2a:63:
                    62:da:0b:23:79:e0:ee:6f:8e:5a:a0:a5:a7:8c:24:
                    be:7e:d5:35:d1:de:48:53:cd:fd:3c:ca:d8:9e:ae:
                    77:7a:70:8d:eb:96:32:1b:4a:97:6c:39:e1:fc:2f:
                    8c:19:b7:1e:d9:bc:64:f2:b3:2b:18:c1:aa:a6:74:
                    0a:e6:fb:b1:5e:60:d5:59:31:fb:a3:77:94:dc:1b:
                    8f:21:e5:4f:54:c2:20:fa:e3:7e:f1:7d:a0:05:6b:
                    48:b0:68:c3:49:20:81:01:bf:50:08:e0:6a:a4:8e:
                    a8:36:24:77:49:51:a8:aa:1a:47:7b:6f:6f:6d:73:
                    dd:b1:7c:fc:87:91:3a:73:3d:b2:8a:ac:d5:56:48:
                    5f:9e:ac:7f:09:e4:39:19:f5:55:f9:5c:ea:71:fd:
                    81:d8:d0:1a:8c:68:c4:71:77:de:7e:83:2c:5c:b7:
                    87:d7:d0:fa:92:74:27:1a:af:15:13:b6:4d:c4:d8:
                    55:4a:ad:3e:cf:05:4c:a1:05:12:87:11:ee:cc:cb:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:45:AE:C3:8A:79:43:12:FC:11:30:E8:8B:B4:9F:74:D7:12:E2:AC
            X509v3 Authority Key Identifier:
                keyid:92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:46:bf:25:25:03:60:88:c9:80:22:72:f3:4f:ce:47:da:3f:
         02:fc:3f:4a:71:9a:fe:a5:eb:96:7d:c3:bb:34:22:ef:fa:5b:
         42:ac:b7:45:b3:dc:13:17:45:57:53:59:a8:9d:51:87:55:b3:
         bb:81:07:2d:1d:f9:a8:6c:ef:5c:87:a6:9a:b9:70:53:fd:dc:
         10:44:fd:2b:b4:ff:a2:51:cb:6c:fe:9f:8b:92:ae:b6:7c:44:
         e4:ed:f4:38:df:99:e8:a9:e2:13:c6:71:ec:f7:31:02:4a:c1:
         94:c1:8a:fc:15:23:69:2b:be:39:ab:3f:1f:34:9d:34:d3:35:
         61:28:aa:f1:61:70:42:0a:95:7a:f7:ae:d3:65:25:62:6b:a7:
         54:82:80:22:57:17:9c:f7:02:00:df:91:10:eb:a0:c0:c3:05:
         8a:75:ef:ea:53:5e:7a:fe:4d:79:7c:ff:5f:96:c2:7a:c5:33:
         9b:a9:ea:b8:e6:68:30:60:83:75:a3:bf:08:d9:4e:74:23:fa:
         b4:75:ac:5f:c3:fb:1e:73:01:d1:40:0e:17:cc:e5:0d:2b:0d:
         8f:7c:97:ad:74:ef:3e:95:d1:54:ac:8c:ef:d0:f4:d4:75:e6:
         f7:82:3b:bf:86:1b:ce:ae:0f:af:c1:f3:01:f4:ef:e1:17:28:
         6d:09:f3:51
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKp4KaklTZVgPu9JhtBLRvalcnUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJEOTFDNzhDRUQzMjBCOTBCRjY1NjJEMUI1NTZBRTky
MThGNzRBMTAeFw0yNjA1MDMwMjM3MTJaFw0yNzA1MDIwMjQyMTJaMDMxMTAvBgNV
BAMTKDg1NDVBRUMzOEE3OTQzMTJGQzExMzBFODhCQjQ5Rjc0RDcxMkUyQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0kWVNL9UzzfznOCKR+s4VSos
Z2WaZtJWxRZMCnlSw5uhOUm1r+Y/2NqXGP4Z9i7G9/RWXNh9HG8qY2LaCyN54O5v
jlqgpaeMJL5+1TXR3khTzf08ytiernd6cI3rljIbSpdsOeH8L4wZtx7ZvGTysysY
waqmdArm+7FeYNVZMfujd5TcG48h5U9UwiD6437xfaAFa0iwaMNJIIEBv1AI4Gqk
jqg2JHdJUaiqGkd7b29tc92xfPyHkTpzPbKKrNVWSF+erH8J5DkZ9VX5XOpx/YHY
0BqMaMRxd95+gyxct4fX0PqSdCcarxUTtk3E2FVKrT7PBUyhBRKHEe7My7fVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUhUWuw4p5QxL8ETDoi7SfdNcS4qwwHwYDVR0j
BBgwFoAUktkceM7TILkL9lYtG1Vq6SGPdKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmZjM2NiYzQtODg4My00MTFjLTg3NmUtZTllMjNhOGQ4YWQ5LzAvOTJEOTFDNzhD
RUQzMjBCOTBCRjY1NjJEMUI1NTZBRTkyMThGNzRBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkQ5MUM3OENFRDMyMEI5MEJGNjU2MkQxQjU1NkFFOTIxOEY3
NEExLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04
NzZlLWU5ZTIzYThkOGFkOS8wLzMxMzAzMzJlMzIzNDM4MmUzNTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf4OzANBgkqhkiG
9w0BAQsFAAOCAQEAAUa/JSUDYIjJgCJy80/OR9o/Avw/SnGa/qXrln3DuzQi7/pb
Qqy3RbPcExdFV1NZqJ1Rh1Wzu4EHLR35qGzvXIemmrlwU/3cEET9K7T/olHLbP6f
i5KutnxE5O30ON+Z6KniE8Zx7PcxAkrBlMGK/BUjaSu+Oas/HzSdNNM1YSiq8WFw
QgqVeveu02UlYmunVIKAIlcXnPcCAN+REOugwMMFinXv6lNeev5NeXz/X5bCesUz
m6nquOZoMGCDdaO/CNlOdCP6tHWsX8P7HnMB0UAOF8zlDSsNj3yXrXTvPpXRVKyM
79D01HXm94I7v4Ybzq4Pr8HzAfTv4RcobQnzUQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:35:51 2026 by rpki-client