Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa
File:                     3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (raw, json)
Hash identifier:          s6eJpsd07fVOpv5bnSTsV6HF0hMDI9QhxKFQra/tpWI=
Subject key identifier:   0C:F9:E1:1E:DC:06:C1:B6:0B:3A:43:91:8C:3D:CD:44:0E:80:04:6B
Certificate issuer:       /CN=F690A110357924F87D7056A8B32736A17D483A45
Certificate serial:       36EA79A76025BDED370194A6C03BB601C9331047
Authority key identifier: F6:90:A1:10:35:79:24:F8:7D:70:56:A8:B3:27:36:A1:7D:48:3A:45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa
Signing time:             Sun 03 May 2026 02:43:56 +0000
ROA not before:           Sun 03 May 2026 02:38:56 +0000
ROA not after:            Sun 02 May 2027 02:43:56 +0000
asID:                     147163
IP address blocks:        103.177.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.crl
                          rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ea:79:a7:60:25:bd:ed:37:01:94:a6:c0:3b:b6:01:c9:33:10:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F690A110357924F87D7056A8B32736A17D483A45
        Validity
            Not Before: May  3 02:38:56 2026 GMT
            Not After : May  2 02:43:56 2027 GMT
        Subject: CN=0CF9E11EDC06C1B60B3A43918C3DCD440E80046B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:dd:82:c1:e9:81:a3:9f:2d:80:14:a4:68:
                    fa:c3:d5:29:42:1f:f8:e2:a8:94:46:61:e2:0c:e0:
                    db:95:ca:c0:5b:40:26:b9:0f:47:41:40:17:5d:a2:
                    80:1b:3e:e1:6e:2c:a0:3e:36:cc:d3:8f:4b:b7:d6:
                    78:28:48:36:14:0a:f4:a4:7e:82:cd:74:8a:3c:ea:
                    6b:eb:74:76:3e:5c:f3:22:e6:66:2a:a0:12:4f:6e:
                    7a:a6:f2:56:30:42:fd:e4:e3:eb:a0:51:2f:22:51:
                    2f:29:3f:bf:5d:35:33:f1:ae:dd:6c:b0:13:f7:06:
                    ec:d9:bf:e8:9b:e9:85:3d:71:eb:4b:67:e3:bc:e2:
                    0a:a6:b7:72:63:61:7d:35:80:13:91:cc:53:50:46:
                    ee:29:e4:ab:91:93:1f:25:79:6a:2b:5a:b3:f5:89:
                    20:6b:c0:97:4c:72:3b:b6:31:81:16:ad:30:cf:8f:
                    42:37:34:4e:45:34:cd:33:aa:e7:b3:4c:c8:e2:c3:
                    71:1d:36:20:1c:48:ac:47:6b:a5:fd:e1:eb:e2:3c:
                    06:b2:76:00:cd:d6:00:27:b5:25:23:bc:69:2e:58:
                    48:aa:ec:c4:42:24:67:73:d3:a4:d9:1a:ad:ab:2c:
                    00:c6:63:04:5c:18:08:9a:69:f1:b1:f1:b7:4d:fb:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:E1:1E:DC:06:C1:B6:0B:3A:43:91:8C:3D:CD:44:0E:80:04:6B
            X509v3 Authority Key Identifier:
                keyid:F6:90:A1:10:35:79:24:F8:7D:70:56:A8:B3:27:36:A1:7D:48:3A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:ef:15:c8:d1:c1:ef:53:62:b5:22:df:fe:38:a4:95:15:
         65:62:10:8d:90:a5:69:ec:62:89:d5:b3:4b:14:99:9e:70:ec:
         11:db:75:66:ab:84:46:dd:43:92:07:c9:f5:45:7f:33:68:d5:
         6b:6c:1a:e6:73:5a:71:44:42:c6:be:9f:22:02:86:a2:62:fa:
         cb:91:58:1a:02:f1:01:91:df:c6:18:f8:64:65:1c:e4:ce:50:
         71:ee:a8:11:54:8c:fc:9a:7e:14:97:90:0a:83:ad:43:d3:e0:
         73:45:0e:3b:9e:81:0d:48:16:9a:b3:93:26:06:e6:b6:d0:6a:
         c0:ff:f9:2b:be:bd:9e:5b:13:b4:76:06:b2:a7:5e:67:54:87:
         3a:d2:3f:d7:1d:33:2c:0e:85:e1:57:e9:88:95:9e:ab:e0:93:
         ef:7e:38:9d:85:99:ce:f2:72:73:ec:8c:61:e6:48:db:90:ae:
         31:30:22:ca:6e:7d:49:7e:0b:73:f0:eb:f8:3f:7d:20:de:d9:
         72:a3:af:72:e1:3e:46:92:de:58:ff:70:fc:6c:cf:eb:74:fc:
         a6:a9:00:df:4f:6e:af:aa:62:a1:53:60:1b:d9:2a:b7:9d:58:
         96:c9:b3:51:89:8b:a5:99:09:1d:c9:aa:2c:43:7e:5d:61:99:
         d9:73:ba:77
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNup5p2Alve03AZSmwDu2AckzEEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5MEExMTAzNTc5MjRGODdENzA1NkE4QjMyNzM2QTE3
RDQ4M0E0NTAeFw0yNjA1MDMwMjM4NTZaFw0yNzA1MDIwMjQzNTZaMDMxMTAvBgNV
BAMTKDBDRjlFMTFFREMwNkMxQjYwQjNBNDM5MThDM0RDRDQ0MEU4MDA0NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjl92CwemBo58tgBSkaPrD1SlC
H/jiqJRGYeIM4NuVysBbQCa5D0dBQBddooAbPuFuLKA+NszTj0u31ngoSDYUCvSk
foLNdIo86mvrdHY+XPMi5mYqoBJPbnqm8lYwQv3k4+ugUS8iUS8pP79dNTPxrt1s
sBP3BuzZv+ib6YU9cetLZ+O84gqmt3JjYX01gBORzFNQRu4p5KuRkx8leWorWrP1
iSBrwJdMcju2MYEWrTDPj0I3NE5FNM0zquezTMjiw3EdNiAcSKxHa6X94eviPAay
dgDN1gAntSUjvGkuWEiq7MRCJGdz06TZGq2rLADGYwRcGAiaafGx8bdN+6oVAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUDPnhHtwGwbYLOkORjD3NRA6ABGswHwYDVR0j
BBgwFoAU9pChEDV5JPh9cFaosyc2oX1IOkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzczZDJiNjAtMTJjOC00MTNlLWI5NDEtMzkzZTAwZmRkNjUzLzAvRjY5MEExMTAz
NTc5MjRGODdENzA1NkE4QjMyNzM2QTE3RDQ4M0E0NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNjkwQTExMDM1NzkyNEY4N0Q3MDU2QThCMzI3MzZBMTdENDgz
QTQ1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc3M2QyYjYwLTEyYzgtNDEzZS1i
OTQxLTM5M2UwMGZkZDY1My8wLzMxMzAzMzJlMzEzNzM3MmUzMjMxMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTM2MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsdcwDQYJ
KoZIhvcNAQELBQADggEBAJUt7xXI0cHvU2K1It/+OKSVFWViEI2QpWnsYonVs0sU
mZ5w7BHbdWarhEbdQ5IHyfVFfzNo1WtsGuZzWnFEQsa+nyIChqJi+suRWBoC8QGR
38YY+GRlHOTOUHHuqBFUjPyafhSXkAqDrUPT4HNFDjuegQ1IFpqzkyYG5rbQasD/
+Su+vZ5bE7R2BrKnXmdUhzrSP9cdMywOheFX6YiVnqvgk+9+OJ2Fmc7ycnPsjGHm
SNuQrjEwIspufUl+C3Pw6/g/fSDe2XKjr3LhPkaS3lj/cPxsz+t0/KapAN9Pbq+q
YqFTYBvZKredWJbJs1GJi6WZCR3JqixDfl1hmdlzunc=
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:49 2026 by rpki-client