Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/3130332e37382e3130342e302f32332d3234203d3e203634333134.roa
File:                     3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (raw, json)
Hash identifier:          NkdNebrDVkfVl0amhScWQLHtn/tGL3kLLLGLmXHeXKk=
Subject key identifier:   0E:61:00:FB:A1:B0:D0:C6:53:FE:9E:D6:BA:0C:C1:4F:25:C5:57:A4
Certificate issuer:       /CN=F1D5E6A4B072AACE672180804E096D6B00CB17E7
Certificate serial:       1CD89E0A3C0F4FAB90C524F9EF46E894EB21B47C
Authority key identifier: F1:D5:E6:A4:B0:72:AA:CE:67:21:80:80:4E:09:6D:6B:00:CB:17:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D5E6A4B072AACE672180804E096D6B00CB17E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/3130332e37382e3130342e302f32332d3234203d3e203634333134.roa
Signing time:             Sun 03 May 2026 02:44:23 +0000
ROA not before:           Sun 03 May 2026 02:39:23 +0000
ROA not after:            Sun 02 May 2027 02:44:23 +0000
asID:                     64314
IP address blocks:        103.78.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.crl
                          rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D5E6A4B072AACE672180804E096D6B00CB17E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d8:9e:0a:3c:0f:4f:ab:90:c5:24:f9:ef:46:e8:94:eb:21:b4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D5E6A4B072AACE672180804E096D6B00CB17E7
        Validity
            Not Before: May  3 02:39:23 2026 GMT
            Not After : May  2 02:44:23 2027 GMT
        Subject: CN=0E6100FBA1B0D0C653FE9ED6BA0CC14F25C557A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:e4:cb:43:37:a3:fe:57:02:9c:fd:51:f3:
                    dc:2c:77:33:cf:53:28:e6:56:31:c3:3b:6d:7c:ff:
                    6d:42:76:88:49:05:bf:58:90:22:d1:60:95:95:ea:
                    7d:eb:ad:d1:04:4b:55:4a:1c:57:7b:6b:0a:4f:7a:
                    f8:94:c6:82:5b:c9:c1:c2:cb:db:18:33:13:9a:9f:
                    62:5a:5f:5e:6e:11:05:d6:86:67:a1:d3:0f:fa:5a:
                    4a:9b:2d:a9:d0:a2:9a:45:8c:6d:a9:1f:bd:8b:9c:
                    25:53:65:c8:7d:03:78:3e:a8:f2:80:64:a6:bc:ac:
                    97:32:ca:2e:ea:7e:fb:a6:b2:f3:18:77:80:35:ba:
                    b3:59:11:aa:5e:62:c8:90:3b:b3:eb:87:ed:23:63:
                    ea:d5:d5:c0:5b:37:70:f3:62:87:e7:78:b1:b1:c8:
                    56:74:f3:b2:97:d0:72:c3:58:29:07:e6:57:85:bc:
                    9d:5d:07:b8:61:1e:a1:cc:de:26:08:c3:a7:03:30:
                    ff:d0:a1:c7:e7:4e:99:21:4a:75:77:0d:7f:2c:0c:
                    ba:a3:0d:2a:37:26:67:be:f8:7a:ff:ec:1b:55:6a:
                    74:8d:f7:0d:5d:97:b5:ce:9a:7e:d3:10:c8:2d:fb:
                    13:28:f6:f5:7d:14:6f:fd:e9:b0:32:40:a8:d1:ce:
                    08:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:61:00:FB:A1:B0:D0:C6:53:FE:9E:D6:BA:0C:C1:4F:25:C5:57:A4
            X509v3 Authority Key Identifier:
                keyid:F1:D5:E6:A4:B0:72:AA:CE:67:21:80:80:4E:09:6D:6B:00:CB:17:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D5E6A4B072AACE672180804E096D6B00CB17E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/3130332e37382e3130342e302f32332d3234203d3e203634333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:d9:a9:e4:30:b1:90:ec:f7:3d:62:93:28:cb:9c:4a:ab:
         aa:3d:f2:5c:93:da:7f:f4:a9:c7:5f:35:ae:0d:3d:e3:38:d2:
         af:03:2f:1b:9f:b8:12:fd:f4:9b:fa:c4:2d:38:c2:8b:f3:37:
         f6:be:aa:92:5b:94:2c:43:77:1b:9c:79:28:37:1c:d9:5f:00:
         fc:b3:7f:cd:88:64:fe:d0:e5:cb:af:88:a0:58:58:43:e5:2e:
         8f:b9:ad:4f:4a:5f:9b:ba:c2:7d:fd:ec:15:f6:f1:db:7c:b4:
         ef:de:bf:2a:de:d6:6c:03:17:82:d4:f6:62:92:32:97:1b:92:
         92:bd:8a:9a:c8:c5:bc:bf:67:28:c2:f4:b6:37:a1:3f:3d:18:
         c8:e2:39:4a:16:b2:b1:db:42:0f:e2:c1:13:ec:24:33:6f:da:
         2d:ef:75:4b:60:7d:16:14:ec:ac:ab:f0:3b:75:0e:b5:1b:6a:
         0f:14:61:fe:eb:34:b7:23:63:bf:24:69:96:17:aa:f9:1b:be:
         ff:7a:a6:02:08:84:a2:cb:60:9c:bd:cd:3a:5e:de:88:e8:c7:
         34:6a:da:75:39:b9:5a:bd:65:9b:0c:c8:87:57:2a:af:f8:80:
         f0:62:8f:60:81:06:ac:08:fe:42:98:46:84:63:55:89:bf:1e:
         83:86:40:5b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHNieCjwPT6uQxST570bolOshtHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFENUU2QTRCMDcyQUFDRTY3MjE4MDgwNEUwOTZENkIw
MENCMTdFNzAeFw0yNjA1MDMwMjM5MjNaFw0yNzA1MDIwMjQ0MjNaMDMxMTAvBgNV
BAMTKDBFNjEwMEZCQTFCMEQwQzY1M0ZFOUVENkJBMENDMTRGMjVDNTU3QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV5+TLQzej/lcCnP1R89wsdzPP
UyjmVjHDO218/21CdohJBb9YkCLRYJWV6n3rrdEES1VKHFd7awpPeviUxoJbycHC
y9sYMxOan2JaX15uEQXWhmeh0w/6WkqbLanQoppFjG2pH72LnCVTZch9A3g+qPKA
ZKa8rJcyyi7qfvumsvMYd4A1urNZEapeYsiQO7Prh+0jY+rV1cBbN3DzYofneLGx
yFZ087KX0HLDWCkH5leFvJ1dB7hhHqHM3iYIw6cDMP/QocfnTpkhSnV3DX8sDLqj
DSo3Jme++Hr/7BtVanSN9w1dl7XOmn7TEMgt+xMo9vV9FG/96bAyQKjRzgh/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUDmEA+6Gw0MZT/p7WugzBTyXFV6QwHwYDVR0j
BBgwFoAU8dXmpLByqs5nIYCATgltawDLF+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzkxMmFjODgtMDMzZC00OTdlLWJmNjMtNTU1M2Q1ZGM2ZGM5LzAvRjFENUU2QTRC
MDcyQUFDRTY3MjE4MDgwNEUwOTZENkIwMENCMTdFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMUQ1RTZBNEIwNzJBQUNFNjcyMTgwODA0RTA5NkQ2QjAwQ0Ix
N0U3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc5MTJhYzg4LTAzM2QtNDk3ZS1i
ZjYzLTU1NTNkNWRjNmRjOS8wLzMxMzAzMzJlMzczODJlMzEzMDM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzYzNDMzMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdOaDANBgkqhkiG
9w0BAQsFAAOCAQEAiLHZqeQwsZDs9z1ikyjLnEqrqj3yXJPaf/Spx181rg094zjS
rwMvG5+4Ev30m/rELTjCi/M39r6qkluULEN3G5x5KDcc2V8A/LN/zYhk/tDly6+I
oFhYQ+Uuj7mtT0pfm7rCff3sFfbx23y0796/Kt7WbAMXgtT2YpIylxuSkr2KmsjF
vL9nKML0tjehPz0YyOI5ShaysdtCD+LBE+wkM2/aLe91S2B9FhTsrKvwO3UOtRtq
DxRh/us0tyNjvyRplheq+Ru+/3qmAgiEostgnL3NOl7eiOjHNGradTm5Wr1lmwzI
h1cqr/iA8GKPYIEGrAj+QphGhGNVib8eg4ZAWw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:17:00 2026 by rpki-client