Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa
File:                     3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          yzj0R3It9R2jU9wBDpqzfiEHW+8PEhf6218rNQIPbSs=
Subject key identifier:   AC:B1:74:2C:3D:BA:6B:00:C4:A6:BB:B1:03:00:02:36:0F:8A:5C:30
Certificate issuer:       /CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E
Certificate serial:       52006A4FC6A2B5DB9E5A5080C27B1628EA3EB50D
Authority key identifier: 0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa
Signing time:             Sun 03 May 2026 02:45:38 +0000
ROA not before:           Sun 03 May 2026 02:40:38 +0000
ROA not after:            Sun 02 May 2027 02:45:38 +0000
asID:                     131743
IP address blocks:        103.162.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl
                          rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:6a:4f:c6:a2:b5:db:9e:5a:50:80:c2:7b:16:28:ea:3e:b5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E
        Validity
            Not Before: May  3 02:40:38 2026 GMT
            Not After : May  2 02:45:38 2027 GMT
        Subject: CN=ACB1742C3DBA6B00C4A6BBB1030002360F8A5C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:61:e4:fc:fa:23:a5:08:5b:e1:21:5f:42:
                    ae:af:6a:d6:1e:86:95:09:68:6e:0b:7f:0b:f0:a8:
                    d8:c0:63:84:d6:41:83:f6:73:57:9e:35:de:2c:d4:
                    02:64:b5:e6:02:ac:58:78:fe:86:09:50:b6:a5:ff:
                    d9:d6:d3:28:8c:11:ef:ac:86:dd:07:26:46:4e:08:
                    16:52:aa:2f:26:75:2a:69:ab:0c:38:f2:b9:2a:de:
                    4b:02:d0:ee:ca:7a:e0:6e:cf:3c:16:a4:a0:e8:71:
                    16:51:ed:d0:85:2c:66:48:28:95:2e:02:6f:9c:eb:
                    6c:f9:16:c1:b1:c3:99:2c:a5:d1:63:01:a3:85:26:
                    57:1c:33:aa:79:f3:c4:64:a0:61:1a:9a:9b:68:c1:
                    b7:2c:8d:5b:2a:9d:dc:89:2a:3e:f8:32:eb:92:2c:
                    69:4a:bd:17:3a:14:4f:89:7c:1f:d7:15:57:f6:c3:
                    83:c8:d7:67:7a:51:b4:ff:e5:c7:77:6b:9d:25:ac:
                    30:8a:ce:a5:a1:5b:e2:4c:48:54:fa:d2:a1:46:9c:
                    2b:c1:fa:9a:8c:fb:5d:7f:5e:89:70:0d:53:e0:47:
                    b2:fa:a0:73:d7:59:c2:26:c5:e9:ef:17:ab:ef:aa:
                    19:16:96:3f:e7:3b:35:e3:df:c0:db:39:d6:dd:7d:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B1:74:2C:3D:BA:6B:00:C4:A6:BB:B1:03:00:02:36:0F:8A:5C:30
            X509v3 Authority Key Identifier:
                keyid:0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:f4:54:6f:c9:9a:c8:00:a9:16:d9:e1:17:cb:38:c7:01:41:
         5e:09:94:a4:9b:fc:2b:d3:84:07:26:ae:2e:e5:b3:94:62:c7:
         56:ce:b1:d9:8e:11:1e:07:8d:e6:35:3b:b8:41:ad:a8:66:6d:
         1a:4f:67:a0:07:31:3f:4f:84:c6:0a:e4:12:30:c2:13:ff:2a:
         8c:48:26:6e:56:09:03:d3:98:0e:dd:0d:a5:ea:a7:b4:89:37:
         28:d5:a5:3c:c6:dc:88:1e:11:23:51:5c:dd:71:33:1a:8b:c1:
         45:d8:4d:9b:9e:c7:5a:1f:ce:d7:8e:ed:8d:72:d2:fb:36:02:
         0b:d0:85:6d:28:3b:7c:e2:d3:37:33:2b:c9:2c:0d:9e:14:86:
         af:bd:0d:f8:47:56:63:cc:8d:3f:59:20:c5:0d:f6:75:05:32:
         9f:f8:82:af:ba:f2:36:52:de:80:db:41:3d:77:3c:42:39:93:
         36:30:47:22:44:8e:b7:fb:34:5f:02:14:60:aa:70:2d:84:62:
         14:44:c8:e2:cd:d2:72:ee:eb:2c:95:3a:f2:e2:03:77:5c:92:
         8e:c5:6c:a9:c9:9b:b9:2d:46:5a:ff:18:61:9a:cc:17:f7:72:
         96:39:a7:f2:a3:13:d2:85:37:ac:78:32:d5:46:ad:96:b5:5c:
         8a:2e:2f:39
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUUgBqT8aitdueWlCAwnsWKOo+tQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxQTc1NkQ2RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMz
QTIzQUM5RTAeFw0yNjA1MDMwMjQwMzhaFw0yNzA1MDIwMjQ1MzhaMDMxMTAvBgNV
BAMTKEFDQjE3NDJDM0RCQTZCMDBDNEE2QkJCMTAzMDAwMjM2MEY4QTVDMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDboWHk/PojpQhb4SFfQq6vatYe
hpUJaG4LfwvwqNjAY4TWQYP2c1eeNd4s1AJkteYCrFh4/oYJULal/9nW0yiMEe+s
ht0HJkZOCBZSqi8mdSppqww48rkq3ksC0O7KeuBuzzwWpKDocRZR7dCFLGZIKJUu
Am+c62z5FsGxw5kspdFjAaOFJlccM6p588RkoGEamptowbcsjVsqndyJKj74MuuS
LGlKvRc6FE+JfB/XFVf2w4PI12d6UbT/5cd3a50lrDCKzqWhW+JMSFT60qFGnCvB
+pqM+11/XolwDVPgR7L6oHPXWcImxenvF6vvqhkWlj/nOzXj38DbOdbdfbmnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUrLF0LD26awDEpruxAwACNg+KXDAwHwYDVR0j
BBgwFoAUCxp1bW8bGI7e+l3VzDQl0zojrJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2QyNjY1MTEtNjM5ZS00YzJiLTk2MzQtOWNjMWUyMmZhNzA4LzAvMEIxQTc1NkQ2
RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMzQTIzQUM5RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQjFBNzU2RDZGMUIxODhFREVGQTVERDVDQzM0MjVEMzNBMjNB
QzlFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdkMjY2NTExLTYzOWUtNGMyYi05
NjM0LTljYzFlMjJmYTcwOC8wLzMxMzAzMzJlMzEzNjMyMmUzMjMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnotswDQYJ
KoZIhvcNAQELBQADggEBAAP0VG/JmsgAqRbZ4RfLOMcBQV4JlKSb/CvThAcmri7l
s5Rix1bOsdmOER4HjeY1O7hBrahmbRpPZ6AHMT9PhMYK5BIwwhP/KoxIJm5WCQPT
mA7dDaXqp7SJNyjVpTzG3IgeESNRXN1xMxqLwUXYTZuex1ofzteO7Y1y0vs2AgvQ
hW0oO3zi0zczK8ksDZ4Uhq+9DfhHVmPMjT9ZIMUN9nUFMp/4gq+68jZS3oDbQT13
PEI5kzYwRyJEjrf7NF8CFGCqcC2EYhREyOLN0nLu6yyVOvLiA3dcko7FbKnJm7kt
Rlr/GGGazBf3cpY5p/KjE9KFN6x4MtVGrZa1XIouLzk=
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:58 2026 by rpki-client