Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138302e302f32322d3234203d3e203535363835.roa
File:                     3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (raw, json)
Hash identifier:          Sxgjfc3rJMR/6kggcztr6diqTcIFdNjFMaFwfjqQRVc=
Subject key identifier:   1A:DA:EE:97:6C:00:B1:B6:5D:2F:81:65:1A:FA:AA:BB:C4:AB:D2:13
Certificate issuer:       /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
Certificate serial:       211E601ED25368F38C001F10CC03E6FD6CBF4A87
Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138302e302f32322d3234203d3e203535363835.roa
Signing time:             Sun 03 May 2026 02:47:06 +0000
ROA not before:           Sun 03 May 2026 02:42:06 +0000
ROA not after:            Sun 02 May 2027 02:47:06 +0000
asID:                     55685
IP address blocks:        103.60.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl
                          rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1e:60:1e:d2:53:68:f3:8c:00:1f:10:cc:03:e6:fd:6c:bf:4a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
        Validity
            Not Before: May  3 02:42:06 2026 GMT
            Not After : May  2 02:47:06 2027 GMT
        Subject: CN=1ADAEE976C00B1B65D2F81651AFAAABBC4ABD213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:28:94:de:b4:d8:16:ea:b2:7f:ef:28:ed:
                    e0:87:5d:73:f4:d8:b5:85:a0:93:72:8e:9d:b9:75:
                    c8:64:1f:22:6a:a5:c1:a6:59:6a:56:ed:4c:f2:c0:
                    d9:6e:1c:e9:67:ea:b9:fd:db:da:93:c3:6c:47:79:
                    e3:66:4f:d2:cf:d4:55:1c:14:25:60:59:1a:2d:db:
                    c6:78:2f:80:8f:ef:4d:08:e4:99:37:ce:4d:96:3d:
                    b6:71:fa:20:24:68:65:60:a4:94:5a:e7:b3:03:6d:
                    23:2a:6a:0f:81:ca:5e:66:89:13:c2:e2:5f:4b:20:
                    70:f6:88:b0:46:31:9a:c2:64:a5:bc:d5:f0:47:2a:
                    5f:f2:7c:12:50:bc:8e:c4:54:5e:95:bd:56:f1:ee:
                    8c:a0:6e:f8:f1:9c:92:f2:2c:f9:df:c4:b7:6e:96:
                    c2:d6:32:91:a1:ff:5c:b8:aa:4b:c9:b3:84:34:a9:
                    14:c9:c9:ae:c2:45:d4:c5:5b:32:fe:e7:d7:8b:46:
                    e5:cc:8c:da:e4:20:e5:cd:4c:00:28:2e:76:1e:55:
                    85:04:47:d0:de:15:7f:ed:95:3f:a2:e7:e1:f9:78:
                    aa:dc:85:9d:07:64:bc:33:f4:76:fb:97:5a:8c:7e:
                    c2:1b:6a:39:d6:c4:54:fd:b1:39:af:b4:08:cc:4e:
                    b3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DA:EE:97:6C:00:B1:B6:5D:2F:81:65:1A:FA:AA:BB:C4:AB:D2:13
            X509v3 Authority Key Identifier:
                keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138302e302f32322d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:8d:71:09:41:44:2b:98:7b:e7:31:ac:f8:e5:68:12:6d:2a:
         1b:7e:68:d0:c2:c7:be:e5:12:bb:55:da:35:30:d1:99:8d:72:
         da:23:d0:7b:75:dc:5e:c9:e1:dc:d9:2e:bb:33:47:d3:98:8d:
         38:e6:fe:ae:14:a0:58:f7:b5:5f:28:4e:69:1c:94:54:75:d4:
         86:19:f7:ff:9d:ce:df:7d:99:8a:45:23:04:f9:46:e3:53:a7:
         d0:d3:16:c0:37:bf:50:b0:bc:8d:a2:89:e7:a3:3c:57:63:ff:
         ed:27:ed:88:22:1d:6d:4a:e4:ed:06:88:78:c1:c4:1d:a6:b0:
         bb:60:e0:f6:fe:3b:60:a1:eb:4b:38:2c:a9:7c:c2:8d:09:f8:
         04:bd:1c:d0:45:30:0c:88:99:c9:63:eb:ca:92:60:ed:d9:c1:
         0b:30:fe:10:ee:f9:1b:85:85:c3:7e:71:52:01:0e:a8:22:33:
         99:b7:e9:ae:d2:06:55:23:f1:3e:a5:a7:4a:03:0c:87:33:a5:
         80:34:cc:95:7f:07:a5:ef:5e:9c:35:31:80:63:24:95:0f:62:
         6d:da:c5:90:11:22:cc:62:34:95:98:8b:87:35:c6:03:cc:29:
         2f:67:ba:d8:08:2f:c3:b0:7e:ff:f5:f3:90:e0:34:96:24:0f:
         79:fd:74:a6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIR5gHtJTaPOMAB8QzAPm/Wy/SocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJB
RTNGMEQzNjAeFw0yNjA1MDMwMjQyMDZaFw0yNzA1MDIwMjQ3MDZaMDMxMTAvBgNV
BAMTKDFBREFFRTk3NkMwMEIxQjY1RDJGODE2NTFBRkFBQUJCQzRBQkQyMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNyiU3rTYFuqyf+8o7eCHXXP0
2LWFoJNyjp25dchkHyJqpcGmWWpW7UzywNluHOln6rn929qTw2xHeeNmT9LP1FUc
FCVgWRot28Z4L4CP700I5Jk3zk2WPbZx+iAkaGVgpJRa57MDbSMqag+Byl5miRPC
4l9LIHD2iLBGMZrCZKW81fBHKl/yfBJQvI7EVF6VvVbx7oygbvjxnJLyLPnfxLdu
lsLWMpGh/1y4qkvJs4Q0qRTJya7CRdTFWzL+59eLRuXMjNrkIOXNTAAoLnYeVYUE
R9DeFX/tlT+i5+H5eKrchZ0HZLwz9Hb7l1qMfsIbajnWxFT9sTmvtAjMTrNhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGtrul2wAsbZdL4FlGvqqu8Sr0hMwHwYDVR0j
BBgwFoAUBNu1hRHrVm2b4Zi37OFx0q4/DTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODIwMzJiYzktNjA1YS00MjUzLWE0Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUx
MUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJBRTNGMEQzNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNERCQjU4NTExRUI1NjZEOUJFMTk4QjdFQ0UxNzFEMkFFM0Yw
RDM2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgyMDMyYmM5LTYwNWEtNDI1My1h
NGNkLTYyZjEyNDEyNmVhYy8wLzMxMzAzMzJlMzYzMDJlMzEzODMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmc8tDANBgkqhkiG
9w0BAQsFAAOCAQEAt41xCUFEK5h75zGs+OVoEm0qG35o0MLHvuUSu1XaNTDRmY1y
2iPQe3XcXsnh3NkuuzNH05iNOOb+rhSgWPe1XyhOaRyUVHXUhhn3/53O332ZikUj
BPlG41On0NMWwDe/ULC8jaKJ56M8V2P/7SftiCIdbUrk7QaIeMHEHaawu2Dg9v47
YKHrSzgsqXzCjQn4BL0c0EUwDIiZyWPrypJg7dnBCzD+EO75G4WFw35xUgEOqCIz
mbfprtIGVSPxPqWnSgMMhzOlgDTMlX8Hpe9enDUxgGMklQ9ibdrFkBEizGI0lZiL
hzXGA8wpL2e62Agvw7B+//XzkOA0liQPef10pg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:26 2026 by rpki-client