Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa
File:                     3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=
Subject key identifier:   9E:E9:56:E7:9D:1C:2E:A5:0B:89:B3:D2:21:B9:42:3D:40:3F:BD:37
Certificate issuer:       /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32
Certificate serial:       6ED732EDD06E883F3EA1CC80AD415AB0D9DE1346
Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa
Signing time:             Sun 03 May 2026 02:47:09 +0000
ROA not before:           Sun 03 May 2026 02:42:09 +0000
ROA not after:            Sun 02 May 2027 02:47:09 +0000
asID:                     56255
IP address blocks:        103.224.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl
                          rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d7:32:ed:d0:6e:88:3f:3e:a1:cc:80:ad:41:5a:b0:d9:de:13:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32
        Validity
            Not Before: May  3 02:42:09 2026 GMT
            Not After : May  2 02:47:09 2027 GMT
        Subject: CN=9EE956E79D1C2EA50B89B3D221B9423D403FBD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:a6:f5:d5:75:bc:74:57:6f:d2:46:d8:26:
                    78:27:b0:c7:f5:03:98:ff:79:c8:b4:2e:56:c8:59:
                    46:23:c2:89:3a:f6:23:40:8e:49:cb:15:f3:2c:a2:
                    b7:14:07:00:57:c2:ca:37:b0:de:2a:7c:ab:63:e4:
                    31:ef:e2:83:29:bc:d7:a4:89:2f:4a:6d:fc:48:01:
                    2b:d2:21:44:26:c3:a0:1f:f7:b9:34:28:27:04:41:
                    dd:c5:90:b5:21:8d:7e:3e:69:d8:2d:14:86:dc:aa:
                    b5:48:37:db:79:cb:d5:ae:fc:25:70:0e:62:c6:70:
                    28:cf:92:69:cd:c0:1b:4b:94:b5:64:54:da:04:a8:
                    37:52:91:41:f3:18:c4:5e:c2:e9:47:91:00:9b:d2:
                    52:ed:32:3d:6d:28:f3:a8:7c:c6:ac:59:a8:37:1a:
                    5d:52:18:ed:59:5e:3a:2c:ab:72:87:e3:79:91:56:
                    06:a0:6c:3e:6b:c9:dd:2f:fb:95:df:38:f5:d0:a0:
                    16:6b:ad:99:fc:9b:d9:6f:8f:71:94:95:be:01:61:
                    c9:56:24:41:ac:8b:41:a8:c1:05:94:7e:ef:f8:f7:
                    fe:ce:5b:9d:40:7a:eb:36:27:cc:b1:f0:3e:6e:44:
                    78:9a:d3:23:91:21:84:9c:65:4e:e6:c8:84:7c:ab:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E9:56:E7:9D:1C:2E:A5:0B:89:B3:D2:21:B9:42:3D:40:3F:BD:37
            X509v3 Authority Key Identifier:
                keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:27:92:71:a4:aa:9a:18:3c:c1:7d:c0:21:7a:8c:6a:89:a6:
         04:bd:19:c0:f3:95:36:70:99:b5:26:41:77:49:4d:35:e7:ab:
         a9:87:1a:6c:4f:b6:d8:9f:a9:10:2d:ed:6d:e1:b3:db:ea:bc:
         a9:73:c6:4a:69:a2:e4:64:09:72:92:98:e5:db:09:83:14:75:
         6f:87:de:6d:f9:6a:cd:ad:a7:93:cf:b9:57:18:17:dc:95:b4:
         ff:81:b5:9a:c0:a6:28:78:e3:8f:84:44:10:45:56:7d:84:29:
         b9:1a:9e:02:af:57:44:92:f1:e1:af:16:04:92:b8:a5:57:be:
         51:16:8a:43:39:d7:8d:28:b6:b2:cd:27:a1:44:95:0f:c8:90:
         92:4e:98:b2:5f:19:e5:22:bb:92:c3:24:28:e5:ae:8a:cb:15:
         95:42:81:51:25:30:8a:c5:a4:89:21:ba:7a:7c:ed:ea:27:ae:
         8c:41:a4:35:7e:57:fe:2a:41:4f:50:59:98:3b:b6:c2:ac:a7:
         86:d0:b8:a7:b5:95:bb:14:17:8b:5a:46:e4:4f:ac:9d:6b:b5:
         04:8a:83:f5:91:fe:a7:0d:ac:81:03:fb:c7:07:5e:6d:a7:11:
         7c:3c:7c:72:08:8e:ee:a1:9d:77:1f:31:c2:e8:58:b1:75:f1:
         2a:1e:19:c3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbtcy7dBuiD8+ocyArUFasNneE0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2
QzRFREMzMjAeFw0yNjA1MDMwMjQyMDlaFw0yNzA1MDIwMjQ3MDlaMDMxMTAvBgNV
BAMTKDlFRTk1NkU3OUQxQzJFQTUwQjg5QjNEMjIxQjk0MjNENDAzRkJEMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDS6b11XW8dFdv0kbYJngnsMf1
A5j/eci0LlbIWUYjwok69iNAjknLFfMsorcUBwBXwso3sN4qfKtj5DHv4oMpvNek
iS9KbfxIASvSIUQmw6Af97k0KCcEQd3FkLUhjX4+adgtFIbcqrVIN9t5y9Wu/CVw
DmLGcCjPkmnNwBtLlLVkVNoEqDdSkUHzGMRewulHkQCb0lLtMj1tKPOofMasWag3
Gl1SGO1ZXjosq3KH43mRVgagbD5ryd0v+5XfOPXQoBZrrZn8m9lvj3GUlb4BYclW
JEGsi0GowQWUfu/49/7OW51Aeus2J8yx8D5uRHia0yORIYScZU7myIR8q/3TAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUnulW550cLqULibPSIblCPUA/vTcwHwYDVR0j
BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE
RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE
QzMyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgyMjZiM2UxLWQ3ZjYtNDY1ZS04
MzAyLTdkNTJmNWMzNDBmZi8wLzMxMzAzMzJlMzIzMjM0MmUzNzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfgTDANBgkqhkiG
9w0BAQsFAAOCAQEAfieScaSqmhg8wX3AIXqMaommBL0ZwPOVNnCZtSZBd0lNNeer
qYcabE+22J+pEC3tbeGz2+q8qXPGSmmi5GQJcpKY5dsJgxR1b4febflqza2nk8+5
VxgX3JW0/4G1msCmKHjjj4REEEVWfYQpuRqeAq9XRJLx4a8WBJK4pVe+URaKQznX
jSi2ss0noUSVD8iQkk6Ysl8Z5SK7ksMkKOWuissVlUKBUSUwisWkiSG6enzt6ieu
jEGkNX5X/ipBT1BZmDu2wqynhtC4p7WVuxQXi1pG5E+snWu1BIqD9ZH+pw2sgQP7
xwdebacRfDx8cgiO7qGddx8xwuhYsXXxKh4Zww==
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:43 2026 by rpki-client