Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa
File:                     3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (raw, json)
Hash identifier:          5sujLlpuj+APYEuCGGPMp2IaRJT57klQE6sCBEbziO0=
Subject key identifier:   FB:2D:16:13:EB:A8:C3:F6:48:A3:9F:1F:ED:B6:6E:06:EE:C9:23:66
Certificate issuer:       /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506
Certificate serial:       384369EC967F25AAEE9D064581FECF70BA563175
Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa
Signing time:             Sun 03 May 2026 02:48:07 +0000
ROA not before:           Sun 03 May 2026 02:43:07 +0000
ROA not after:            Sun 02 May 2027 02:48:07 +0000
asID:                     64027
IP address blocks:        103.214.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl
                          rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:43:69:ec:96:7f:25:aa:ee:9d:06:45:81:fe:cf:70:ba:56:31:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506
        Validity
            Not Before: May  3 02:43:07 2026 GMT
            Not After : May  2 02:48:07 2027 GMT
        Subject: CN=FB2D1613EBA8C3F648A39F1FEDB66E06EEC92366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:bf:c1:35:b1:56:d0:5f:ec:e0:b6:9a:5a:
                    0b:a4:72:39:ea:8a:1a:4a:05:04:26:b2:d0:e5:c2:
                    f7:7d:b1:f4:4f:99:ff:e5:a3:0e:ab:a5:52:74:07:
                    4a:f1:f5:0d:58:0c:96:b2:c9:ef:de:b5:3a:34:ef:
                    20:5e:aa:31:f0:f7:1c:02:4f:4f:32:9b:24:c1:8a:
                    82:fc:60:05:46:6d:93:67:a1:23:8d:f7:30:a8:e2:
                    b7:8f:34:43:fd:c1:b7:85:14:fc:b9:2b:11:a0:01:
                    ce:95:24:d1:70:1d:ae:d7:aa:02:9b:5b:79:43:89:
                    c8:94:f6:ff:79:80:4f:fa:74:c4:31:5c:87:15:b0:
                    cc:88:df:62:4b:e5:fe:89:da:2f:8d:7a:96:11:79:
                    a3:50:d9:2e:18:65:05:08:be:c1:84:d3:8d:c8:a6:
                    17:dd:5f:c0:8b:e5:c3:2a:fa:39:6a:d6:b4:4f:ce:
                    c6:d6:76:13:3d:fd:df:68:fd:6e:f0:3e:e7:50:7e:
                    20:39:65:c7:d0:4b:71:fd:72:9e:15:d7:b2:ef:d0:
                    13:5d:06:6c:4a:00:c9:2d:14:f2:4b:a3:78:e9:42:
                    14:d1:9f:7d:60:d7:00:3d:c1:d5:fc:97:97:36:f1:
                    a0:25:45:5a:b1:83:f8:03:e7:65:3c:6e:56:53:00:
                    a2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:16:13:EB:A8:C3:F6:48:A3:9F:1F:ED:B6:6E:06:EE:C9:23:66
            X509v3 Authority Key Identifier:
                keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:31:c9:00:9f:f3:19:e9:09:55:8b:94:b7:a2:28:7c:6c:
         65:e2:38:67:45:cb:04:b3:57:47:56:69:d3:42:a3:f7:a1:74:
         3b:bb:e6:a6:dd:95:31:e2:47:20:19:dd:78:4e:0b:d5:d6:db:
         19:21:21:ec:10:23:29:70:06:6a:ea:cc:f6:8b:d0:b4:91:2a:
         42:13:71:ef:74:79:76:87:92:eb:43:20:df:66:a4:68:bd:97:
         40:cd:ef:72:06:70:19:54:3e:e8:8b:0b:a0:fb:da:7a:80:0e:
         e6:54:e3:6d:cd:4d:28:c5:7d:df:37:5a:fd:f7:3e:de:9e:d6:
         bc:8f:3e:a9:1b:a5:45:51:cf:ba:66:1b:90:3c:67:07:23:be:
         dd:08:7d:66:37:01:99:29:6e:23:61:39:40:fc:f4:9f:4a:c1:
         27:b4:44:53:71:1f:cf:b1:9a:3f:fa:15:fb:7f:46:db:91:47:
         03:fd:9f:40:e8:25:54:db:11:b6:c4:f2:e1:e8:76:ab:4a:5a:
         98:f9:0b:43:d1:65:6e:4b:61:99:39:6d:00:6c:12:7c:8b:02:
         51:ed:3d:43:a3:e1:4b:ef:30:7d:6c:8c:b0:15:e4:3b:7a:a7:
         97:b5:17:e8:ec:28:27:18:e6:8f:20:bd:21:92:02:d4:ef:8b:
         76:50:20:e3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOENp7JZ/JarunQZFgf7PcLpWMXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBENzdE
MTMwMzUwNjAeFw0yNjA1MDMwMjQzMDdaFw0yNzA1MDIwMjQ4MDdaMDMxMTAvBgNV
BAMTKEZCMkQxNjEzRUJBOEMzRjY0OEEzOUYxRkVEQjY2RTA2RUVDOTIzNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeb/BNbFW0F/s4LaaWgukcjnq
ihpKBQQmstDlwvd9sfRPmf/low6rpVJ0B0rx9Q1YDJayye/etTo07yBeqjHw9xwC
T08ymyTBioL8YAVGbZNnoSON9zCo4rePNEP9wbeFFPy5KxGgAc6VJNFwHa7XqgKb
W3lDiciU9v95gE/6dMQxXIcVsMyI32JL5f6J2i+NepYReaNQ2S4YZQUIvsGE043I
phfdX8CL5cMq+jlq1rRPzsbWdhM9/d9o/W7wPudQfiA5ZcfQS3H9cp4V17Lv0BNd
BmxKAMktFPJLo3jpQhTRn31g1wA9wdX8l5c28aAlRVqxg/gD52U8blZTAKJRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+y0WE+uow/ZIo58f7bZuBu7JI2YwHwYDVR0j
BBgwFoAUfda1Ci1B6uuEjnxC10wNd9EwNQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODVlNTE4NzUtNTA4Ny00MjY0LWE4YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEy
RDQxRUFFQjg0OEU3QzQyRDc0QzBENzdEMTMwMzUwNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83REQ2QjUwQTJENDFFQUVCODQ4RTdDNDJENzRDMEQ3N0QxMzAz
NTA2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZTUxODc1LTUwODctNDI2NC1h
OGJkLTQxNTZmNTViYWFhYi8wLzMxMzAzMzJlMzIzMTM0MmUzMTMwMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjM0MzAzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9ZnMA0GCSqG
SIb3DQEBCwUAA4IBAQA1LzHJAJ/zGekJVYuUt6IofGxl4jhnRcsEs1dHVmnTQqP3
oXQ7u+am3ZUx4kcgGd14TgvV1tsZISHsECMpcAZq6sz2i9C0kSpCE3HvdHl2h5Lr
QyDfZqRovZdAze9yBnAZVD7oiwug+9p6gA7mVONtzU0oxX3fN1r99z7enta8jz6p
G6VFUc+6ZhuQPGcHI77dCH1mNwGZKW4jYTlA/PSfSsEntERTcR/PsZo/+hX7f0bb
kUcD/Z9A6CVU2xG2xPLh6HarSlqY+QtD0WVuS2GZOW0AbBJ8iwJR7T1Do+FL7zB9
bIywFeQ7eqeXtRfo7CgnGOaPIL0hkgLU74t2UCDj
-----END CERTIFICATE-----
Generated at Wed May 13 06:48:52 2026 by rpki-client