Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa
File:                     3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (raw, json)
Hash identifier:          2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=
Subject key identifier:   F4:11:2E:F1:80:9F:30:E0:41:F6:29:5F:25:A6:65:D3:F5:C6:8C:54
Certificate issuer:       /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA
Certificate serial:       56416BC6DC17682F504D4E4BF1D17C750C254E55
Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa
Signing time:             Sun 03 May 2026 02:48:25 +0000
ROA not before:           Sun 03 May 2026 02:43:25 +0000
ROA not after:            Sun 02 May 2027 02:48:25 +0000
asID:                     137367
IP address blocks:        103.116.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl
                          rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:41:6b:c6:dc:17:68:2f:50:4d:4e:4b:f1:d1:7c:75:0c:25:4e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA
        Validity
            Not Before: May  3 02:43:25 2026 GMT
            Not After : May  2 02:48:25 2027 GMT
        Subject: CN=F4112EF1809F30E041F6295F25A665D3F5C68C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:d5:7a:61:3a:68:45:d6:8e:c6:e5:41:c1:
                    7a:7f:a3:96:8d:0d:72:2b:34:bd:bf:93:8a:00:85:
                    04:8c:a7:3b:9d:58:02:45:88:af:3f:f0:33:45:a2:
                    d5:08:1b:4c:99:f4:57:5c:07:27:2a:a9:c7:d3:7e:
                    4f:21:b8:88:1d:2d:3b:88:4c:1f:a7:e9:a1:06:b1:
                    e4:1a:08:0a:0e:9f:39:11:9f:38:31:59:d0:60:8f:
                    15:92:4a:28:bd:94:50:6e:64:90:cd:24:8e:e1:8d:
                    92:9d:4d:fe:9f:6a:bb:bf:b4:c1:7d:df:bd:6a:15:
                    ce:a2:c8:b0:d9:30:0a:0e:5e:8c:1b:6d:3e:1d:dd:
                    27:37:64:4a:76:a9:3e:10:e5:2b:e0:96:96:e8:a3:
                    ff:01:a1:4a:e2:3b:e4:51:f4:2d:4b:f3:e5:f1:d0:
                    b1:4f:09:4c:ea:e3:a9:cf:fc:5f:ef:8b:b6:b5:8a:
                    34:45:db:98:da:16:f5:7d:6f:f4:98:77:f8:7d:c8:
                    6f:bd:0d:81:ee:70:6c:cc:c7:87:9c:79:f2:54:fe:
                    a6:26:c2:5f:29:78:6f:ea:a7:99:8b:6a:8a:5e:f4:
                    60:59:23:b2:5a:4c:fa:3c:31:a1:e5:cb:0a:3d:58:
                    2f:b9:d4:8b:b7:f8:4f:9d:fc:11:fa:3a:7e:12:7d:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:11:2E:F1:80:9F:30:E0:41:F6:29:5F:25:A6:65:D3:F5:C6:8C:54
            X509v3 Authority Key Identifier:
                keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:c6:3b:75:b2:d8:45:cc:19:3f:0b:f3:27:80:e2:6a:d6:
         ea:4e:97:d2:04:77:d8:8a:2d:0c:a5:58:1f:39:7c:c3:e9:c6:
         a4:57:fe:87:88:96:54:2a:e7:01:33:db:f2:21:2f:e1:5c:f4:
         66:3b:8a:13:64:d3:3b:8c:52:4b:54:5e:97:c1:e0:f2:d9:25:
         f1:53:af:97:24:b5:c9:d5:f3:f9:3b:a0:9e:de:06:97:47:7a:
         93:b9:3d:c7:dc:5c:2b:84:cb:de:20:0d:7d:1f:32:e9:38:c2:
         53:4b:d6:49:13:86:1d:50:85:b8:ac:a2:34:9c:33:51:f2:04:
         be:e1:33:9b:c3:f8:b5:26:e5:e6:26:8e:92:2b:56:a6:5b:cf:
         36:2e:f4:57:55:4a:01:83:1c:2c:7e:70:57:1e:62:2c:a8:75:
         9c:0d:2e:9d:bb:8c:4d:62:ef:9c:a3:ca:86:3c:69:fe:31:76:
         a2:e7:bb:a0:46:aa:6f:e7:f3:24:73:63:6c:3b:82:49:fe:04:
         66:08:c1:f5:de:6e:f2:6c:16:3c:1e:82:b2:7e:d5:0c:05:ff:
         40:8b:67:cf:02:19:5d:d7:e9:e7:ce:c3:70:7f:6f:d2:3d:4f:
         de:10:05:5e:18:c3:22:76:a9:96:e6:bd:de:59:ee:fb:fb:7a:
         86:12:12:50
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVkFrxtwXaC9QTU5L8dF8dQwlTlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJB
RkY3MkJGQTAeFw0yNjA1MDMwMjQzMjVaFw0yNzA1MDIwMjQ4MjVaMDMxMTAvBgNV
BAMTKEY0MTEyRUYxODA5RjMwRTA0MUY2Mjk1RjI1QTY2NUQzRjVDNjhDNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3y9V6YTpoRdaOxuVBwXp/o5aN
DXIrNL2/k4oAhQSMpzudWAJFiK8/8DNFotUIG0yZ9FdcBycqqcfTfk8huIgdLTuI
TB+n6aEGseQaCAoOnzkRnzgxWdBgjxWSSii9lFBuZJDNJI7hjZKdTf6faru/tMF9
371qFc6iyLDZMAoOXowbbT4d3Sc3ZEp2qT4Q5Svglpboo/8BoUriO+RR9C1L8+Xx
0LFPCUzq46nP/F/vi7a1ijRF25jaFvV9b/SYd/h9yG+9DYHucGzMx4ecefJU/qYm
wl8peG/qp5mLaope9GBZI7JaTPo8MaHlywo9WC+51Iu3+E+d/BH6On4SfT/HAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU9BEu8YCfMOBB9ilfJaZl0/XGjFQwHwYDVR0j
BBgwFoAUeIxgHq03PgwQkV6z1dmfUq/3K/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODZkNzIwZDUtYjdkNC00Mzk1LWEwNmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVB
RDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJBRkY3MkJGQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcy
QkZBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg2ZDcyMGQ1LWI3ZDQtNDM5NS1h
MDZiLTE5OTA0YTYzZjk0OC8wLzMxMzAzMzJlMzEzMTM2MmUzMjMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABndNswDQYJ
KoZIhvcNAQELBQADggEBAIzlxjt1sthFzBk/C/MngOJq1upOl9IEd9iKLQylWB85
fMPpxqRX/oeIllQq5wEz2/IhL+Fc9GY7ihNk0zuMUktUXpfB4PLZJfFTr5cktcnV
8/k7oJ7eBpdHepO5PcfcXCuEy94gDX0fMuk4wlNL1kkThh1QhbisojScM1HyBL7h
M5vD+LUm5eYmjpIrVqZbzzYu9FdVSgGDHCx+cFceYiyodZwNLp27jE1i75yjyoY8
af4xdqLnu6BGqm/n8yRzY2w7gkn+BGYIwfXebvJsFjwegrJ+1QwF/0CLZ88CGV3X
6efOw3B/b9I9T94QBV4YwyJ2qZbmvd5Z7vv7eoYSElA=
-----END CERTIFICATE-----
Generated at Wed May 13 08:27:53 2026 by rpki-client