Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa
File:                     3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (raw, json)
Hash identifier:          ualI/pM4NT2Wg3gKd9xAdl1JUbAVFMa5CRAfQUjYzdU=
Subject key identifier:   7E:AF:CD:91:97:5A:75:52:B9:0E:F4:6A:7A:F0:0D:E9:D3:A9:D1:37
Certificate issuer:       /CN=6FB3C13CFC02A51ACF157905EE65794FB07BA8FA
Certificate serial:       A6D586E03C688AEF1116880AA59E63C9754284
Authority key identifier: 6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa
Signing time:             Sun 03 May 2026 02:48:39 +0000
ROA not before:           Sun 03 May 2026 02:43:39 +0000
ROA not after:            Sun 02 May 2027 02:48:39 +0000
asID:                     142341
IP address blocks:        103.169.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl
                          rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a6:d5:86:e0:3c:68:8a:ef:11:16:88:0a:a5:9e:63:c9:75:42:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB3C13CFC02A51ACF157905EE65794FB07BA8FA
        Validity
            Not Before: May  3 02:43:39 2026 GMT
            Not After : May  2 02:48:39 2027 GMT
        Subject: CN=7EAFCD91975A7552B90EF46A7AF00DE9D3A9D137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:c3:0c:a8:ff:ba:49:3a:52:b1:74:45:5b:
                    ce:18:0e:e7:76:1c:3a:b5:db:7c:7f:41:0f:22:6e:
                    cc:39:30:01:6b:7e:62:97:66:c7:30:00:9e:59:da:
                    a4:20:ed:54:31:17:5d:d7:06:c4:24:73:c1:89:cf:
                    5e:d3:fb:58:2d:3f:be:b7:ee:0a:b5:2d:28:4e:27:
                    da:35:b0:d7:1b:6e:52:da:4e:a1:10:4b:00:0a:93:
                    8f:c2:2f:06:c9:8b:4d:a8:fc:bf:2f:dc:ec:45:21:
                    8e:2e:8f:4a:93:f6:f0:b9:ca:fd:85:54:ac:a9:b9:
                    7e:74:a6:93:51:05:21:ba:2a:78:25:02:80:05:7a:
                    f0:14:55:4e:6f:b9:15:04:23:15:1d:02:02:b8:4a:
                    56:cb:2d:26:43:1a:06:22:07:54:da:f0:1d:90:98:
                    a2:3c:82:93:10:19:c7:01:ef:ea:2f:bc:71:db:50:
                    a1:bc:7e:95:48:10:1d:70:07:9b:5d:bb:16:11:e5:
                    11:b4:0b:e6:dc:93:88:bb:64:3b:63:96:76:cc:61:
                    b2:39:1e:eb:15:87:e6:06:4a:fd:fd:b9:c2:ee:50:
                    b1:87:52:90:e3:8e:b7:41:1e:17:be:7d:15:71:10:
                    b1:4e:8f:84:c9:88:2c:4b:72:ae:ac:61:83:54:44:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AF:CD:91:97:5A:75:52:B9:0E:F4:6A:7A:F0:0D:E9:D3:A9:D1:37
            X509v3 Authority Key Identifier:
                keyid:6F:B3:C1:3C:FC:02:A5:1A:CF:15:79:05:EE:65:79:4F:B0:7B:A8:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB3C13CFC02A51ACF157905EE65794FB07BA8FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:b0:16:5a:cf:60:0c:4d:fe:3a:87:17:25:43:ca:9e:d2:
         d7:1f:83:5b:ab:45:4d:72:09:e6:6a:df:dc:ef:3f:0e:0a:c3:
         bd:ec:b7:73:62:4c:5c:7e:b6:83:73:40:9b:84:af:62:24:a3:
         b3:e3:26:7a:3c:4e:f1:a6:b6:88:14:87:1d:b4:75:2e:87:f5:
         47:59:74:0e:c3:a3:00:ec:b0:72:cc:ed:8e:f3:d7:69:f6:4d:
         09:0a:f2:60:d2:48:0f:20:d0:ec:32:39:45:c4:63:f7:ce:78:
         5c:f2:45:7f:ce:cc:4b:7c:81:ee:61:0e:ba:1b:0f:c2:d1:21:
         13:0a:80:ba:d2:7d:39:1c:8a:87:05:65:15:05:40:22:fe:14:
         74:27:bc:da:f6:7c:05:55:02:d0:06:e5:ff:2d:2c:ed:e9:64:
         fc:29:6f:14:ce:44:3d:31:40:e3:d3:2e:08:85:66:17:bd:8e:
         1e:8e:2f:af:71:ed:3b:c7:b1:b5:2d:ef:27:ca:f7:6d:ce:4c:
         79:17:6f:96:d6:3c:14:1f:9e:df:09:63:8a:22:27:28:7e:aa:
         d4:78:71:ab:14:9a:1a:82:56:7d:29:4b:42:5b:51:d9:ce:46:
         ee:72:13:d1:32:97:1e:9d:80:80:d2:4a:45:9e:d5:a2:56:31:
         f2:ca:96:a2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUAKbVhuA8aIrvERaICqWeY8l1QoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZCM0MxM0NGQzAyQTUxQUNGMTU3OTA1RUU2NTc5NEZC
MDdCQThGQTAeFw0yNjA1MDMwMjQzMzlaFw0yNzA1MDIwMjQ4MzlaMDMxMTAvBgNV
BAMTKDdFQUZDRDkxOTc1QTc1NTJCOTBFRjQ2QTdBRjAwREU5RDNBOUQxMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJMMMqP+6STpSsXRFW84YDud2
HDq123x/QQ8ibsw5MAFrfmKXZscwAJ5Z2qQg7VQxF13XBsQkc8GJz17T+1gtP763
7gq1LShOJ9o1sNcbblLaTqEQSwAKk4/CLwbJi02o/L8v3OxFIY4uj0qT9vC5yv2F
VKypuX50ppNRBSG6KnglAoAFevAUVU5vuRUEIxUdAgK4SlbLLSZDGgYiB1Ta8B2Q
mKI8gpMQGccB7+ovvHHbUKG8fpVIEB1wB5tduxYR5RG0C+bck4i7ZDtjlnbMYbI5
HusVh+YGSv39ucLuULGHUpDjjrdBHhe+fRVxELFOj4TJiCxLcq6sYYNURG8RAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfq/NkZdadVK5DvRqevAN6dOp0TcwHwYDVR0j
BBgwFoAUb7PBPPwCpRrPFXkF7mV5T7B7qPowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODdkMjAzMWItMjc2MS00YzM2LWI2OTAtNWI2OWQxNTY5YmFlLzAvNkZCM0MxM0NG
QzAyQTUxQUNGMTU3OTA1RUU2NTc5NEZCMDdCQThGQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RkIzQzEzQ0ZDMDJBNTFBQ0YxNTc5MDVFRTY1Nzk0RkIwN0JB
OEZBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3ZDIwMzFiLTI3NjEtNGMzNi1i
NjkwLTViNjlkMTU2OWJhZS8wLzMxMzAzMzJlMzEzNjM5MmUzMTMzMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqYQwDQYJ
KoZIhvcNAQELBQADggEBAEqdsBZaz2AMTf46hxclQ8qe0tcfg1urRU1yCeZq39zv
Pw4Kw73st3NiTFx+toNzQJuEr2Iko7PjJno8TvGmtogUhx20dS6H9UdZdA7DowDs
sHLM7Y7z12n2TQkK8mDSSA8g0OwyOUXEY/fOeFzyRX/OzEt8ge5hDrobD8LRIRMK
gLrSfTkciocFZRUFQCL+FHQnvNr2fAVVAtAG5f8tLO3pZPwpbxTORD0xQOPTLgiF
Zhe9jh6OL69x7TvHsbUt7yfK923OTHkXb5bWPBQfnt8JY4oiJyh+qtR4casUmhqC
Vn0pS0JbUdnORu5yE9Eylx6dgIDSSkWe1aJWMfLKlqI=
-----END CERTIFICATE-----
Generated at Wed May 13 12:51:26 2026 by rpki-client