Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32342d3234203d3e203633383632.roa
File:                     3130332e34392e32382e302f32342d3234203d3e203633383632.roa (raw, json)
Hash identifier:          3YXWMM41Pq4tpTkJcAa/g/i/xwLMU1IDNTLSp+AdGWk=
Subject key identifier:   B8:0E:57:30:A8:5C:57:BA:B2:40:CD:81:01:65:9A:19:41:EB:92:84
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       32A4282566FA330776006BA5BD1DD58C4E22397C
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32342d3234203d3e203633383632.roa
Signing time:             Sun 03 May 2026 02:48:41 +0000
ROA not before:           Sun 03 May 2026 02:43:41 +0000
ROA not after:            Sun 02 May 2027 02:48:41 +0000
asID:                     63862
IP address blocks:        103.49.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a4:28:25:66:fa:33:07:76:00:6b:a5:bd:1d:d5:8c:4e:22:39:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May  3 02:43:41 2026 GMT
            Not After : May  2 02:48:41 2027 GMT
        Subject: CN=B80E5730A85C57BAB240CD8101659A1941EB9284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:5b:2a:88:2b:aa:0f:e7:eb:a6:14:8b:0d:
                    b1:36:fb:0f:a2:61:67:36:17:5e:03:69:65:44:97:
                    38:60:dc:e3:86:fc:98:ea:91:73:eb:ec:bc:79:27:
                    69:63:23:b1:0f:bf:77:ef:86:33:60:7f:ca:71:b5:
                    2d:0e:42:ed:f2:89:ee:ef:3e:6e:3e:64:a8:0c:9c:
                    9b:c4:2e:4e:a4:cf:47:7d:be:9d:7d:04:53:55:62:
                    14:32:f8:df:7d:f7:36:9a:6c:fc:74:5e:95:5a:1a:
                    b5:00:b6:f2:ab:b1:b9:98:bc:01:c1:9f:f8:91:47:
                    0f:42:8b:e5:58:f8:3b:f7:b9:34:39:51:8b:4f:20:
                    40:ae:2c:d5:4b:e2:8f:1a:d6:f4:f5:ba:e3:c5:06:
                    22:b4:5d:1e:4c:08:6a:ca:0b:08:2e:97:2d:43:62:
                    b7:45:1a:e4:e8:d6:8b:22:45:0e:3e:ed:a0:c4:aa:
                    33:aa:55:0d:4f:60:4d:7f:93:ce:2e:7a:d8:83:0c:
                    de:ca:64:39:28:69:f1:be:7c:39:ef:2a:58:37:be:
                    8e:ce:98:06:67:ea:36:1b:3d:c6:3d:2a:d3:9a:61:
                    42:14:49:8d:e9:03:4d:b1:76:87:3a:0e:56:d2:20:
                    1c:01:f1:f1:32:30:5b:92:d1:33:4b:a7:6e:11:29:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0E:57:30:A8:5C:57:BA:B2:40:CD:81:01:65:9A:19:41:EB:92:84
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32342d3234203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:b2:6c:5c:7c:97:ae:e3:3a:19:4b:0f:70:98:75:63:2e:1b:
         61:53:c7:9b:e1:59:38:7b:a6:26:a9:c5:67:57:e0:f2:2a:5a:
         12:c6:ff:08:66:3b:1a:28:a7:e9:e1:ef:2e:01:4c:74:ec:21:
         d3:a1:6f:1c:8c:85:96:6a:7b:e4:59:30:27:49:c7:12:4d:0a:
         b2:da:eb:57:ce:71:0a:91:dc:3e:11:63:c8:e8:e6:51:9d:62:
         68:04:98:b6:78:8e:f8:13:53:0b:95:ea:14:40:20:4f:b9:56:
         22:7c:68:43:d7:e9:fa:28:75:f4:ea:df:2b:af:f6:45:11:78:
         85:93:65:2c:70:55:be:6d:19:c2:59:c7:db:fb:be:cc:0f:29:
         8b:0d:1c:6f:93:31:21:f1:15:4f:e0:b5:9f:83:15:5b:de:97:
         f0:7d:3a:6a:c8:31:23:fa:25:61:29:05:06:86:de:d7:47:7a:
         e2:82:c9:7c:44:54:93:5e:0a:ad:57:2a:38:f9:7c:0f:8a:b7:
         dc:43:65:ae:f9:5b:1b:e6:10:2b:c1:48:b5:8a:eb:90:0f:77:
         08:9c:b4:a3:3a:a7:96:c1:0b:b8:00:af:02:12:59:16:c3:ae:
         52:e5:c0:e7:94:5a:ae:41:f7:0f:8b:9c:0c:98:df:e4:17:22:
         b2:12:0c:72
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUMqQoJWb6Mwd2AGulvR3VjE4iOXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJGNkIwNUE1RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0
QUJGQTU1RTAeFw0yNjA1MDMwMjQzNDFaFw0yNzA1MDIwMjQ4NDFaMDMxMTAvBgNV
BAMTKEI4MEU1NzMwQTg1QzU3QkFCMjQwQ0Q4MTAxNjU5QTE5NDFFQjkyODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSu1sqiCuqD+frphSLDbE2+w+i
YWc2F14DaWVElzhg3OOG/JjqkXPr7Lx5J2ljI7EPv3fvhjNgf8pxtS0OQu3yie7v
Pm4+ZKgMnJvELk6kz0d9vp19BFNVYhQy+N999zaabPx0XpVaGrUAtvKrsbmYvAHB
n/iRRw9Ci+VY+Dv3uTQ5UYtPIECuLNVL4o8a1vT1uuPFBiK0XR5MCGrKCwguly1D
YrdFGuTo1osiRQ4+7aDEqjOqVQ1PYE1/k84uetiDDN7KZDkoafG+fDnvKlg3vo7O
mAZn6jYbPcY9KtOaYUIUSY3pA02xdoc6DlbSIBwB8fEyMFuS0TNLp24RKao9AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUuA5XMKhcV7qyQM2BAWWaGUHrkoQwHwYDVR0j
BBgwFoAU8vawWl2dVsR9FQORGyzA8Eq/pV4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODdlODMwYzgtZDU1OS00NTZhLTg4MzUtNGY2ZWI1NTI3YWEyLzAvRjJGNkIwNUE1
RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0QUJGQTU1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMkY2QjA1QTVEOUQ1NkM0N0QxNTAzOTExQjJDQzBGMDRBQkZB
NTVFLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04
ODM1LTRmNmViNTUyN2FhMi8wLzMxMzAzMzJlMzQzOTJlMzIzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnMRwwDQYJKoZIhvcN
AQELBQADggEBAKuybFx8l67jOhlLD3CYdWMuG2FTx5vhWTh7piapxWdX4PIqWhLG
/whmOxoop+nh7y4BTHTsIdOhbxyMhZZqe+RZMCdJxxJNCrLa61fOcQqR3D4RY8jo
5lGdYmgEmLZ4jvgTUwuV6hRAIE+5ViJ8aEPX6foodfTq3yuv9kUReIWTZSxwVb5t
GcJZx9v7vswPKYsNHG+TMSHxFU/gtZ+DFVvel/B9OmrIMSP6JWEpBQaG3tdHeuKC
yXxEVJNeCq1XKjj5fA+Kt9xDZa75WxvmECvBSLWK65APdwictKM6p5bBC7gArwIS
WRbDrlLlwOeUWq5B9w+LnAyY3+QXIrISDHI=
-----END CERTIFICATE-----
Generated at Wed May 13 02:27:10 2026 by rpki-client