Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/3130332e32392e3134382e302f32322d3234203d3e203538333736.roa
File:                     3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (raw, json)
Hash identifier:          +JyCkLsQ3tpHW5cHfUXrYK9OeTIPdF1qJiIUkvR3JIw=
Subject key identifier:   08:3C:7A:E5:1C:0F:33:49:98:F4:AB:1B:D4:78:B3:B9:53:6D:A9:5D
Certificate issuer:       /CN=0A0BE818C9E480D5B3C1387F48406FDF75525054
Certificate serial:       1610C9213971A3BF0A32177EBC557A70AD6B7FC4
Authority key identifier: 0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/3130332e32392e3134382e302f32322d3234203d3e203538333736.roa
Signing time:             Sun 03 May 2026 02:49:00 +0000
ROA not before:           Sun 03 May 2026 02:44:00 +0000
ROA not after:            Sun 02 May 2027 02:49:00 +0000
asID:                     58376
IP address blocks:        103.29.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl
                          rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:10:c9:21:39:71:a3:bf:0a:32:17:7e:bc:55:7a:70:ad:6b:7f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0BE818C9E480D5B3C1387F48406FDF75525054
        Validity
            Not Before: May  3 02:44:00 2026 GMT
            Not After : May  2 02:49:00 2027 GMT
        Subject: CN=083C7AE51C0F334998F4AB1BD478B3B9536DA95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:80:45:25:26:b3:82:59:0c:43:ae:81:87:
                    18:e3:2f:91:32:7f:fc:22:60:6f:bb:d4:84:1d:ff:
                    bc:5c:6e:f7:02:65:22:d8:5a:66:03:c2:c3:40:41:
                    ce:05:0e:db:e5:52:80:3a:d7:9d:ea:4d:1c:57:9a:
                    1b:cd:12:0d:72:3a:ae:c8:93:f7:6b:46:ce:a5:e8:
                    8d:cb:e0:a5:64:a9:d8:fa:3d:db:d4:44:74:16:a9:
                    a4:ad:93:7c:93:76:17:26:a9:10:92:f6:be:dc:31:
                    2b:a1:9f:0d:95:0f:24:3c:b2:a8:85:04:45:f7:cc:
                    73:e2:a7:9b:78:0f:9f:e6:3a:75:e7:29:2f:02:1d:
                    04:61:2e:82:89:9f:5b:ce:2c:31:2b:4a:e4:7a:cc:
                    ac:47:3c:92:c3:c9:a0:5f:f8:24:c8:48:6a:f9:0d:
                    8a:95:f5:44:c2:0e:96:27:db:f0:3c:d6:3c:ce:fc:
                    d0:d1:0d:90:4b:37:81:a5:3f:b4:ed:22:45:9d:9e:
                    87:67:f6:c5:9f:8a:58:f0:e3:35:fd:bb:85:91:e8:
                    26:6a:f5:f7:f7:09:a2:14:fb:5e:9c:eb:47:52:86:
                    31:2f:6a:76:84:f2:ee:ad:63:81:59:20:37:3a:8b:
                    1a:cc:38:c2:f2:1a:b3:c6:4a:94:f4:cd:1e:29:71:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:7A:E5:1C:0F:33:49:98:F4:AB:1B:D4:78:B3:B9:53:6D:A9:5D
            X509v3 Authority Key Identifier:
                keyid:0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/3130332e32392e3134382e302f32322d3234203d3e203538333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:e4:10:fa:a1:28:4f:5c:d7:4a:f0:ea:b7:bf:dd:16:bc:89:
         22:8c:df:a9:ff:84:18:70:64:dc:7c:f4:4c:fd:b5:ad:f3:fa:
         94:cd:1e:4c:c7:da:9d:6b:a0:57:89:c4:7d:80:b5:bf:77:59:
         90:b6:e0:d2:e0:86:ff:f0:15:39:bd:10:f4:c5:95:f5:57:89:
         b6:32:ad:fe:fb:9d:c7:91:c8:dc:c5:dc:cc:8d:91:e0:f7:f2:
         5e:6c:92:bc:7f:fd:f7:d2:fa:2c:50:29:88:79:3c:5e:95:ba:
         fb:63:75:6e:77:2f:7b:ee:fe:45:53:de:4f:b6:d1:63:43:41:
         da:e6:2a:a5:2b:51:19:19:af:98:ff:ec:6b:bb:eb:06:40:db:
         04:b7:aa:61:03:62:83:d6:d8:20:f6:31:27:5a:39:c8:70:4d:
         1f:ec:71:aa:4c:e1:38:9a:d2:b3:60:e1:f9:cf:ee:74:8d:50:
         35:6a:51:35:9e:4d:9f:13:27:d0:c8:8f:3c:88:47:36:09:41:
         c0:42:aa:2d:c2:65:55:16:0b:7e:99:61:a4:03:63:e3:e3:6c:
         95:77:59:8d:56:a6:87:14:04:55:cf:54:c1:fc:42:8e:af:e0:
         71:b8:f7:1b:7a:2d:4a:5c:c3:ef:1a:4b:d6:c9:51:11:a6:89:
         b3:36:df:98
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFhDJITlxo78KMhd+vFV6cK1rf8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZGREY3
NTUyNTA1NDAeFw0yNjA1MDMwMjQ0MDBaFw0yNzA1MDIwMjQ5MDBaMDMxMTAvBgNV
BAMTKDA4M0M3QUU1MUMwRjMzNDk5OEY0QUIxQkQ0NzhCM0I5NTM2REE5NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmoBFJSazglkMQ66BhxjjL5Ey
f/wiYG+71IQd/7xcbvcCZSLYWmYDwsNAQc4FDtvlUoA6153qTRxXmhvNEg1yOq7I
k/drRs6l6I3L4KVkqdj6PdvURHQWqaStk3yTdhcmqRCS9r7cMSuhnw2VDyQ8sqiF
BEX3zHPip5t4D5/mOnXnKS8CHQRhLoKJn1vOLDErSuR6zKxHPJLDyaBf+CTISGr5
DYqV9UTCDpYn2/A81jzO/NDRDZBLN4GlP7TtIkWdnodn9sWfiljw4zX9u4WR6CZq
9ff3CaIU+16c60dShjEvanaE8u6tY4FZIDc6ixrMOMLyGrPGSpT0zR4pcY7zAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUCDx65RwPM0mY9Ksb1HizuVNtqV0wHwYDVR0j
BBgwFoAUCgvoGMnkgNWzwTh/SEBv33VSUFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThD
OUU0ODBENUIzQzEzODdGNDg0MDZGREY3NTUyNTA1NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTBCRTgxOEM5RTQ4MEQ1QjNDMTM4N0Y0ODQwNkZERjc1NTI1
MDU0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMwLTk1ZGMtNGI3Mi1h
ZTFiLWFkMWU5OGIwZTE3OS8wLzMxMzAzMzJlMzIzOTJlMzEzNDM4MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzUzODMzMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcdlDANBgkqhkiG
9w0BAQsFAAOCAQEAfuQQ+qEoT1zXSvDqt7/dFryJIozfqf+EGHBk3Hz0TP21rfP6
lM0eTMfanWugV4nEfYC1v3dZkLbg0uCG//AVOb0Q9MWV9VeJtjKt/vudx5HI3MXc
zI2R4PfyXmySvH/999L6LFApiHk8XpW6+2N1bncve+7+RVPeT7bRY0NB2uYqpStR
GRmvmP/sa7vrBkDbBLeqYQNig9bYIPYxJ1o5yHBNH+xxqkzhOJrSs2Dh+c/udI1Q
NWpRNZ5NnxMn0MiPPIhHNglBwEKqLcJlVRYLfplhpANj4+NslXdZjVamhxQEVc9U
wfxCjq/gcbj3G3otSlzD7xpL1slREaaJszbfmA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:41 2026 by rpki-client