Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa
File:                     3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (raw, json)
Hash identifier:          LlPUFkB0sceEK94Yu8wPw+JUw9peMjPuBGA5gFdUP0s=
Subject key identifier:   C2:A1:AB:E0:64:74:76:2B:8B:97:8A:43:1B:74:DF:3A:54:7D:8F:D1
Certificate issuer:       /CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC
Certificate serial:       35568D4E1A526B28932E4464FAF1EE801123E770
Authority key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa
Signing time:             Sun 03 May 2026 02:49:51 +0000
ROA not before:           Sun 03 May 2026 02:44:51 +0000
ROA not after:            Sun 02 May 2027 02:49:51 +0000
asID:                     136085
IP address blocks:        103.87.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl
                          rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:56:8d:4e:1a:52:6b:28:93:2e:44:64:fa:f1:ee:80:11:23:e7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC
        Validity
            Not Before: May  3 02:44:51 2026 GMT
            Not After : May  2 02:49:51 2027 GMT
        Subject: CN=C2A1ABE06474762B8B978A431B74DF3A547D8FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:3f:13:0e:d3:74:0e:88:3c:f5:36:65:fa:
                    44:7c:73:ce:eb:b4:90:e4:72:70:31:e0:6c:bd:d6:
                    d0:20:4d:af:80:d0:ff:4f:ed:bd:fa:b5:d5:f3:18:
                    de:cf:c0:67:48:30:e8:17:ef:dd:06:9d:45:b1:78:
                    c6:f2:03:2f:0f:38:b0:3e:10:43:34:76:88:cf:43:
                    9c:d5:ea:c9:dc:00:c6:c7:55:57:76:56:39:59:51:
                    53:fb:1f:81:fa:82:cc:2d:8a:d6:da:9c:92:f0:6a:
                    48:11:1d:83:cd:e5:20:2f:19:2f:ff:2b:34:7a:2b:
                    82:f7:fc:53:8d:c1:be:e4:ff:b8:0b:20:a6:69:95:
                    0d:87:2c:20:9c:83:fb:13:f2:21:71:82:be:46:fe:
                    89:c0:a1:18:f9:1b:6b:96:32:db:b0:97:4e:9c:94:
                    81:c0:54:6f:da:e4:89:5b:15:1f:7c:e7:9f:93:98:
                    8b:4c:80:5b:3f:fe:cb:08:4f:2e:13:97:93:a7:56:
                    8c:f9:fd:62:73:c8:ba:e3:c7:b2:9f:e1:51:70:6a:
                    43:71:6c:e9:0c:d1:6d:b8:a4:1d:cc:8a:1a:60:a9:
                    bf:1d:d3:b1:fa:df:83:c3:05:44:e1:31:8a:9c:66:
                    57:cc:71:bd:3e:b5:a1:b8:13:cc:ff:d3:26:e9:4a:
                    7d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A1:AB:E0:64:74:76:2B:8B:97:8A:43:1B:74:DF:3A:54:7D:8F:D1
            X509v3 Authority Key Identifier:
                keyid:91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:86:38:48:92:b5:4a:57:38:d2:4b:06:78:52:4f:92:82:9b:
         fd:c0:85:16:82:c9:90:48:79:24:b3:b4:c1:1a:53:45:cf:bb:
         ee:13:ec:01:6d:4a:99:b2:04:11:a8:e8:03:ed:5c:c4:c1:6a:
         3a:a6:18:1c:96:3b:8f:64:88:63:f0:0e:36:48:42:78:17:9d:
         16:45:b6:1d:63:f7:a5:25:e2:69:fd:4f:19:3d:38:b7:b4:81:
         fb:05:e6:3e:56:a2:f5:39:1d:fc:9c:4c:5d:d0:5c:2f:26:9c:
         4a:32:ef:fe:89:0c:e0:f9:5e:0d:b5:b8:38:28:77:b7:32:57:
         85:0b:c8:11:a0:ac:2a:76:27:be:d1:77:ac:e7:0f:0e:2f:b1:
         54:38:a1:4f:3b:44:89:c9:53:d7:38:44:b2:41:94:6d:2d:30:
         5f:24:af:83:ed:dd:49:02:5d:f3:16:14:e2:79:21:4b:5b:5f:
         b8:c7:5a:e1:90:17:14:a5:f2:e3:ed:5c:d6:c9:6a:8e:be:60:
         eb:a2:fe:2a:6f:e7:56:32:28:03:ae:99:e6:78:d9:2f:c2:33:
         9c:28:1c:58:c0:18:21:d1:3f:6b:a4:9b:52:51:c7:43:73:2e:
         25:ee:a0:1c:9b:99:b4:34:b3:32:ce:46:1e:30:f2:bc:cd:ae:
         f5:34:3e:88
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNVaNThpSayiTLkRk+vHugBEj53AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEwOThF
ODQ2RTlGQzAeFw0yNjA1MDMwMjQ0NTFaFw0yNzA1MDIwMjQ5NTFaMDMxMTAvBgNV
BAMTKEMyQTFBQkUwNjQ3NDc2MkI4Qjk3OEE0MzFCNzRERjNBNTQ3RDhGRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtj8TDtN0Dog89TZl+kR8c87r
tJDkcnAx4Gy91tAgTa+A0P9P7b36tdXzGN7PwGdIMOgX790GnUWxeMbyAy8POLA+
EEM0dojPQ5zV6sncAMbHVVd2VjlZUVP7H4H6gswtitbanJLwakgRHYPN5SAvGS//
KzR6K4L3/FONwb7k/7gLIKZplQ2HLCCcg/sT8iFxgr5G/onAoRj5G2uWMtuwl06c
lIHAVG/a5IlbFR9855+TmItMgFs//ssITy4Tl5OnVoz5/WJzyLrjx7Kf4VFwakNx
bOkM0W24pB3Mihpgqb8d07H634PDBUThMYqcZlfMcb0+taG4E8z/0ybpSn3HAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUwqGr4GR0diuLl4pDG3TfOlR9j9EwHwYDVR0j
BBgwFoAUkdpePq7HglACwrCyEWkQmOhG6fwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGMyNzg3NDctNmFjNy00Zjg3LTliMmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VB
RUM3ODI1MDAyQzJCMEIyMTE2OTEwOThFODQ2RTlGQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MURBNUUzRUFFQzc4MjUwMDJDMkIwQjIxMTY5MTA5OEU4NDZF
OUZDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjMjc4NzQ3LTZhYzctNGY4Ny05
YjJiLTIxMzU5Mjk0ZjAzNC8wLzMxMzAzMzJlMzgzNzJlMzEzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdXETANBgkqhkiG
9w0BAQsFAAOCAQEAJYY4SJK1Slc40ksGeFJPkoKb/cCFFoLJkEh5JLO0wRpTRc+7
7hPsAW1KmbIEEajoA+1cxMFqOqYYHJY7j2SIY/AONkhCeBedFkW2HWP3pSXiaf1P
GT04t7SB+wXmPlai9Tkd/JxMXdBcLyacSjLv/okM4PleDbW4OCh3tzJXhQvIEaCs
KnYnvtF3rOcPDi+xVDihTztEiclT1zhEskGUbS0wXySvg+3dSQJd8xYU4nkhS1tf
uMda4ZAXFKXy4+1c1slqjr5g66L+Km/nVjIoA66Z5njZL8IznCgcWMAYIdE/a6Sb
UlHHQ3MuJe6gHJuZtDSzMs5GHjDyvM2u9TQ+iA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:27:31 2026 by rpki-client