Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
File:                     3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (raw, json)
Hash identifier:          OYr7fPU7LqGA/4X0nRg4WLnhKqVCaQ39UeYK0Ag4/eg=
Subject key identifier:   99:3E:04:72:16:06:49:65:FF:0D:92:E4:57:15:3D:7D:EB:D5:B6:86
Certificate issuer:       /CN=476A27F6557241F0C8B13CD6474412B065E838A1
Certificate serial:       4F5932B44F743126037F4E5DE3697BCED0D580FF
Authority key identifier: 47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
Signing time:             Sun 03 May 2026 02:51:17 +0000
ROA not before:           Sun 03 May 2026 02:46:17 +0000
ROA not after:            Sun 02 May 2027 02:51:17 +0000
asID:                     152000
IP address blocks:        103.56.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl
                          rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:59:32:b4:4f:74:31:26:03:7f:4e:5d:e3:69:7b:ce:d0:d5:80:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476A27F6557241F0C8B13CD6474412B065E838A1
        Validity
            Not Before: May  3 02:46:17 2026 GMT
            Not After : May  2 02:51:17 2027 GMT
        Subject: CN=993E047216064965FF0D92E457153D7DEBD5B686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:16:d5:f5:ea:a4:a2:61:0b:91:c4:36:65:a6:
                    fa:a2:3a:3b:78:13:ff:22:89:11:29:6a:81:d7:18:
                    1f:4d:e3:00:a3:2e:11:b6:00:7b:b4:33:fe:ee:2b:
                    10:3f:61:f2:2c:57:78:4a:a3:c4:a4:17:e5:a7:91:
                    5a:7a:c8:3d:06:c3:82:87:39:a7:9a:3d:c3:74:08:
                    c9:c2:b7:64:7f:d7:bc:b3:55:ea:af:8b:26:29:09:
                    9e:89:c0:1f:78:09:b6:01:63:7a:66:00:06:df:71:
                    8d:01:25:fa:d2:5e:52:b1:1f:76:bd:9d:2e:63:af:
                    0a:bc:21:67:25:c9:f1:47:e8:bb:4f:a6:22:a7:87:
                    3a:e4:97:24:f2:50:dd:e7:0e:dd:9c:ed:98:6c:f2:
                    c4:77:57:af:33:60:4e:3c:a7:90:78:33:a6:9b:d6:
                    d9:dc:b8:78:b6:18:43:46:af:56:06:b1:ea:96:87:
                    2e:bf:d4:60:62:85:8c:94:fe:6a:07:6e:ac:9b:7f:
                    7c:fb:ba:de:c7:dd:75:d1:f7:5f:4f:0a:85:27:a8:
                    7e:cd:80:75:5f:e3:a4:38:31:3d:7f:e7:d8:8d:4c:
                    77:3f:5f:a4:d2:a9:c1:e6:36:13:17:b5:a8:0a:91:
                    a3:60:c8:4d:bf:0e:6e:16:84:a1:82:f4:45:2f:ad:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3E:04:72:16:06:49:65:FF:0D:92:E4:57:15:3D:7D:EB:D5:B6:86
            X509v3 Authority Key Identifier:
                keyid:47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:b7:d4:47:76:ee:cf:17:9a:2f:bf:10:fc:2e:00:09:3b:f2:
         28:74:65:ee:a8:d1:62:1b:61:65:46:95:b0:87:1e:f1:14:39:
         e0:2f:9e:4d:25:62:f3:13:d2:30:26:d5:b3:30:31:8d:fd:8c:
         2f:f7:82:f1:cf:f1:d7:2f:36:a4:69:a4:a8:52:e8:f0:9c:90:
         50:75:32:e8:e0:49:af:19:9f:ca:d3:52:59:28:8b:52:98:d0:
         f3:1f:b8:f7:d8:77:08:87:10:27:01:e5:2d:e3:3d:96:fe:26:
         7e:76:4a:02:c2:3e:7d:cf:bd:da:dc:f4:f8:bd:e4:a4:dd:68:
         0b:5d:f5:7c:d6:b2:3b:4f:f4:77:76:28:59:62:eb:3a:a0:01:
         36:28:75:bd:0a:12:3c:4f:0c:38:e9:98:87:03:f6:f9:5b:33:
         60:68:bb:ff:d6:aa:e2:7e:c3:24:2c:ba:d1:36:b9:1d:b9:ae:
         fb:2d:93:d9:82:0b:64:dc:71:bb:d0:c4:d1:3c:af:9a:de:4a:
         63:da:5d:f8:76:fa:e0:f4:3c:5b:65:fa:79:a3:9d:e4:9c:62:
         8a:45:2a:38:bf:29:d2:a3:37:15:98:3c:76:1a:40:65:c4:cd:
         b5:d4:99:39:ca:4a:fb:9a:fa:cd:88:aa:66:3a:1e:c9:68:7d:
         bf:f6:a8:c5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUT1kytE90MSYDf05d42l7ztDVgP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2QTI3RjY1NTcyNDFGMEM4QjEzQ0Q2NDc0NDEyQjA2
NUU4MzhBMTAeFw0yNjA1MDMwMjQ2MTdaFw0yNzA1MDIwMjUxMTdaMDMxMTAvBgNV
BAMTKDk5M0UwNDcyMTYwNjQ5NjVGRjBEOTJFNDU3MTUzRDdERUJENUI2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFtX16qSiYQuRxDZlpvqiOjt4
E/8iiREpaoHXGB9N4wCjLhG2AHu0M/7uKxA/YfIsV3hKo8SkF+WnkVp6yD0Gw4KH
OaeaPcN0CMnCt2R/17yzVeqviyYpCZ6JwB94CbYBY3pmAAbfcY0BJfrSXlKxH3a9
nS5jrwq8IWclyfFH6LtPpiKnhzrklyTyUN3nDt2c7Zhs8sR3V68zYE48p5B4M6ab
1tncuHi2GENGr1YGseqWhy6/1GBihYyU/moHbqybf3z7ut7H3XXR919PCoUnqH7N
gHVf46Q4MT1/59iNTHc/X6TSqcHmNhMXtagKkaNgyE2/Dm4WhKGC9EUvrb/JAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmT4EchYGSWX/DZLkVxU9fevVtoYwHwYDVR0j
BBgwFoAUR2on9lVyQfDIsTzWR0QSsGXoOKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGVkMjhkZTgtMzBhMS00OTMyLWI1MzktMjIzOGJhNzU5MzBhLzAvNDc2QTI3RjY1
NTcyNDFGMEM4QjEzQ0Q2NDc0NDEyQjA2NUU4MzhBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NzZBMjdGNjU1NzI0MUYwQzhCMTNDRDY0NzQ0MTJCMDY1RTgz
OEExLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhlZDI4ZGU4LTMwYTEtNDkzMi1i
NTM5LTIyMzhiYTc1OTMwYS8wLzMxMzAzMzJlMzUzNjJlMzgzMDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc4UDANBgkqhkiG
9w0BAQsFAAOCAQEARLfUR3buzxeaL78Q/C4ACTvyKHRl7qjRYhthZUaVsIce8RQ5
4C+eTSVi8xPSMCbVszAxjf2ML/eC8c/x1y82pGmkqFLo8JyQUHUy6OBJrxmfytNS
WSiLUpjQ8x+499h3CIcQJwHlLeM9lv4mfnZKAsI+fc+92tz0+L3kpN1oC131fNay
O0/0d3YoWWLrOqABNih1vQoSPE8MOOmYhwP2+VszYGi7/9aq4n7DJCy60Ta5Hbmu
+y2T2YILZNxxu9DE0Tyvmt5KY9pd+Hb64PQ8W2X6eaOd5JxiikUqOL8p0qM3FZg8
dhpAZcTNtdSZOcpK+5r6zYiqZjoeyWh9v/aoxQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:00:06 2026 by rpki-client