Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa
File:                     3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (raw, json)
Hash identifier:          WrcnjDvM2bO2wuu3OCRivgLaRSs+xddaOJ50D9MbO8U=
Subject key identifier:   50:66:E5:76:E7:74:2C:30:2D:85:F8:F3:33:37:8C:97:97:AF:4D:9E
Certificate issuer:       /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709
Certificate serial:       0969237A139BB27001698BEEF9AE61D4208E1469
Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa
Signing time:             Sun 03 May 2026 02:51:22 +0000
ROA not before:           Sun 03 May 2026 02:46:22 +0000
ROA not after:            Sun 02 May 2027 02:51:22 +0000
asID:                     141959
IP address blocks:        103.166.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl
                          rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:69:23:7a:13:9b:b2:70:01:69:8b:ee:f9:ae:61:d4:20:8e:14:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709
        Validity
            Not Before: May  3 02:46:22 2026 GMT
            Not After : May  2 02:51:22 2027 GMT
        Subject: CN=5066E576E7742C302D85F8F333378C9797AF4D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:60:f5:1f:2c:d4:cd:bd:af:c4:d8:22:cf:
                    92:c3:d1:5f:aa:d7:29:41:7a:2f:eb:e8:ce:ae:82:
                    52:04:dc:65:cc:dd:f0:46:ba:11:7f:31:b4:71:32:
                    7f:5e:54:07:28:8d:1c:b0:02:74:0b:92:71:00:d5:
                    cb:01:23:d1:5f:41:8d:03:4c:f8:37:1a:c1:ef:2c:
                    1b:13:b9:f6:b3:d3:27:50:1e:cc:67:bf:bd:66:11:
                    4a:6c:eb:53:3a:fb:ca:15:27:60:7f:a1:d2:f2:cf:
                    20:da:c5:64:a7:c7:e2:52:d8:91:6c:7f:f2:70:bb:
                    5f:04:53:bd:07:c5:41:cb:5e:00:2a:a5:31:14:01:
                    df:d3:7b:e3:0a:48:72:8f:8b:ec:2e:04:8a:6f:7e:
                    79:b5:17:5d:d9:8e:11:2d:3a:11:9c:e1:d0:a4:70:
                    1d:9c:a6:42:4b:77:ab:59:90:63:72:6b:0a:ee:04:
                    c7:c7:7a:35:d4:25:3b:e6:80:cb:4f:19:27:f7:68:
                    fb:ef:7c:1b:13:e8:1b:8f:48:be:56:15:34:ac:f1:
                    a2:af:e1:4c:b5:53:6d:82:9d:72:d3:b9:0f:03:45:
                    30:d8:46:c6:0a:73:9d:ab:46:35:b5:24:b7:7e:00:
                    54:1f:25:b8:c0:85:1d:61:5f:6b:6c:e6:fa:48:4b:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:66:E5:76:E7:74:2C:30:2D:85:F8:F3:33:37:8C:97:97:AF:4D:9E
            X509v3 Authority Key Identifier:
                keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:7a:c6:d3:37:7c:41:9c:bd:db:1b:84:2a:e1:ab:0a:4d:2a:
         db:27:fd:ac:be:d8:3d:f2:9e:91:d2:34:89:2a:3b:ac:94:93:
         eb:1d:5b:09:3a:8c:2f:9c:7e:64:9d:2d:61:46:93:56:b3:55:
         8a:3c:df:b4:12:10:82:ec:02:70:35:46:0c:23:d5:e0:df:a0:
         63:67:5e:2b:21:8a:22:4d:a0:bf:fc:d5:da:0d:44:51:67:3e:
         a0:68:c1:30:1c:63:03:5d:85:1a:d7:dc:23:da:b3:d7:41:76:
         32:3c:e2:34:7a:0c:de:45:13:79:19:6f:36:46:75:c7:6a:9d:
         b7:07:83:50:2f:cb:d5:4e:3c:25:6c:b4:c1:99:e0:eb:ba:e4:
         19:11:d0:dc:07:97:1a:78:f3:b7:d2:55:28:28:76:5a:a6:e3:
         99:9c:6d:f6:9c:10:8e:65:d2:9f:8b:03:e9:94:80:c7:3f:92:
         2e:67:93:70:66:5f:db:be:24:02:4d:c4:b7:49:0b:2c:12:5b:
         70:a0:d0:e6:80:ec:66:12:40:bf:21:47:84:b6:7e:d4:f4:85:
         82:0f:47:3b:c1:39:2d:50:a4:37:df:b0:59:85:47:63:76:99:
         b7:75:b2:89:f7:42:43:c7:75:22:ab:cd:2f:70:11:d9:5a:96:
         e9:58:76:97
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUCWkjehObsnABaYvu+a5h1CCOFGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF
Q0QyRDcwOTAeFw0yNjA1MDMwMjQ2MjJaFw0yNzA1MDIwMjUxMjJaMDMxMTAvBgNV
BAMTKDUwNjZFNTc2RTc3NDJDMzAyRDg1RjhGMzMzMzc4Qzk3OTdBRjREOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSGD1HyzUzb2vxNgiz5LD0V+q
1ylBei/r6M6uglIE3GXM3fBGuhF/MbRxMn9eVAcojRywAnQLknEA1csBI9FfQY0D
TPg3GsHvLBsTufaz0ydQHsxnv71mEUps61M6+8oVJ2B/odLyzyDaxWSnx+JS2JFs
f/Jwu18EU70HxUHLXgAqpTEUAd/Te+MKSHKPi+wuBIpvfnm1F13ZjhEtOhGc4dCk
cB2cpkJLd6tZkGNyawruBMfHejXUJTvmgMtPGSf3aPvvfBsT6BuPSL5WFTSs8aKv
4Uy1U22CnXLTuQ8DRTDYRsYKc52rRjW1JLd+AFQfJbjAhR1hX2ts5vpIS2HnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUUGbldud0LDAthfjzMzeMl5evTZ4wHwYDVR0j
BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy
REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE
NzA5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhmZjA5NTg0LTkxMTAtNGIwZC04
ZjZkLTJjZTUyNThlODQ2Yi8wLzMxMzAzMzJlMzEzNjM2MmUzMjMyMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpuIwDQYJ
KoZIhvcNAQELBQADggEBAJt6xtM3fEGcvdsbhCrhqwpNKtsn/ay+2D3ynpHSNIkq
O6yUk+sdWwk6jC+cfmSdLWFGk1azVYo837QSEILsAnA1Rgwj1eDfoGNnXishiiJN
oL/81doNRFFnPqBowTAcYwNdhRrX3CPas9dBdjI84jR6DN5FE3kZbzZGdcdqnbcH
g1Avy9VOPCVstMGZ4Ou65BkR0NwHlxp487fSVSgodlqm45mcbfacEI5l0p+LA+mU
gMc/ki5nk3BmX9u+JAJNxLdJCywSW3Cg0OaA7GYSQL8hR4S2ftT0hYIPRzvBOS1Q
pDffsFmFR2N2mbd1son3QkPHdSKrzS9wEdlalulYdpc=
-----END CERTIFICATE-----
Generated at Wed May 13 10:16:31 2026 by rpki-client