Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3234203d3e203535363636.roa
File:                     3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (raw, json)
Hash identifier:          kaKolGrEwM0axjoYKTFASTapi8JaDpN9O6GnVZtyVik=
Subject key identifier:   22:4A:F2:00:23:32:B5:CE:E3:2B:99:B8:FC:E2:4B:73:47:92:14:F3
Certificate issuer:       /CN=C92E90B711F341989DF94E2CE7301FDCDCDB3843
Certificate serial:       3CA22FF907E26E8DFD033535B28FA58B94A20C16
Authority key identifier: C9:2E:90:B7:11:F3:41:98:9D:F9:4E:2C:E7:30:1F:DC:DC:DB:38:43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3234203d3e203535363636.roa
Signing time:             Sun 03 May 2026 02:51:25 +0000
ROA not before:           Sun 03 May 2026 02:46:25 +0000
ROA not after:            Sun 02 May 2027 02:51:25 +0000
asID:                     55666
IP address blocks:        103.140.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.crl
                          rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a2:2f:f9:07:e2:6e:8d:fd:03:35:35:b2:8f:a5:8b:94:a2:0c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E90B711F341989DF94E2CE7301FDCDCDB3843
        Validity
            Not Before: May  3 02:46:25 2026 GMT
            Not After : May  2 02:51:25 2027 GMT
        Subject: CN=224AF2002332B5CEE32B99B8FCE24B73479214F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:3a:76:9e:0e:06:ba:b0:cb:a9:0e:8c:c0:
                    10:62:39:aa:c0:fe:b5:4e:6d:81:16:ca:d1:76:f6:
                    a3:8f:99:d4:59:8f:78:ea:15:70:bd:37:f4:c4:55:
                    fe:8e:62:a2:bb:04:c8:fa:44:af:7c:c2:f7:de:a9:
                    cd:e2:f4:06:a3:ce:06:b7:af:ac:38:1b:8c:a3:4e:
                    f1:ca:f5:a5:bc:e9:06:cf:fc:7e:59:ba:5c:6b:13:
                    22:11:f0:50:6e:ea:0d:94:32:b5:02:3f:65:54:a7:
                    82:57:2f:38:36:25:23:f8:b0:54:84:5e:0e:15:40:
                    48:2a:5c:ab:dc:3e:0b:3d:a8:a2:68:71:17:5f:a9:
                    47:6c:4f:17:72:fb:7f:03:fb:51:de:d9:46:05:26:
                    12:70:58:d3:ca:c2:3f:b8:fe:f0:4f:7b:0a:05:6e:
                    8d:2c:99:36:7d:26:dc:f0:93:53:57:1d:0c:0c:bf:
                    ad:5b:ed:4f:d3:63:c0:f9:71:d9:ed:99:b0:15:ae:
                    8f:a5:1f:fd:81:8f:23:fa:7d:9d:bd:a9:3e:69:e5:
                    dd:26:1e:e2:de:70:4a:68:3c:ca:ca:a7:cb:7a:f9:
                    84:d7:df:35:f3:65:a9:d7:3e:ec:d9:7d:f1:5c:44:
                    3e:f4:fe:fb:d8:89:08:21:ad:32:8f:93:ed:0b:3d:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4A:F2:00:23:32:B5:CE:E3:2B:99:B8:FC:E2:4B:73:47:92:14:F3
            X509v3 Authority Key Identifier:
                keyid:C9:2E:90:B7:11:F3:41:98:9D:F9:4E:2C:E7:30:1F:DC:DC:DB:38:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:1a:d3:47:a3:60:e9:31:62:b0:1f:ff:31:3f:53:a6:1a:d3:
         a7:f0:9d:f0:07:b8:f6:9a:92:33:8b:2f:2f:f7:81:26:e3:15:
         36:79:84:ca:9c:30:ea:b2:40:8f:11:48:a2:99:96:d9:6e:ed:
         0e:42:7a:2a:da:0b:b5:eb:21:f3:70:37:a2:0e:68:86:7f:2c:
         bd:c2:26:e3:3b:73:24:01:ab:59:0f:8d:e5:06:74:e8:8b:ca:
         cd:f5:d4:02:8f:3e:7e:c2:72:61:2b:fc:29:7d:ed:9f:c9:bc:
         27:00:da:8c:6f:6c:16:26:53:3b:f2:0b:81:9a:d4:ee:73:bc:
         bc:05:ac:ff:55:56:c3:e3:2f:8e:f6:50:b1:11:93:cf:a7:c5:
         6f:61:ba:a1:8b:0e:27:a0:3a:2e:8c:a6:9c:4e:be:ad:14:7d:
         ba:61:f1:d4:0a:97:57:99:c2:55:59:3d:f8:5b:f8:55:a2:db:
         b7:a2:2f:da:d0:00:1f:29:31:64:27:e8:0d:84:59:b2:9d:e3:
         33:41:30:cc:df:40:3b:b6:1e:06:76:35:13:29:12:ec:90:5b:
         83:d7:75:81:41:d3:35:a2:6f:56:d9:85:1b:46:40:dd:32:4e:
         da:80:b7:10:b5:85:2b:f3:26:f4:bd:55:e0:20:fa:95:86:a5:
         3f:3e:41:97
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPKIv+Qfibo39AzU1so+li5SiDBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyRTkwQjcxMUYzNDE5ODlERjk0RTJDRTczMDFGRENE
Q0RCMzg0MzAeFw0yNjA1MDMwMjQ2MjVaFw0yNzA1MDIwMjUxMjVaMDMxMTAvBgNV
BAMTKDIyNEFGMjAwMjMzMkI1Q0VFMzJCOTlCOEZDRTI0QjczNDc5MjE0RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/zp2ng4GurDLqQ6MwBBiOarA
/rVObYEWytF29qOPmdRZj3jqFXC9N/TEVf6OYqK7BMj6RK98wvfeqc3i9Aajzga3
r6w4G4yjTvHK9aW86QbP/H5ZulxrEyIR8FBu6g2UMrUCP2VUp4JXLzg2JSP4sFSE
Xg4VQEgqXKvcPgs9qKJocRdfqUdsTxdy+38D+1He2UYFJhJwWNPKwj+4/vBPewoF
bo0smTZ9Jtzwk1NXHQwMv61b7U/TY8D5cdntmbAVro+lH/2BjyP6fZ29qT5p5d0m
HuLecEpoPMrKp8t6+YTX3zXzZanXPuzZffFcRD70/vvYiQghrTKPk+0LPWhvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUIkryACMytc7jK5m4/OJLc0eSFPMwHwYDVR0j
BBgwFoAUyS6QtxHzQZid+U4s5zAf3NzbOEMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTAwNzMxNjQtODAwOC00OWM2LWIxODYtM2M3ZmU5YjgwYTE3LzAvQzkyRTkwQjcx
MUYzNDE5ODlERjk0RTJDRTczMDFGRENEQ0RCMzg0My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOTJFOTBCNzExRjM0MTk4OURGOTRFMkNFNzMwMUZEQ0RDREIz
ODQzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwMDczMTY0LTgwMDgtNDljNi1i
MTg2LTNjN2ZlOWI4MGExNy8wLzMxMzAzMzJlMzEzNDMwMmUzNzM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeMTDANBgkqhkiG
9w0BAQsFAAOCAQEAFRrTR6Ng6TFisB//MT9TphrTp/Cd8Ae49pqSM4svL/eBJuMV
NnmEypww6rJAjxFIopmW2W7tDkJ6KtoLtesh83A3og5ohn8svcIm4ztzJAGrWQ+N
5QZ06IvKzfXUAo8+fsJyYSv8KX3tn8m8JwDajG9sFiZTO/ILgZrU7nO8vAWs/1VW
w+MvjvZQsRGTz6fFb2G6oYsOJ6A6LoymnE6+rRR9umHx1AqXV5nCVVk9+Fv4VaLb
t6Iv2tAAHykxZCfoDYRZsp3jM0EwzN9AO7YeBnY1EykS7JBbg9d1gUHTNaJvVtmF
G0ZA3TJO2oC3ELWFK/Mm9L1V4CD6lYalPz5Blw==
-----END CERTIFICATE-----
Generated at Wed May 13 10:37:13 2026 by rpki-client