Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38312e302f32342d3234203d3e20313530323034.roa
File:                     3130332e342e38312e302f32342d3234203d3e20313530323034.roa (raw, json)
Hash identifier:          E1JJ7Pf6RRc9CrvDCrblA/2c1fHnKQijraRY/RXe7gs=
Subject key identifier:   6B:D0:50:61:D7:9D:89:89:58:5D:6C:7D:9A:75:D7:4A:7A:50:D0:6F
Certificate issuer:       /CN=92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1
Certificate serial:       5B28991CCF7625EEA92EF728A14BF6AA90F3D382
Authority key identifier: 92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38312e302f32342d3234203d3e20313530323034.roa
Signing time:             Sun 03 May 2026 02:51:27 +0000
ROA not before:           Sun 03 May 2026 02:46:27 +0000
ROA not after:            Sun 02 May 2027 02:51:27 +0000
asID:                     150204
IP address blocks:        103.4.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl
                          rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:28:99:1c:cf:76:25:ee:a9:2e:f7:28:a1:4b:f6:aa:90:f3:d3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1
        Validity
            Not Before: May  3 02:46:27 2026 GMT
            Not After : May  2 02:51:27 2027 GMT
        Subject: CN=6BD05061D79D8989585D6C7D9A75D74A7A50D06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:c2:0c:9f:d1:4e:fc:54:cd:99:f0:2e:01:
                    e7:f5:3f:d7:75:87:79:fc:82:9e:b3:cf:57:bc:5a:
                    f5:32:e5:27:97:9c:3d:65:e2:51:79:fb:3a:f7:a8:
                    a8:56:33:8f:79:9e:53:3c:87:2c:7b:e7:0b:08:35:
                    f2:4d:cb:7f:65:e1:34:a4:d5:9a:17:50:75:de:fd:
                    9c:a7:c9:ff:34:ed:45:6b:bf:0a:c2:4d:f8:3f:7d:
                    92:16:ef:ea:55:b0:3a:4c:51:32:c0:89:8b:a1:ca:
                    63:35:e3:19:f7:bc:f6:5c:70:1d:ed:90:b2:c9:60:
                    88:fc:1d:aa:58:d9:2d:7d:e3:b0:31:3a:8e:a4:e7:
                    9b:50:15:c0:92:53:02:95:77:2d:ad:56:f0:65:53:
                    3b:41:c0:a3:4f:48:d9:04:64:22:52:b1:78:83:6a:
                    b4:b4:0d:43:4b:1d:2e:5b:18:08:c9:ad:9c:64:f9:
                    6e:cd:05:d4:c1:46:67:04:f4:9e:f6:7d:7f:05:21:
                    aa:d3:86:32:4e:f9:7e:75:d9:4a:3c:d3:40:14:1d:
                    bb:60:44:fd:13:56:72:9a:15:76:14:8b:ca:7d:fd:
                    9b:da:f6:7a:93:b3:5b:8a:19:e0:42:00:45:be:45:
                    26:62:2b:84:ff:4e:af:ad:e6:e4:1c:78:f7:5b:71:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:50:61:D7:9D:89:89:58:5D:6C:7D:9A:75:D7:4A:7A:50:D0:6F
            X509v3 Authority Key Identifier:
                keyid:92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38312e302f32342d3234203d3e20313530323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:8a:5c:67:97:1d:4e:a7:09:bd:46:a3:71:f4:62:8b:ab:cf:
         b9:1a:7e:99:02:2a:b3:51:e1:42:e5:30:75:d7:bc:44:06:77:
         f8:de:e5:64:70:5c:87:c5:d2:b4:ac:60:1a:6b:65:b9:37:7e:
         4a:d8:0d:e5:08:2e:ab:09:b1:f9:5f:00:61:a3:46:37:77:62:
         7e:06:99:78:f6:08:3f:37:09:dc:1c:d9:af:64:c1:0e:aa:e6:
         85:17:75:fe:fe:18:70:46:2e:42:72:1e:6c:87:59:1e:76:61:
         00:d3:9a:de:97:69:0f:9b:4d:11:cc:87:5a:ce:a5:47:46:8d:
         25:ef:a6:d5:6a:e5:52:ef:4f:b8:c4:49:e3:32:af:79:82:e1:
         c1:bb:d5:f9:ee:8a:66:4e:08:0c:01:68:a1:61:8b:26:4d:ae:
         b3:55:86:b6:9e:7f:2f:37:57:76:74:1c:ee:72:60:91:44:6c:
         3c:c0:da:02:07:5c:87:d2:18:fa:e3:f0:1c:51:57:62:82:aa:
         57:e9:66:a5:a9:e4:18:f6:9c:29:aa:0e:6a:0c:8d:ec:16:17:
         b1:2a:a3:da:dc:de:8a:cb:4c:09:ac:e1:59:88:94:d3:34:50:
         16:e9:e6:96:50:19:b1:83:e6:95:87:9a:a3:0f:95:68:85:26:
         70:3a:82:1c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUWyiZHM92Je6pLvcooUv2qpDz04IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJFOTVGMEUzQzAxQzg3MUNBMzNENUI0QUY5M0U2MTEy
NEI2REJFMTAeFw0yNjA1MDMwMjQ2MjdaFw0yNzA1MDIwMjUxMjdaMDMxMTAvBgNV
BAMTKDZCRDA1MDYxRDc5RDg5ODk1ODVENkM3RDlBNzVENzRBN0E1MEQwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fcIMn9FO/FTNmfAuAef1P9d1
h3n8gp6zz1e8WvUy5SeXnD1l4lF5+zr3qKhWM495nlM8hyx75wsINfJNy39l4TSk
1ZoXUHXe/Zynyf807UVrvwrCTfg/fZIW7+pVsDpMUTLAiYuhymM14xn3vPZccB3t
kLLJYIj8HapY2S1947AxOo6k55tQFcCSUwKVdy2tVvBlUztBwKNPSNkEZCJSsXiD
arS0DUNLHS5bGAjJrZxk+W7NBdTBRmcE9J72fX8FIarThjJO+X512Uo800AUHbtg
RP0TVnKaFXYUi8p9/Zva9nqTs1uKGeBCAEW+RSZiK4T/Tq+t5uQcePdbcSD9AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUa9BQYdediYlYXWx9mnXXSnpQ0G8wHwYDVR0j
BBgwFoAUkulfDjwByHHKM9W0r5PmESS22+EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTAxOTU4OWEtZDUyNS00MGZjLTg5NGEtMTJlNDQwMTBlM2U0LzAvOTJFOTVGMEUz
QzAxQzg3MUNBMzNENUI0QUY5M0U2MTEyNEI2REJFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkU5NUYwRTNDMDFDODcxQ0EzM0Q1QjRBRjkzRTYxMTI0QjZE
QkUxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwMTk1ODlhLWQ1MjUtNDBmYy04
OTRhLTEyZTQ0MDEwZTNlNC8wLzMxMzAzMzJlMzQyZTM4MzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzAzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnBFEwDQYJKoZIhvcN
AQELBQADggEBAJWKXGeXHU6nCb1Go3H0Yourz7kafpkCKrNR4ULlMHXXvEQGd/je
5WRwXIfF0rSsYBprZbk3fkrYDeUILqsJsflfAGGjRjd3Yn4GmXj2CD83Cdwc2a9k
wQ6q5oUXdf7+GHBGLkJyHmyHWR52YQDTmt6XaQ+bTRHMh1rOpUdGjSXvptVq5VLv
T7jESeMyr3mC4cG71fnuimZOCAwBaKFhiyZNrrNVhraefy83V3Z0HO5yYJFEbDzA
2gIHXIfSGPrj8BxRV2KCqlfpZqWp5Bj2nCmqDmoMjewWF7Eqo9rc3orLTAms4VmI
lNM0UBbp5pZQGbGD5pWHmqMPlWiFJnA6ghw=
-----END CERTIFICATE-----
Generated at Wed May 13 03:51:05 2026 by rpki-client