Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa
File:                     3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          s1aR5khIH0XJ6oiD7CdhPXEq4FMhwYeqfSj1qAtdtp8=
Subject key identifier:   B6:E0:8F:32:0C:78:43:24:3E:75:8E:49:E2:42:02:CE:E0:7C:3D:2F
Certificate issuer:       /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial:       13C3369F1F532B75A3B6885E1340CE3B23F11BBB
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:51:43 +0000
ROA not before:           Sun 03 May 2026 02:46:43 +0000
ROA not after:            Sun 02 May 2027 02:51:43 +0000
asID:                     23679
IP address blocks:        103.238.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
                          rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c3:36:9f:1f:53:2b:75:a3:b6:88:5e:13:40:ce:3b:23:f1:1b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
        Validity
            Not Before: May  3 02:46:43 2026 GMT
            Not After : May  2 02:51:43 2027 GMT
        Subject: CN=B6E08F320C7843243E758E49E24202CEE07C3D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a5:2b:4c:b2:99:57:07:0b:6e:d1:ae:fc:87:
                    dc:16:d7:0f:50:71:b1:88:8c:b6:b7:7a:bb:6c:d4:
                    5c:e3:df:47:9b:1c:b8:f7:1f:18:cc:6c:67:99:3f:
                    b1:24:b3:f2:ca:2e:dc:6d:fd:64:fe:c1:46:fb:68:
                    da:be:e4:ea:b2:61:cf:2f:71:d1:6c:25:7b:46:07:
                    a4:6d:f7:92:53:ef:84:3d:31:27:14:2a:30:d9:38:
                    2c:ae:bf:d9:97:84:73:7c:d2:de:23:91:12:11:b9:
                    12:f4:75:fd:2e:01:fb:75:e9:c9:ff:e3:7c:72:e6:
                    70:d7:cb:91:1a:e0:f6:3c:9b:2d:b3:c2:38:ce:59:
                    f3:94:98:31:8d:12:78:c0:f0:22:62:79:14:ee:50:
                    c5:73:11:92:ef:96:37:d9:f2:56:41:74:e3:c1:e6:
                    75:d6:ca:fa:f3:b4:9a:a9:71:58:c7:2f:78:1c:3b:
                    cd:99:76:43:4b:66:30:fd:3e:3d:53:1e:0e:0a:2d:
                    e1:72:5d:40:c2:46:68:eb:67:13:5c:e4:d5:bb:f8:
                    96:81:c3:79:91:ac:76:8d:b3:56:06:31:ea:5b:63:
                    89:8f:01:1f:c7:d3:85:c4:af:b6:1d:c8:ec:28:ff:
                    58:69:33:45:8b:d8:93:c1:af:d3:d5:f2:82:04:d2:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:8F:32:0C:78:43:24:3E:75:8E:49:E2:42:02:CE:E0:7C:3D:2F
            X509v3 Authority Key Identifier:
                keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:28:c8:76:c0:d2:68:14:ad:2f:7c:a8:f4:94:0d:35:22:
         06:c3:fe:8e:77:4b:6a:96:03:94:63:b1:42:23:e4:5a:ed:74:
         cc:19:d1:77:5b:b5:44:56:05:fb:46:7e:ba:91:93:d6:30:6f:
         6d:fa:b9:fe:eb:db:de:b8:49:fc:17:3c:93:ad:62:41:d5:14:
         e1:2d:47:b8:b9:cd:aa:e6:d1:f5:70:ef:bd:6d:52:fc:66:3b:
         46:79:ff:ee:88:7e:a9:21:72:78:33:1c:4c:21:73:a1:3c:74:
         1c:c1:b6:f9:c1:5e:40:5c:77:c1:d7:59:3c:8d:aa:22:6d:54:
         4b:17:91:03:95:b5:1b:4f:b6:f0:9d:d3:de:32:11:a9:3f:dd:
         1e:92:05:e8:e2:29:89:03:29:a4:fc:9e:1c:87:c0:c4:a9:b0:
         7b:41:20:b7:e2:76:c8:4c:67:24:f7:a0:18:e5:14:9c:92:77:
         a6:b0:c6:7e:d3:38:f2:68:cd:2c:35:15:54:4b:90:d4:87:61:
         9d:08:70:a1:97:8f:a5:c5:a7:d8:9d:65:5e:00:b1:3c:c7:b4:
         8e:5e:14:68:fb:4e:9c:52:7e:15:a7:f9:b3:0a:93:89:cf:18:
         18:67:95:f0:a5:fe:f5:e4:0d:4e:17:d6:7d:35:01:a0:61:c4:
         a1:96:35:a5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUE8M2nx9TK3WjtoheE0DOOyPxG7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG
MzUxNTFFNTAeFw0yNjA1MDMwMjQ2NDNaFw0yNzA1MDIwMjUxNDNaMDMxMTAvBgNV
BAMTKEI2RTA4RjMyMEM3ODQzMjQzRTc1OEU0OUUyNDIwMkNFRTA3QzNEMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6pStMsplXBwtu0a78h9wW1w9Q
cbGIjLa3erts1Fzj30ebHLj3HxjMbGeZP7Eks/LKLtxt/WT+wUb7aNq+5OqyYc8v
cdFsJXtGB6Rt95JT74Q9MScUKjDZOCyuv9mXhHN80t4jkRIRuRL0df0uAft16cn/
43xy5nDXy5Ea4PY8my2zwjjOWfOUmDGNEnjA8CJieRTuUMVzEZLvljfZ8lZBdOPB
5nXWyvrztJqpcVjHL3gcO82ZdkNLZjD9Pj1THg4KLeFyXUDCRmjrZxNc5NW7+JaB
w3mRrHaNs1YGMepbY4mPAR/H04XEr7YdyOwo/1hpM0WL2JPBr9PV8oIE0mTfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUtuCPMgx4QyQ+dY5J4kICzuB8PS8wHwYDVR0j
BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3
QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1
MUU1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04
N2YyLWQ4MTg0MTc4YzE0OS8wLzMxMzAzMzJlMzIzMzM4MmUzMjMwMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+7IMA0GCSqG
SIb3DQEBCwUAA4IBAQBuLSjIdsDSaBStL3yo9JQNNSIGw/6Od0tqlgOUY7FCI+Ra
7XTMGdF3W7VEVgX7Rn66kZPWMG9t+rn+69veuEn8FzyTrWJB1RThLUe4uc2q5tH1
cO+9bVL8ZjtGef/uiH6pIXJ4MxxMIXOhPHQcwbb5wV5AXHfB11k8jaoibVRLF5ED
lbUbT7bwndPeMhGpP90ekgXo4imJAymk/J4ch8DEqbB7QSC34nbITGck96AY5RSc
knemsMZ+0zjyaM0sNRVUS5DUh2GdCHChl4+lxafYnWVeALE8x7SOXhRo+06cUn4V
p/mzCpOJzxgYZ5Xwpf715A1OF9Z9NQGgYcShljWl
-----END CERTIFICATE-----
Generated at Wed May 13 05:51:08 2026 by rpki-client