Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
File:                     3130332e33392e31332e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier:          RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=
Subject key identifier:   F1:54:A1:7C:45:75:9A:2B:1B:5B:8D:1D:0C:A0:41:8F:44:0C:B8:1A
Certificate issuer:       /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial:       4638B3AF4E6B4BA763C259CE87473FEA1645B6CB
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
Signing time:             Sun 03 May 2026 02:52:00 +0000
ROA not before:           Sun 03 May 2026 02:47:00 +0000
ROA not after:            Sun 02 May 2027 02:52:00 +0000
asID:                     63827
IP address blocks:        103.39.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
                          rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:38:b3:af:4e:6b:4b:a7:63:c2:59:ce:87:47:3f:ea:16:45:b6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
        Validity
            Not Before: May  3 02:47:00 2026 GMT
            Not After : May  2 02:52:00 2027 GMT
        Subject: CN=F154A17C45759A2B1B5B8D1D0CA0418F440CB81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:ac:34:36:af:92:80:a0:ea:cc:1d:2f:13:
                    09:cf:5d:6d:38:02:a9:03:41:c6:be:68:86:3b:2b:
                    75:fd:56:18:5d:9a:1f:b6:dc:4f:6e:94:1e:eb:2b:
                    ca:34:58:1d:07:01:23:fd:4b:e2:a2:8f:fe:a7:93:
                    ab:63:8f:12:ee:18:9a:44:9d:23:e3:b7:08:68:a5:
                    3e:b3:56:1c:ab:7d:11:d6:b4:43:91:d9:34:db:d2:
                    76:63:70:0d:8b:23:41:35:ff:d6:00:00:d3:f8:a1:
                    1a:a8:d7:fe:bb:a3:78:a7:98:3a:e9:83:58:7f:8d:
                    64:b5:ea:fe:80:6c:58:5e:8f:ce:ba:24:db:99:45:
                    06:ee:e6:60:2b:7c:2f:1c:7e:ec:ca:33:cc:a8:05:
                    23:c1:98:f3:fa:1a:32:d3:3e:9f:17:89:8e:7f:5c:
                    7e:83:9b:f3:56:e4:24:f9:74:83:2f:a8:3b:21:32:
                    d0:bc:57:b3:dc:01:cb:88:a0:e1:ac:67:29:30:ab:
                    e0:dd:24:70:2f:ff:27:76:0f:52:2b:0e:c5:80:7f:
                    98:76:a7:88:fd:c9:16:3c:41:7e:2e:82:93:e8:c3:
                    e9:af:eb:15:b4:fe:ef:6a:e2:a8:19:c6:87:c3:3a:
                    8e:dc:d4:e6:d3:c9:5c:d9:0a:41:07:38:4b:21:e0:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:54:A1:7C:45:75:9A:2B:1B:5B:8D:1D:0C:A0:41:8F:44:0C:B8:1A
            X509v3 Authority Key Identifier:
                keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:18:e2:e4:bb:a9:1b:25:54:7e:ce:53:08:af:36:05:3b:b7:
         cf:f0:52:00:68:ae:50:62:69:74:0b:d3:ae:21:55:c1:fd:5d:
         01:d2:48:ca:e3:58:f7:2d:75:21:e4:f0:c4:ee:86:e3:38:12:
         17:f5:be:49:1c:d3:08:79:c1:27:40:5c:3c:a2:ad:40:ce:85:
         a1:7c:be:f3:32:d8:0f:a9:df:3b:14:27:15:c8:40:0d:48:42:
         6c:bf:02:9a:3e:c1:84:35:7f:17:8f:a3:6a:f8:fb:dd:b0:7a:
         44:b7:91:9b:5f:3c:ef:af:ec:ec:c6:e2:d8:50:67:26:51:8b:
         4a:41:ed:0c:4c:8f:10:e2:23:d5:78:8e:a5:c4:26:28:99:a6:
         e4:72:24:5e:be:ff:60:c4:de:8d:4a:8e:71:f2:5c:91:73:32:
         b7:f8:e2:a3:3c:71:8a:d0:5e:32:47:b7:e7:13:1b:71:c7:18:
         c4:08:b7:ea:44:61:6e:0f:63:3e:78:9d:47:9d:3b:53:75:5b:
         ba:0e:66:30:43:5f:4a:7f:5c:3d:47:39:1c:37:d6:e1:46:33:
         b7:35:12:c5:91:ce:c9:54:29:3c:a3:50:92:73:b2:8c:55:dc:
         db:31:f3:3f:63:36:5c:e3:d3:a6:6e:e6:ae:5e:b0:56:fd:3d:
         d6:84:6f:e9
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIURjizr05rS6djwlnOh0c/6hZFtsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0
MDI5RTZDNDAeFw0yNjA1MDMwMjQ3MDBaFw0yNzA1MDIwMjUyMDBaMDMxMTAvBgNV
BAMTKEYxNTRBMTdDNDU3NTlBMkIxQjVCOEQxRDBDQTA0MThGNDQwQ0I4MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChiKw0Nq+SgKDqzB0vEwnPXW04
AqkDQca+aIY7K3X9Vhhdmh+23E9ulB7rK8o0WB0HASP9S+Kij/6nk6tjjxLuGJpE
nSPjtwhopT6zVhyrfRHWtEOR2TTb0nZjcA2LI0E1/9YAANP4oRqo1/67o3inmDrp
g1h/jWS16v6AbFhej866JNuZRQbu5mArfC8cfuzKM8yoBSPBmPP6GjLTPp8XiY5/
XH6Dm/NW5CT5dIMvqDshMtC8V7PcAcuIoOGsZykwq+DdJHAv/yd2D1IrDsWAf5h2
p4j9yRY8QX4ugpPow+mv6xW0/u9q4qgZxofDOo7c1ObTyVzZCkEHOEsh4LSJAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU8VShfEV1misbW40dDKBBj0QMuBowHwYDVR0j
BBgwFoAUCNPVVqmJ4OR37+uCQoVNekAp5sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTFhNjg3MTItMWQ5YS00MTQzLTgyZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZB
OTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0MDI5RTZDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOEQzRDU1NkE5ODlFMEU0NzdFRkVCODI0Mjg1NEQ3QTQwMjlF
NkM0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04
MmYxLTFjODJjMzMxNjVlYS8wLzMxMzAzMzJlMzMzOTJlMzEzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnJw0wDQYJKoZIhvcN
AQELBQADggEBAJAY4uS7qRslVH7OUwivNgU7t8/wUgBorlBiaXQL064hVcH9XQHS
SMrjWPctdSHk8MTuhuM4Ehf1vkkc0wh5wSdAXDyirUDOhaF8vvMy2A+p3zsUJxXI
QA1IQmy/Apo+wYQ1fxePo2r4+92wekS3kZtfPO+v7OzG4thQZyZRi0pB7QxMjxDi
I9V4jqXEJiiZpuRyJF6+/2DE3o1KjnHyXJFzMrf44qM8cYrQXjJHt+cTG3HHGMQI
t+pEYW4PYz54nUedO1N1W7oOZjBDX0p/XD1HORw31uFGM7c1EsWRzslUKTyjUJJz
soxV3Nsx8z9jNlzj06Zu5q5esFb9PdaEb+k=
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:20 2026 by rpki-client