Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa
File:                     3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (raw, json)
Hash identifier:          s99ZTaHI8AEsUmlddmqA7MWNsPpN7nJom6XrkndDWvE=
Subject key identifier:   6C:2C:19:A5:0A:FF:CC:BB:2F:54:1B:EC:B5:0D:D1:96:CC:DE:1B:7D
Certificate issuer:       /CN=7705E223B413A31F5B5C47149EFBCA7585682B42
Certificate serial:       33B36CC64793BD9CD4EC0DF8F95CD3D777E67ADF
Authority key identifier: 77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa
Signing time:             Sun 03 May 2026 02:52:25 +0000
ROA not before:           Sun 03 May 2026 02:47:25 +0000
ROA not after:            Sun 02 May 2027 02:52:25 +0000
asID:                     149339
IP address blocks:        103.179.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl
                          rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b3:6c:c6:47:93:bd:9c:d4:ec:0d:f8:f9:5c:d3:d7:77:e6:7a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7705E223B413A31F5B5C47149EFBCA7585682B42
        Validity
            Not Before: May  3 02:47:25 2026 GMT
            Not After : May  2 02:52:25 2027 GMT
        Subject: CN=6C2C19A50AFFCCBB2F541BECB50DD196CCDE1B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:cc:da:4b:05:39:8d:13:c5:84:48:76:23:
                    8a:16:81:c3:2f:55:cb:53:53:46:8f:d3:19:0a:b9:
                    44:05:36:be:da:a8:bb:69:d8:cf:e7:f5:f6:52:4c:
                    27:2d:a7:ba:52:3b:98:7d:37:ec:f8:a1:4f:1d:30:
                    8b:c4:ac:c4:e3:f5:0e:80:8a:b4:6d:9b:67:68:f1:
                    3f:f1:2c:57:4f:c0:e8:16:8a:1c:04:56:f2:55:98:
                    26:55:42:37:68:c1:d1:6a:1b:62:9b:62:11:2c:08:
                    05:de:74:1a:f4:21:31:bc:b8:31:e6:23:93:71:69:
                    d0:16:ae:45:54:e5:ec:fe:35:61:21:03:85:f4:08:
                    4f:4b:43:53:2e:f9:1d:41:9d:2a:50:a0:cf:06:09:
                    6c:c6:c0:51:ab:7a:f9:b4:68:45:6d:2b:5d:cd:02:
                    ca:70:23:7c:e2:60:77:b3:1f:bb:67:ab:f6:64:d0:
                    d3:b1:de:84:d0:9b:c8:1f:83:50:fe:33:a5:96:ce:
                    46:9b:97:e2:bf:6a:7a:09:6d:bd:27:70:08:e7:80:
                    be:29:36:37:42:d4:b2:22:23:4a:6a:ea:44:a6:8b:
                    53:c5:92:17:cc:56:e8:f1:b7:d1:0b:ae:18:d0:e5:
                    c9:a0:01:c2:34:3c:26:68:43:1a:d6:6d:fd:84:1d:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2C:19:A5:0A:FF:CC:BB:2F:54:1B:EC:B5:0D:D1:96:CC:DE:1B:7D
            X509v3 Authority Key Identifier:
                keyid:77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:13:db:5c:a1:ec:f2:cc:9c:0f:d2:7c:0f:e8:bc:1d:55:78:
         e4:37:62:5c:55:2c:88:e6:b9:c1:df:79:73:ad:35:bf:5a:cd:
         dd:e2:3a:50:76:cc:24:79:0a:30:70:2d:82:8a:44:90:d0:07:
         56:a0:91:b5:ee:23:ff:7a:aa:78:13:3e:d5:14:f4:52:e8:72:
         29:22:78:4a:86:4e:8f:fa:81:10:02:30:b1:ea:9c:af:61:ef:
         33:36:f8:e5:6e:4f:12:89:29:d5:e7:ef:40:0e:a7:00:4b:59:
         96:b5:4d:34:d1:88:15:c2:61:14:fe:bf:5a:03:f5:f0:e5:a5:
         b7:0c:ac:07:94:61:6b:59:62:d4:d1:6f:5a:76:0b:f3:16:23:
         a6:d6:1e:84:58:92:e2:5b:68:a6:d6:c9:87:52:26:fd:e4:7b:
         c3:57:66:cd:44:5f:98:dc:91:af:30:d3:53:2a:3a:b1:27:97:
         7e:74:5c:b9:40:65:e8:a1:72:d8:00:e6:ab:83:3a:23:db:43:
         43:8b:8e:cd:a9:bf:46:c3:8d:87:af:0b:3b:43:65:4b:5c:02:
         95:ef:b5:b7:a6:37:c5:77:a3:b1:73:0a:11:0b:a2:84:43:70:
         0c:79:60:49:f7:3a:00:0c:c6:d6:98:ea:26:65:3e:e0:77:74:
         44:49:1d:c1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUM7NsxkeTvZzU7A34+VzT13fmet8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwNUUyMjNCNDEzQTMxRjVCNUM0NzE0OUVGQkNBNzU4
NTY4MkI0MjAeFw0yNjA1MDMwMjQ3MjVaFw0yNzA1MDIwMjUyMjVaMDMxMTAvBgNV
BAMTKDZDMkMxOUE1MEFGRkNDQkIyRjU0MUJFQ0I1MEREMTk2Q0NERTFCN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzczaSwU5jRPFhEh2I4oWgcMv
VctTU0aP0xkKuUQFNr7aqLtp2M/n9fZSTCctp7pSO5h9N+z4oU8dMIvErMTj9Q6A
irRtm2do8T/xLFdPwOgWihwEVvJVmCZVQjdowdFqG2KbYhEsCAXedBr0ITG8uDHm
I5NxadAWrkVU5ez+NWEhA4X0CE9LQ1Mu+R1BnSpQoM8GCWzGwFGrevm0aEVtK13N
AspwI3ziYHezH7tnq/Zk0NOx3oTQm8gfg1D+M6WWzkabl+K/anoJbb0ncAjngL4p
NjdC1LIiI0pq6kSmi1PFkhfMVujxt9ELrhjQ5cmgAcI0PCZoQxrWbf2EHeKvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbCwZpQr/zLsvVBvstQ3RlszeG30wHwYDVR0j
BBgwFoAUdwXiI7QTox9bXEcUnvvKdYVoK0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTM0NTRkMGItMWFkNy00MWVkLThlNDAtY2NiNjY2NDNhY2YwLzAvNzcwNUUyMjNC
NDEzQTMxRjVCNUM0NzE0OUVGQkNBNzU4NTY4MkI0Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NzA1RTIyM0I0MTNBMzFGNUI1QzQ3MTQ5RUZCQ0E3NTg1Njgy
QjQyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkzNDU0ZDBiLTFhZDctNDFlZC04
ZTQwLWNjYjY2NjQzYWNmMC8wLzMxMzAzMzJlMzEzNzM5MmUzMTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7MNMA0GCSqG
SIb3DQEBCwUAA4IBAQBYE9tcoezyzJwP0nwP6LwdVXjkN2JcVSyI5rnB33lzrTW/
Ws3d4jpQdswkeQowcC2CikSQ0AdWoJG17iP/eqp4Ez7VFPRS6HIpInhKhk6P+oEQ
AjCx6pyvYe8zNvjlbk8SiSnV5+9ADqcAS1mWtU000YgVwmEU/r9aA/Xw5aW3DKwH
lGFrWWLU0W9adgvzFiOm1h6EWJLiW2im1smHUib95HvDV2bNRF+Y3JGvMNNTKjqx
J5d+dFy5QGXooXLYAOargzoj20NDi47Nqb9Gw42Hrws7Q2VLXAKV77W3pjfFd6Ox
cwoRC6KEQ3AMeWBJ9zoADMbWmOomZT7gd3RESR3B
-----END CERTIFICATE-----
Generated at Wed May 13 09:54:45 2026 by rpki-client