Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa
File:                     3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (raw, json)
Hash identifier:          /HZ9PgBcY1v+LICUOzB+p9dmjd1y9vMbbZwrBhVjk44=
Subject key identifier:   00:99:F8:5B:C4:58:6D:9C:B4:A2:4E:0C:F7:AE:1E:53:D7:38:64:AB
Certificate issuer:       /CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34
Certificate serial:       06F048E876D7660A730700A80AC948FB0EDC2E4D
Authority key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa
Signing time:             Sun 03 May 2026 02:52:48 +0000
ROA not before:           Sun 03 May 2026 02:47:48 +0000
ROA not after:            Sun 02 May 2027 02:52:48 +0000
asID:                     149716
IP address blocks:        103.186.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl
                          rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:48:e8:76:d7:66:0a:73:07:00:a8:0a:c9:48:fb:0e:dc:2e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34
        Validity
            Not Before: May  3 02:47:48 2026 GMT
            Not After : May  2 02:52:48 2027 GMT
        Subject: CN=0099F85BC4586D9CB4A24E0CF7AE1E53D73864AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:c9:32:62:6c:6a:60:b4:06:40:81:9f:a9:
                    7d:ae:df:24:94:73:20:c1:fb:b5:de:8d:21:82:16:
                    00:06:e4:9d:ae:43:53:b9:64:1a:75:3c:79:0a:39:
                    eb:81:1a:9d:01:8c:6c:57:c9:59:c2:25:2c:90:30:
                    67:9c:c7:64:df:2b:e7:4f:71:08:d3:ee:bc:3d:fb:
                    8e:80:55:b4:9e:0b:12:7e:d9:f0:ff:4e:b2:8d:20:
                    7a:ac:a9:ee:07:33:bd:4a:6d:fd:e1:3c:d9:15:0f:
                    c0:61:41:84:2c:76:a7:b8:42:9e:c3:5f:ea:83:13:
                    3b:3e:78:a5:41:0b:bb:22:69:ab:de:9e:c9:ed:12:
                    f2:d5:0c:50:65:2b:02:41:3a:a7:ef:49:39:0c:4e:
                    27:2d:75:03:e7:17:16:a0:36:e1:41:77:12:5a:77:
                    56:65:69:02:22:7e:d6:f2:8a:f1:d3:8c:e1:02:17:
                    c3:c9:1d:b3:05:aa:13:3f:1c:16:de:ae:8c:81:db:
                    f6:68:e9:84:26:39:c9:b9:55:46:40:5d:82:d3:1d:
                    21:8a:1e:12:e5:ec:ba:05:fb:1f:db:d5:fd:4c:9b:
                    fb:41:b5:bf:81:74:36:b5:64:6e:6f:fc:4e:c3:fe:
                    52:79:34:5a:a8:d4:7d:4b:7f:bd:08:6a:aa:b9:eb:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:99:F8:5B:C4:58:6D:9C:B4:A2:4E:0C:F7:AE:1E:53:D7:38:64:AB
            X509v3 Authority Key Identifier:
                keyid:2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c8:bf:16:bd:8d:63:d8:f3:83:63:79:75:3b:c4:2f:ee:2a:
         ba:71:dd:5c:4e:7e:af:c3:30:88:86:1a:b7:b7:50:b4:15:3b:
         d1:5f:27:57:c0:2a:db:13:1f:1d:18:80:ee:a1:79:bb:ea:54:
         70:83:ea:63:c4:1b:9c:76:a8:31:7a:55:89:4b:97:b6:c7:4f:
         e4:20:3f:27:78:15:60:74:64:57:35:eb:c0:e4:8b:eb:32:b1:
         b5:86:1f:45:b6:9e:b0:50:23:00:85:48:6d:7e:09:59:ff:ce:
         76:23:2d:de:e1:00:82:a1:5f:83:56:0c:92:52:bd:d0:b7:3f:
         5d:36:e0:14:a9:f9:d5:91:e0:0b:89:80:59:56:3a:b5:bb:bd:
         3c:8e:fd:14:91:24:c3:35:af:34:bf:39:0d:39:e0:5a:1f:36:
         82:02:b0:3e:c1:37:81:72:92:4c:8b:a6:22:82:ed:68:64:df:
         ac:0a:80:ee:df:7c:22:85:d4:80:ed:19:c2:92:53:f7:1c:78:
         eb:1d:94:7a:97:9d:66:39:c8:c8:1e:c3:c1:7f:0a:f9:47:18:
         bd:6a:a7:40:48:85:e9:3f:c9:a1:f4:e0:27:ef:ce:f6:fb:08:
         04:b7:0d:c1:ff:dc:16:7c:ba:9d:0c:86:86:08:0d:94:c1:65:
         3c:21:03:2e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBvBI6HbXZgpzBwCoCslI+w7cLk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQzMEMzMDA1ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQy
MjlGQ0YzNDAeFw0yNjA1MDMwMjQ3NDhaFw0yNzA1MDIwMjUyNDhaMDMxMTAvBgNV
BAMTKDAwOTlGODVCQzQ1ODZEOUNCNEEyNEUwQ0Y3QUUxRTUzRDczODY0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUMkyYmxqYLQGQIGfqX2u3ySU
cyDB+7XejSGCFgAG5J2uQ1O5ZBp1PHkKOeuBGp0BjGxXyVnCJSyQMGecx2TfK+dP
cQjT7rw9+46AVbSeCxJ+2fD/TrKNIHqsqe4HM71Kbf3hPNkVD8BhQYQsdqe4Qp7D
X+qDEzs+eKVBC7siaavensntEvLVDFBlKwJBOqfvSTkMTictdQPnFxagNuFBdxJa
d1ZlaQIiftbyivHTjOECF8PJHbMFqhM/HBberoyB2/Zo6YQmOcm5VUZAXYLTHSGK
HhLl7LoF+x/b1f1Mm/tBtb+BdDa1ZG5v/E7D/lJ5NFqo1H1Lf70Iaqq56x9xAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUAJn4W8RYbZy0ok4M964eU9c4ZKswHwYDVR0j
BBgwFoAULTDDAFh/bYG+m1VEPqjulCKfzzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTRkY2VmNjUtNWRlMy00MTI5LWFjMjctNzcwNmQ3MjY2MDAxLzAvMkQzMEMzMDA1
ODdGNkQ4MUJFOUI1NTQ0M0VBOEVFOTQyMjlGQ0YzNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yRDMwQzMwMDU4N0Y2RDgxQkU5QjU1NDQzRUE4RUU5NDIyOUZD
RjM0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk0ZGNlZjY1LTVkZTMtNDEyOS1h
YzI3LTc3MDZkNzI2NjAwMS8wLzMxMzAzMzJlMzEzODM2MmUzMjMxMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnutIwDQYJ
KoZIhvcNAQELBQADggEBAEXIvxa9jWPY84NjeXU7xC/uKrpx3VxOfq/DMIiGGre3
ULQVO9FfJ1fAKtsTHx0YgO6hebvqVHCD6mPEG5x2qDF6VYlLl7bHT+QgPyd4FWB0
ZFc168Dki+sysbWGH0W2nrBQIwCFSG1+CVn/znYjLd7hAIKhX4NWDJJSvdC3P102
4BSp+dWR4AuJgFlWOrW7vTyO/RSRJMM1rzS/OQ054FofNoICsD7BN4FykkyLpiKC
7Whk36wKgO7ffCKF1IDtGcKSU/cceOsdlHqXnWY5yMgew8F/CvlHGL1qp0BIhek/
yaH04Cfvzvb7CAS3DcH/3BZ8up0MhoYIDZTBZTwhAy4=
-----END CERTIFICATE-----
Generated at Wed May 13 13:53:55 2026 by rpki-client