Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/3130332e38362e3132382e302f32332d3234203d3e2034383030.roa
File:                     3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          60R7X56SozCA5mIN8nGG4Hjmryhwz60xWHs0HKmGlWc=
Subject key identifier:   F9:7F:1E:50:1F:A3:7E:C1:A5:55:69:5E:98:46:E3:73:9E:CA:FD:39
Certificate issuer:       /CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF
Certificate serial:       4577FECBD9B89CB97DE44E0C17CACA974C0BFB98
Authority key identifier: 2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/3130332e38362e3132382e302f32332d3234203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:53:30 +0000
ROA not before:           Sun 03 May 2026 02:48:30 +0000
ROA not after:            Sun 02 May 2027 02:53:30 +0000
asID:                     4800
IP address blocks:        103.86.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl
                          rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:77:fe:cb:d9:b8:9c:b9:7d:e4:4e:0c:17:ca:ca:97:4c:0b:fb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF
        Validity
            Not Before: May  3 02:48:30 2026 GMT
            Not After : May  2 02:53:30 2027 GMT
        Subject: CN=F97F1E501FA37EC1A555695E9846E3739ECAFD39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:72:12:65:a8:d2:15:71:43:0e:40:8f:29:
                    1a:91:e7:b3:5e:c1:e0:c7:d4:07:b9:61:23:01:14:
                    32:fa:3a:8c:c7:37:51:86:d2:76:c9:34:7b:84:a2:
                    d2:9b:d3:a3:fc:f7:6a:37:ae:70:44:fc:f8:de:1c:
                    9f:43:63:8c:ca:aa:0b:8a:54:b6:db:7e:8d:c5:06:
                    3a:44:11:f8:db:43:04:fb:80:0a:c1:8c:67:f9:7d:
                    a5:ad:de:05:ae:1e:ed:fc:06:36:06:85:fb:74:dc:
                    1c:4c:6e:22:4f:a3:b4:a4:40:0a:57:7b:c3:3d:c9:
                    4d:2b:2d:95:fd:96:2a:fe:ef:0e:4d:a5:55:5f:5e:
                    c2:b7:e8:f5:8d:ab:b5:95:56:3e:1f:15:ac:43:5a:
                    1d:a9:2d:07:29:d7:c8:53:af:2c:f7:52:5a:e1:24:
                    30:c6:c1:d9:97:ae:b7:f4:93:68:2e:c8:37:29:aa:
                    97:98:7a:05:89:dc:67:aa:e2:ad:91:40:e9:de:69:
                    09:bc:52:0d:aa:ad:94:27:70:d2:5c:4b:64:af:dd:
                    9b:11:54:b5:f1:64:69:88:77:c2:6f:81:05:48:af:
                    9f:1f:aa:f1:53:9a:21:8f:07:25:b6:5d:e0:a9:9c:
                    88:c0:3d:f0:04:de:a4:8d:51:90:22:c8:ba:05:8d:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:1E:50:1F:A3:7E:C1:A5:55:69:5E:98:46:E3:73:9E:CA:FD:39
            X509v3 Authority Key Identifier:
                keyid:2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/3130332e38362e3132382e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:3c:b1:de:07:49:4b:c7:4c:65:ad:14:9e:9d:83:8b:15:
         38:50:f0:ac:47:cd:57:c0:8d:14:9a:93:9a:9a:5f:4e:e9:52:
         4e:f2:b2:2d:1b:2f:6d:97:fa:e9:77:44:87:1e:32:be:12:91:
         e7:77:d2:94:22:95:a6:17:b3:32:38:17:b9:a5:35:09:d5:7c:
         4b:72:0b:ff:c8:90:fd:4c:ab:d9:43:80:34:9c:28:ac:40:96:
         67:fb:ad:2d:60:c2:de:18:6f:03:52:5e:7a:81:2e:71:69:f9:
         6e:76:60:07:d5:cb:cb:c6:0e:ae:f2:be:89:16:ee:f4:9f:25:
         fd:c0:00:e3:b2:13:bb:bf:d9:19:2b:47:95:9e:e0:e9:ae:79:
         39:c1:aa:64:22:19:b7:f2:31:d6:cc:b3:4d:e3:e0:81:8e:a8:
         79:7e:da:da:44:08:ea:41:ef:b7:d9:bd:d9:2f:53:02:76:60:
         40:8e:54:a2:96:73:20:f7:bc:85:71:23:5e:b8:c8:0f:60:21:
         f0:bd:ad:9f:24:d3:e2:d5:bd:03:08:97:2e:8f:bb:88:aa:2f:
         9c:64:66:43:ca:1f:1b:cf:64:6b:cc:e6:2a:fa:a0:03:bd:34:
         b5:b2:0d:f3:70:44:eb:12:7a:d2:a1:08:8d:fa:8c:e8:4f:50:
         4b:ef:03:6f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIURXf+y9m4nLl95E4MF8rKl0wL+5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4
RTBFM0ZERjAeFw0yNjA1MDMwMjQ4MzBaFw0yNzA1MDIwMjUzMzBaMDMxMTAvBgNV
BAMTKEY5N0YxRTUwMUZBMzdFQzFBNTU1Njk1RTk4NDZFMzczOUVDQUZEMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfP3ISZajSFXFDDkCPKRqR57Ne
weDH1Ae5YSMBFDL6OozHN1GG0nbJNHuEotKb06P892o3rnBE/PjeHJ9DY4zKqguK
VLbbfo3FBjpEEfjbQwT7gArBjGf5faWt3gWuHu38BjYGhft03BxMbiJPo7SkQApX
e8M9yU0rLZX9lir+7w5NpVVfXsK36PWNq7WVVj4fFaxDWh2pLQcp18hTryz3Ulrh
JDDGwdmXrrf0k2guyDcpqpeYegWJ3Geq4q2RQOneaQm8Ug2qrZQncNJcS2Sv3ZsR
VLXxZGmId8JvgQVIr58fqvFTmiGPByW2XeCpnIjAPfAE3qSNUZAiyLoFjcbhAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU+X8eUB+jfsGlVWlemEbjc57K/TkwHwYDVR0j
BBgwFoAUL3h5TsB1/pXngx3wsU50uI4OP98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OThhN2YzNTUtZjIyNS00OGYzLTg3ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVD
MDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4RTBFM0ZERi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yRjc4Nzk0RUMwNzVGRTk1RTc4MzFERjBCMTRFNzRCODhFMEUz
RkRGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk4YTdmMzU1LWYyMjUtNDhmMy04
N2Y4LTBiZmIwYzhlNThmMC8wLzMxMzAzMzJlMzgzNjJlMzEzMjM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnVoAwDQYJKoZIhvcN
AQELBQADggEBABA7PLHeB0lLx0xlrRSenYOLFThQ8KxHzVfAjRSak5qaX07pUk7y
si0bL22X+ul3RIceMr4Sked30pQilaYXszI4F7mlNQnVfEtyC//IkP1Mq9lDgDSc
KKxAlmf7rS1gwt4YbwNSXnqBLnFp+W52YAfVy8vGDq7yvokW7vSfJf3AAOOyE7u/
2RkrR5We4OmueTnBqmQiGbfyMdbMs03j4IGOqHl+2tpECOpB77fZvdkvUwJ2YECO
VKKWcyD3vIVxI164yA9gIfC9rZ8k0+LVvQMIly6Pu4iqL5xkZkPKHxvPZGvM5ir6
oAO9NLWyDfNwROsSetKhCI36jOhPUEvvA28=
-----END CERTIFICATE-----
Generated at Wed May 13 05:28:49 2026 by rpki-client