Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa
File:                     3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (raw, json)
Hash identifier:          VkyPTF+RY+z/p6xoTjLQ0ZWN42gQ1j6IA9bwlr+r6r8=
Subject key identifier:   62:6D:DB:72:72:B8:45:51:69:CF:A7:B6:4E:15:66:E3:52:54:2B:AD
Certificate issuer:       /CN=6D157C9F12B387F14489E16709B7918837CC6D0D
Certificate serial:       1BD075B1E70B1D67838467B4D3B4444E74443390
Authority key identifier: 6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa
Signing time:             Sun 03 May 2026 02:54:06 +0000
ROA not before:           Sun 03 May 2026 02:49:06 +0000
ROA not after:            Sun 02 May 2027 02:54:06 +0000
asID:                     150510
IP address blocks:        103.61.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl
                          rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d0:75:b1:e7:0b:1d:67:83:84:67:b4:d3:b4:44:4e:74:44:33:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D157C9F12B387F14489E16709B7918837CC6D0D
        Validity
            Not Before: May  3 02:49:06 2026 GMT
            Not After : May  2 02:54:06 2027 GMT
        Subject: CN=626DDB7272B8455169CFA7B64E1566E352542BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:68:39:7f:e0:8d:92:d0:d0:bd:d6:30:08:
                    8a:69:c1:39:58:91:f7:45:fd:de:b0:57:90:65:f8:
                    83:40:86:a2:bf:5e:29:75:4e:03:11:0f:f3:55:67:
                    fc:12:eb:ed:70:ee:67:d0:67:7d:bc:45:f0:46:30:
                    3b:3c:f1:5b:c9:63:6f:12:0e:e0:2c:e1:6d:be:0f:
                    79:cd:59:42:1d:f6:c8:d8:04:3d:8a:73:4b:50:0f:
                    1b:ac:4a:d2:5d:5b:b7:e7:05:49:bf:41:e6:be:1a:
                    94:4c:af:02:36:a5:f4:0b:bf:fd:3b:36:e3:3c:21:
                    02:ce:4a:a4:3a:b0:96:3c:96:ed:e7:66:81:b4:ef:
                    61:ea:b5:e7:42:2e:de:db:73:19:82:47:42:bd:26:
                    8e:09:bc:0a:12:1f:78:9c:3a:b6:7c:32:3c:ca:e0:
                    f2:de:37:05:12:f9:44:0d:be:aa:ce:08:1d:27:f8:
                    b3:d2:f6:da:70:eb:8a:b1:96:38:16:8e:1d:63:d6:
                    74:1f:9c:37:0d:fa:95:68:1d:af:e6:69:0c:ed:b5:
                    04:f6:85:62:f3:e0:02:10:69:78:68:c2:46:df:7b:
                    77:b4:ed:ad:b6:4d:e5:c0:4f:cd:54:0d:40:66:b3:
                    e6:f2:94:48:85:23:e7:13:05:3c:eb:89:05:5b:61:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6D:DB:72:72:B8:45:51:69:CF:A7:B6:4E:15:66:E3:52:54:2B:AD
            X509v3 Authority Key Identifier:
                keyid:6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:52:ae:d2:a7:b6:41:ef:40:8b:96:fb:84:d1:89:33:be:
         b3:7c:22:e8:cd:df:db:96:63:e6:21:04:fb:33:a9:b2:82:36:
         df:db:ae:a9:82:f9:96:fa:d4:a9:dc:e1:d7:b8:38:74:a3:9c:
         be:7b:78:fa:a1:1e:60:d3:9c:65:ff:9c:f4:3c:84:12:91:11:
         0f:14:66:40:5e:19:d4:1e:b4:9c:b7:da:22:53:2c:10:c6:7b:
         b1:fe:44:48:e1:96:ad:95:24:dd:41:d5:73:4d:d3:f9:12:df:
         e6:f1:d0:9f:f6:f1:0a:d0:7f:74:91:18:36:0b:c1:fb:20:01:
         c0:d7:62:fe:d6:c7:26:78:61:1a:e2:79:af:d9:99:0d:ad:a7:
         b2:d4:d6:18:5a:cc:1e:bc:bc:1e:82:01:e0:a0:8e:85:44:4e:
         27:3a:dc:2b:16:6b:3a:6d:2d:69:3a:24:7d:3e:9d:25:80:6f:
         61:65:52:b6:d8:c5:86:86:6c:fa:22:9a:d9:80:1a:67:77:3d:
         12:8b:53:7e:00:29:fc:4f:98:c9:e0:c6:57:6b:43:45:2b:57:
         ad:a8:4b:b8:64:9c:c2:fc:7b:24:16:f6:a0:11:e8:da:8c:96:
         f2:2c:5f:94:29:11:65:54:57:8f:66:75:e7:54:58:73:2b:fb:
         65:ef:81:97
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUG9B1secLHWeDhGe007RETnREM5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQxNTdDOUYxMkIzODdGMTQ0ODlFMTY3MDlCNzkxODgz
N0NDNkQwRDAeFw0yNjA1MDMwMjQ5MDZaFw0yNzA1MDIwMjU0MDZaMDMxMTAvBgNV
BAMTKDYyNkREQjcyNzJCODQ1NTE2OUNGQTdCNjRFMTU2NkUzNTI1NDJCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAv2g5f+CNktDQvdYwCIppwTlY
kfdF/d6wV5Bl+INAhqK/Xil1TgMRD/NVZ/wS6+1w7mfQZ328RfBGMDs88VvJY28S
DuAs4W2+D3nNWUId9sjYBD2Kc0tQDxusStJdW7fnBUm/Qea+GpRMrwI2pfQLv/07
NuM8IQLOSqQ6sJY8lu3nZoG072HqtedCLt7bcxmCR0K9Jo4JvAoSH3icOrZ8MjzK
4PLeNwUS+UQNvqrOCB0n+LPS9tpw64qxljgWjh1j1nQfnDcN+pVoHa/maQzttQT2
hWLz4AIQaXhowkbfe3e07a22TeXAT81UDUBms+bylEiFI+cTBTzriQVbYbqfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYm3bcnK4RVFpz6e2ThVm41JUK60wHwYDVR0j
BBgwFoAUbRV8nxKzh/FEieFnCbeRiDfMbQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWEyYmZlOWEtMzgyMy00NGU5LTk3YzAtMjE5MWE1NmJhZmQzLzAvNkQxNTdDOUYx
MkIzODdGMTQ0ODlFMTY3MDlCNzkxODgzN0NDNkQwRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RDE1N0M5RjEyQjM4N0YxNDQ4OUUxNjcwOUI3OTE4ODM3Q0M2
RDBELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlhMmJmZTlhLTM4MjMtNDRlOS05
N2MwLTIxOTFhNTZiYWZkMy8wLzMxMzAzMzJlMzYzMTJlMzIzMzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZz3rMA0GCSqG
SIb3DQEBCwUAA4IBAQA6UVKu0qe2Qe9Ai5b7hNGJM76zfCLozd/blmPmIQT7M6my
gjbf266pgvmW+tSp3OHXuDh0o5y+e3j6oR5g05xl/5z0PIQSkREPFGZAXhnUHrSc
t9oiUywQxnux/kRI4ZatlSTdQdVzTdP5Et/m8dCf9vEK0H90kRg2C8H7IAHA12L+
1scmeGEa4nmv2ZkNraey1NYYWswevLweggHgoI6FRE4nOtwrFms6bS1pOiR9Pp0l
gG9hZVK22MWGhmz6IprZgBpndz0Si1N+ACn8T5jJ4MZXa0NFK1etqEu4ZJzC/Hsk
FvagEejajJbyLF+UKRFlVFePZnXnVFhzK/tl74GX
-----END CERTIFICATE-----
Generated at Wed May 13 03:48:46 2026 by rpki-client