Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/3130332e332e34362e302f32342d3234203d3e203536323337.roa
File:                     3130332e332e34362e302f32342d3234203d3e203536323337.roa (raw, json)
Hash identifier:          RognJZgFxoaYfZ3q8iAEXmaMxQXncM9YyfOgmfWAQ3o=
Subject key identifier:   7E:27:EB:56:79:5F:41:02:E2:B9:D2:98:61:14:02:C4:F5:E8:EC:D3
Certificate issuer:       /CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
Certificate serial:       601BBB347F1DE3504FE1CAA206EA20A97C7246D8
Authority key identifier: DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/3130332e332e34362e302f32342d3234203d3e203536323337.roa
Signing time:             Sun 03 May 2026 02:55:08 +0000
ROA not before:           Sun 03 May 2026 02:50:08 +0000
ROA not after:            Sun 02 May 2027 02:55:08 +0000
asID:                     56237
IP address blocks:        103.3.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl
                          rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1b:bb:34:7f:1d:e3:50:4f:e1:ca:a2:06:ea:20:a9:7c:72:46:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
        Validity
            Not Before: May  3 02:50:08 2026 GMT
            Not After : May  2 02:55:08 2027 GMT
        Subject: CN=7E27EB56795F4102E2B9D298611402C4F5E8ECD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:48:a4:e5:1f:bc:d4:16:8b:f2:fb:c9:d7:
                    9b:fa:ca:23:a1:be:82:6c:9f:3b:31:aa:f9:b3:ff:
                    ab:d6:d6:08:55:79:a9:96:1a:bf:52:c1:9d:f5:30:
                    bd:6a:91:82:a3:19:d4:4d:d3:59:1f:8f:a2:1f:47:
                    2a:c3:44:7c:d1:5f:2b:d5:84:84:f2:04:c8:29:74:
                    0c:a1:83:56:80:16:25:51:8d:e6:80:99:03:66:f5:
                    93:71:ff:c8:88:ef:f1:a8:df:9b:c7:7a:43:56:11:
                    39:d5:3f:3a:5a:1a:04:01:31:ac:a0:8a:66:fc:c6:
                    c6:8a:b9:46:f9:5d:28:dd:be:c3:4b:c3:8e:0e:90:
                    c0:97:ab:fd:35:d6:e7:42:71:2d:20:ec:e7:1d:87:
                    30:92:43:22:a1:5b:49:5a:c0:17:4e:f6:a1:7b:1c:
                    33:f6:54:0a:63:08:05:be:60:7e:a4:83:98:fc:36:
                    83:d1:94:0d:d8:17:35:ae:d9:09:fb:0d:c1:99:cb:
                    19:d4:a2:a1:42:77:dc:e0:2f:68:c5:0b:a9:2e:bf:
                    11:d4:7f:29:2b:3b:04:3e:2d:ee:2d:7c:a5:b0:fd:
                    b0:7b:78:da:29:3a:59:8b:6e:57:1a:e0:f4:19:b6:
                    4b:f3:17:2b:41:41:62:e3:77:a0:fa:e6:4a:0b:ec:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:27:EB:56:79:5F:41:02:E2:B9:D2:98:61:14:02:C4:F5:E8:EC:D3
            X509v3 Authority Key Identifier:
                keyid:DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/3130332e332e34362e302f32342d3234203d3e203536323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:cc:08:d5:12:91:e8:67:13:23:6c:97:8f:f3:00:57:56:ff:
         04:0d:0d:f9:27:9b:89:03:45:6e:16:74:e8:20:be:b4:a8:9a:
         e7:ea:d7:9c:dc:69:69:53:b6:4a:6c:4d:f6:df:17:b7:be:8d:
         ea:64:3c:ff:51:0f:70:92:e7:95:ce:05:ad:37:c9:6b:7b:5a:
         66:7d:2a:62:0c:8b:76:93:d8:53:26:23:82:54:cc:96:61:24:
         2f:e1:c1:17:77:c4:2d:32:c0:7f:55:80:21:9c:f6:0d:a6:bc:
         cf:49:06:89:8f:2c:65:74:8c:0c:16:a5:15:b3:d3:75:d5:51:
         e5:ea:2f:03:93:83:1c:2b:60:5a:ef:c2:74:3f:f4:49:81:1a:
         90:36:74:0e:7b:ba:51:d3:2f:16:53:fa:a7:ae:b9:50:d1:ce:
         77:c4:42:4e:0e:29:fc:cd:88:9f:69:90:9b:fd:8e:d4:63:8f:
         cd:e8:05:ca:dd:52:f2:3b:6f:92:d1:98:7e:b0:f8:89:ab:a9:
         09:e8:dd:03:60:19:fb:99:ba:d6:99:32:45:e6:24:c4:49:29:
         3f:69:9c:95:53:52:7b:48:b4:af:ca:89:6c:a8:37:2e:dd:77:
         72:4e:c9:6d:63:f7:cb:82:e2:97:76:7a:4b:47:88:50:f9:0d:
         96:4b:8b:61
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUYBu7NH8d41BP4cqiBuogqXxyRtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVF
OTZCOEJDNjAeFw0yNjA1MDMwMjUwMDhaFw0yNzA1MDIwMjU1MDhaMDMxMTAvBgNV
BAMTKDdFMjdFQjU2Nzk1RjQxMDJFMkI5RDI5ODYxMTQwMkM0RjVFOEVDRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlkik5R+81BaL8vvJ15v6yiOh
voJsnzsxqvmz/6vW1ghVeamWGr9SwZ31ML1qkYKjGdRN01kfj6IfRyrDRHzRXyvV
hITyBMgpdAyhg1aAFiVRjeaAmQNm9ZNx/8iI7/Go35vHekNWETnVPzpaGgQBMayg
imb8xsaKuUb5XSjdvsNLw44OkMCXq/011udCcS0g7OcdhzCSQyKhW0lawBdO9qF7
HDP2VApjCAW+YH6kg5j8NoPRlA3YFzWu2Qn7DcGZyxnUoqFCd9zgL2jFC6kuvxHU
fykrOwQ+Le4tfKWw/bB7eNopOlmLblca4PQZtkvzFytBQWLjd6D65koL7D5NAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUfifrVnlfQQLiudKYYRQCxPXo7NMwHwYDVR0j
BBgwFoAU32I5sQC7X4t1ctvtzarwhelri8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWZiZTEwZDEtZmU2NC00MzNmLWI1ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEw
MEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVFOTZCOEJDNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ERjYyMzlCMTAwQkI1RjhCNzU3MkRCRURDREFBRjA4NUU5NkI4
QkM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZiZTEwZDEtZmU2NC00MzNmLWI1
ZTgtMDllOGM3MDRlYzkxLzAvMzEzMDMzMmUzMzJlMzQzNjJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM1MzYzMjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnAy4wDQYJKoZIhvcNAQEL
BQADggEBACnMCNUSkehnEyNsl4/zAFdW/wQNDfknm4kDRW4WdOggvrSomufq15zc
aWlTtkpsTfbfF7e+jepkPP9RD3CS55XOBa03yWt7WmZ9KmIMi3aT2FMmI4JUzJZh
JC/hwRd3xC0ywH9VgCGc9g2mvM9JBomPLGV0jAwWpRWz03XVUeXqLwOTgxwrYFrv
wnQ/9EmBGpA2dA57ulHTLxZT+qeuuVDRznfEQk4OKfzNiJ9pkJv9jtRjj83oBcrd
UvI7b5LRmH6w+ImrqQno3QNgGfuZutaZMkXmJMRJKT9pnJVTUntItK/KiWyoNy7d
d3JOyW1j98uC4pd2ektHiFD5DZZLi2E=
-----END CERTIFICATE-----
Generated at Wed May 13 02:27:14 2026 by rpki-client