Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34342e302f32342d3234203d3e20313338383831.roa
File:                     3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (raw, json)
Hash identifier:          /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=
Subject key identifier:   60:5A:0F:B4:84:6B:17:0D:AD:F6:82:D0:BC:2E:CF:E4:85:02:59:C2
Certificate issuer:       /CN=94036675301DBECEA598F27C69DCB2391E3C2886
Certificate serial:       0E1FD3AA0D4F0E85DA4FC77E9D11E48EEA049E00
Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34342e302f32342d3234203d3e20313338383831.roa
Signing time:             Sun 03 May 2026 02:55:56 +0000
ROA not before:           Sun 03 May 2026 02:50:56 +0000
ROA not after:            Sun 02 May 2027 02:55:56 +0000
asID:                     138881
IP address blocks:        103.59.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
                          rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1f:d3:aa:0d:4f:0e:85:da:4f:c7:7e:9d:11:e4:8e:ea:04:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886
        Validity
            Not Before: May  3 02:50:56 2026 GMT
            Not After : May  2 02:55:56 2027 GMT
        Subject: CN=605A0FB4846B170DADF682D0BC2ECFE4850259C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:f8:88:27:db:5f:0b:ff:88:4d:ec:50:41:
                    e2:7c:66:1f:5c:26:03:82:2a:46:d4:40:58:5f:2f:
                    02:ad:01:a6:d2:b5:b1:09:f3:98:c0:32:0a:b6:c2:
                    e9:c5:03:74:d7:02:07:fb:55:ed:c7:c0:4a:e6:7d:
                    ea:f0:ed:3a:32:be:0c:66:00:2f:3b:19:5f:cd:41:
                    dc:9e:36:61:6e:5f:e9:ab:9c:74:5d:a6:8b:c7:fb:
                    bb:75:18:84:74:c0:78:28:ae:af:0b:e8:01:18:37:
                    dc:b8:d5:48:a5:f4:ec:0d:68:3d:3c:0b:ca:fb:69:
                    5c:92:81:02:e9:4c:64:c8:67:6d:68:5f:84:93:65:
                    c5:64:7e:c0:af:9f:55:e4:4d:2f:3e:6b:5c:21:51:
                    10:e1:e0:f1:48:94:b4:92:9f:fc:17:29:63:b7:a1:
                    31:52:08:d4:4d:ea:bc:56:7c:55:e8:d3:d6:f7:6c:
                    f5:0c:58:11:e8:89:75:e8:ca:f6:ba:09:cb:17:7c:
                    c6:13:d6:d4:c8:07:df:0c:c6:d8:af:e0:8d:5e:49:
                    1d:6f:81:69:3f:ab:12:1a:29:35:f9:f0:d6:89:3e:
                    9a:38:dd:45:10:a0:61:89:ad:6c:40:9d:43:86:c4:
                    f7:a7:ca:54:a7:f2:1b:7c:77:31:f1:dd:d3:2d:16:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:0F:B4:84:6B:17:0D:AD:F6:82:D0:BC:2E:CF:E4:85:02:59:C2
            X509v3 Authority Key Identifier:
                keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34342e302f32342d3234203d3e20313338383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:48:9a:21:cc:6a:f7:52:e3:27:65:6b:04:51:1a:5a:bc:
         2d:a3:60:ab:1d:db:d2:94:9d:0d:4e:5e:a7:98:be:1d:d2:ab:
         40:76:ec:3f:7f:68:09:d1:57:8a:b7:30:97:fc:2c:58:b7:e3:
         5c:3f:ef:0c:81:53:3b:80:fd:a8:98:0f:d7:d3:70:41:1e:a8:
         87:1e:1b:ea:97:4c:28:7b:42:c8:be:b3:83:71:c5:12:b3:f8:
         09:42:59:ca:af:a6:ad:55:82:c6:b0:01:66:fc:95:0e:29:a4:
         a3:cb:ff:83:c5:f4:5b:df:26:2f:7d:5e:4b:25:a0:ac:73:d8:
         8b:88:bb:5f:b8:2b:a0:85:ea:cd:47:51:e2:54:f6:b7:8f:55:
         f5:93:de:be:56:0b:cc:8a:e9:64:d8:2f:12:00:56:41:85:97:
         b9:45:88:c4:7c:7b:10:6b:1f:d6:be:39:65:13:44:d0:a8:29:
         0e:41:b1:bd:13:c5:28:f0:db:b8:e0:8b:4b:dc:96:ab:fa:95:
         ff:ef:42:80:6c:f1:d6:a9:7c:92:df:8b:5e:60:9d:d8:04:75:
         2f:91:53:94:08:40:23:29:a0:b1:c6:96:f6:62:a3:58:e0:50:
         2c:f6:21:8b:0a:de:fd:5c:60:0c:5e:3e:a2:bf:af:d6:67:84:
         de:f9:ba:ab
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDh/Tqg1PDoXaT8d+nRHkjuoEngAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkx
RTNDMjg4NjAeFw0yNjA1MDMwMjUwNTZaFw0yNzA1MDIwMjU1NTZaMDMxMTAvBgNV
BAMTKDYwNUEwRkI0ODQ2QjE3MERBREY2ODJEMEJDMkVDRkU0ODUwMjU5QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVUfiIJ9tfC/+ITexQQeJ8Zh9c
JgOCKkbUQFhfLwKtAabStbEJ85jAMgq2wunFA3TXAgf7Ve3HwErmferw7Toyvgxm
AC87GV/NQdyeNmFuX+mrnHRdpovH+7t1GIR0wHgorq8L6AEYN9y41Uil9OwNaD08
C8r7aVySgQLpTGTIZ21oX4STZcVkfsCvn1XkTS8+a1whURDh4PFIlLSSn/wXKWO3
oTFSCNRN6rxWfFXo09b3bPUMWBHoiXXoyva6CcsXfMYT1tTIB98Mxtiv4I1eSR1v
gWk/qxIaKTX58NaJPpo43UUQoGGJrWxAnUOGxPenylSn8ht8dzHx3dMtFhBfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUYFoPtIRrFw2t9oLQvC7P5IUCWcIwHwYDVR0j
BBgwFoAUlANmdTAdvs6lmPJ8adyyOR48KIYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTE3NTk4ZTQtMjA2NC00ZWNiLTk4ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUz
MDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkxRTNDMjg4Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NDAzNjY3NTMwMURCRUNFQTU5OEYyN0M2OURDQjIzOTFFM0My
ODg2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExNzU5OGU0LTIwNjQtNGVjYi05
OGY2LWIyNTlhNzQ5OTZhMS8wLzMxMzAzMzJlMzUzOTJlMzQzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzODM4MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc7LDANBgkqhkiG
9w0BAQsFAAOCAQEALXpImiHMavdS4ydlawRRGlq8LaNgqx3b0pSdDU5ep5i+HdKr
QHbsP39oCdFXircwl/wsWLfjXD/vDIFTO4D9qJgP19NwQR6ohx4b6pdMKHtCyL6z
g3HFErP4CUJZyq+mrVWCxrABZvyVDimko8v/g8X0W98mL31eSyWgrHPYi4i7X7gr
oIXqzUdR4lT2t49V9ZPevlYLzIrpZNgvEgBWQYWXuUWIxHx7EGsf1r45ZRNE0Kgp
DkGxvRPFKPDbuOCLS9yWq/qV/+9CgGzx1ql8kt+LXmCd2AR1L5FTlAhAIymgscaW
9mKjWOBQLPYhiwre/VxgDF4+or+v1meE3vm6qw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:39:37 2026 by rpki-client