Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
File:                     3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier:          l0tvorHSkUZlt4zaL3Dl67F8jKKatHb3Uo7qW6XsBFY=
Subject key identifier:   6D:7D:56:6E:21:06:44:8A:71:2D:7F:4F:7E:AB:B5:C0:BB:3B:3C:E7
Certificate issuer:       /CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B
Certificate serial:       706A66C49DC53E8AF9B7A5BB786AF98A5494C7A6
Authority key identifier: 4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
Signing time:             Sun 03 May 2026 02:56:09 +0000
ROA not before:           Sun 03 May 2026 02:51:09 +0000
ROA not after:            Sun 02 May 2027 02:56:09 +0000
asID:                     141126
IP address blocks:        103.172.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl
                          rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6a:66:c4:9d:c5:3e:8a:f9:b7:a5:bb:78:6a:f9:8a:54:94:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B
        Validity
            Not Before: May  3 02:51:09 2026 GMT
            Not After : May  2 02:56:09 2027 GMT
        Subject: CN=6D7D566E2106448A712D7F4F7EABB5C0BB3B3CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:17:b7:d2:6a:81:19:bc:d7:fe:d7:4a:b1:
                    ed:1a:56:4f:06:da:7e:f6:e3:31:2f:f9:c2:4e:30:
                    c6:64:6f:97:ec:7e:11:9d:59:05:73:ae:c0:81:ff:
                    df:ac:08:8a:82:55:01:1e:fb:ca:22:e4:43:62:d4:
                    ba:87:98:6b:5c:fa:31:9e:9d:db:eb:2d:80:67:c6:
                    77:f6:db:5d:93:f0:60:b9:19:de:b2:a6:7b:6e:6b:
                    de:07:74:c7:6b:80:d5:0f:a2:c4:a0:75:39:18:1f:
                    48:b3:35:52:2f:fb:ec:ed:81:84:de:8a:19:7b:40:
                    de:eb:96:21:e5:bd:1c:41:0e:8f:4d:aa:4b:f5:14:
                    da:da:92:7e:98:af:bc:61:96:5f:ca:4f:0d:04:db:
                    a8:52:a2:1c:71:6c:37:ba:ea:cb:5e:14:ef:3a:6d:
                    ef:8b:38:ac:8e:de:04:fa:82:54:77:87:30:5a:f6:
                    65:b4:25:40:88:76:2e:f2:fb:a9:3e:57:de:2f:ad:
                    15:0f:34:18:29:52:1e:e5:b7:be:26:ff:96:ec:23:
                    dc:17:f0:01:33:31:9c:89:09:07:78:68:09:0f:7a:
                    8e:fa:5c:d0:41:e3:94:22:28:54:1d:b5:e6:b4:cf:
                    3d:76:ce:90:2f:e6:17:2f:df:7f:d5:e7:a0:96:4f:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7D:56:6E:21:06:44:8A:71:2D:7F:4F:7E:AB:B5:C0:BB:3B:3C:E7
            X509v3 Authority Key Identifier:
                keyid:4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e7:58:4e:f3:dc:3e:8e:64:b3:08:34:b7:42:ef:a7:8c:62:
         3c:2a:8c:3c:02:25:24:02:60:1f:92:6d:e2:8b:04:5c:07:f9:
         01:c3:9c:08:61:a0:88:82:0e:4a:7c:a6:34:d7:fb:22:2c:29:
         cb:b8:74:5d:d9:e5:c2:e2:04:f2:9c:54:1e:a8:2c:ae:03:3b:
         09:97:f1:1c:37:54:8f:2d:b9:1a:d5:55:a1:22:db:19:66:f1:
         94:18:31:8d:81:24:71:60:d7:81:27:be:0f:87:29:a6:a6:8e:
         db:d5:31:ce:45:67:cf:28:0b:12:78:c8:44:6e:d8:07:86:b4:
         d1:25:6a:66:0d:80:fd:a3:62:e0:7b:01:b9:d7:ce:52:06:3d:
         70:48:6b:c9:bb:4d:60:5a:1a:38:78:82:5d:e6:95:92:ca:ad:
         e2:fe:11:81:22:77:66:b2:62:06:1c:92:1e:b3:3c:6d:1a:21:
         62:54:ad:9d:6a:20:53:85:bb:4c:76:ed:1a:14:8b:30:94:02:
         21:29:07:6e:76:bf:e7:3f:ff:cc:b6:af:77:37:8e:ef:4c:97:
         28:35:94:de:0e:a1:24:3d:69:a9:6d:4e:ae:e1:9c:f3:1b:06:
         64:f7:8f:95:c5:e4:60:b9:9f:cf:55:e8:f6:0b:c2:43:4c:86:
         bd:c8:ca:d1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUcGpmxJ3FPor5t6W7eGr5ilSUx6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlD
MTk4NzA0QjAeFw0yNjA1MDMwMjUxMDlaFw0yNzA1MDIwMjU2MDlaMDMxMTAvBgNV
BAMTKDZEN0Q1NjZFMjEwNjQ0OEE3MTJEN0Y0RjdFQUJCNUMwQkIzQjNDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbEhe30mqBGbzX/tdKse0aVk8G
2n724zEv+cJOMMZkb5fsfhGdWQVzrsCB/9+sCIqCVQEe+8oi5ENi1LqHmGtc+jGe
ndvrLYBnxnf2212T8GC5Gd6ypntua94HdMdrgNUPosSgdTkYH0izNVIv++ztgYTe
ihl7QN7rliHlvRxBDo9Nqkv1FNrakn6Yr7xhll/KTw0E26hSohxxbDe66steFO86
be+LOKyO3gT6glR3hzBa9mW0JUCIdi7y+6k+V94vrRUPNBgpUh7lt74m/5bsI9wX
8AEzMZyJCQd4aAkPeo76XNBB45QiKFQdtea0zz12zpAv5hcv33/V56CWTyWhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUbX1WbiEGRIpxLX9Pfqu1wLs7POcwHwYDVR0j
BBgwFoAUToV59GzKUcpWzZw+oaOhKcGYcEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTM1MjI0YzYtMzM0ZC00ZjNkLTk4MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2
Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlDMTk4NzA0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RTg1NzlGNDZDQ0E1MUNBNTZDRDlDM0VBMUEzQTEyOUMxOTg3
MDRCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EzNTIyNGM2LTMzNGQtNGYzZC05
ODM3LTFiYWNjYTVhMDIyYi8wLzMxMzAzMzJlMzEzNzMyMmUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMTMxMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGesATANBgkqhkiG
9w0BAQsFAAOCAQEAmedYTvPcPo5kswg0t0Lvp4xiPCqMPAIlJAJgH5Jt4osEXAf5
AcOcCGGgiIIOSnymNNf7Iiwpy7h0XdnlwuIE8pxUHqgsrgM7CZfxHDdUjy25GtVV
oSLbGWbxlBgxjYEkcWDXgSe+D4cppqaO29UxzkVnzygLEnjIRG7YB4a00SVqZg2A
/aNi4HsBudfOUgY9cEhrybtNYFoaOHiCXeaVksqt4v4RgSJ3ZrJiBhySHrM8bRoh
YlStnWogU4W7THbtGhSLMJQCISkHbna/5z//zLavdzeO70yXKDWU3g6hJD1pqW1O
ruGc8xsGZPePlcXkYLmfz1Xo9gvCQ0yGvcjK0Q==
-----END CERTIFICATE-----
Generated at Wed May 13 06:27:17 2026 by rpki-client