Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa
File:                     3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (raw, json)
Hash identifier:          70NFz1U2se9VZLmxfjrFbhrAeSmQtExL3XMvYrlX6c8=
Subject key identifier:   84:F5:0E:6A:89:B1:7D:77:AC:87:BC:BC:AE:EA:D1:BC:5B:B1:BF:84
Certificate issuer:       /CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8
Certificate serial:       2B81B9C38E55F09E15AFE9EACD8B52D3794253C8
Authority key identifier: FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa
Signing time:             Sun 03 May 2026 02:56:47 +0000
ROA not before:           Sun 03 May 2026 02:51:47 +0000
ROA not after:            Sun 02 May 2027 02:56:47 +0000
asID:                     141128
IP address blocks:        103.107.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl
                          rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:81:b9:c3:8e:55:f0:9e:15:af:e9:ea:cd:8b:52:d3:79:42:53:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8
        Validity
            Not Before: May  3 02:51:47 2026 GMT
            Not After : May  2 02:56:47 2027 GMT
        Subject: CN=84F50E6A89B17D77AC87BCBCAEEAD1BC5BB1BF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:4d:39:06:be:34:91:2a:0a:02:e3:15:e0:
                    54:d9:24:88:39:f4:1f:af:f3:df:71:0a:45:6b:e8:
                    27:c4:10:e0:d4:f9:39:ac:bc:9d:3a:26:33:6f:25:
                    4c:58:33:94:e6:83:ec:9d:41:1d:47:95:34:9d:e7:
                    87:5b:9d:ca:42:a9:f7:1c:7b:b7:38:24:8a:cf:a6:
                    2f:3c:93:45:5d:f2:02:37:ee:46:e8:23:97:4b:a3:
                    50:4e:79:95:8c:6e:c8:3f:6a:f9:ba:94:03:1e:b8:
                    9a:c3:1c:46:56:8d:8d:55:38:2a:b6:73:72:83:47:
                    90:12:48:72:a5:15:b2:8a:0f:9c:03:e6:06:37:6a:
                    9b:f7:61:e9:c2:a0:71:55:5a:bb:19:a6:e5:35:b8:
                    6e:31:2d:ef:6f:dc:9c:3d:e9:c1:db:f5:c4:da:cf:
                    c4:0e:d6:19:fe:94:cd:4a:c2:b2:b5:b6:e9:a8:25:
                    96:20:d7:a5:58:a9:1c:09:17:1e:ef:22:f6:9e:da:
                    fa:ab:33:cf:e3:52:4e:66:09:99:24:56:19:8d:58:
                    c1:d2:64:45:bd:25:5c:e0:be:20:bb:b9:ae:57:58:
                    d2:4c:8e:0c:e0:fd:c1:ae:28:ad:f2:af:ae:59:ed:
                    25:96:41:40:fe:9f:a8:7d:dd:92:36:40:49:9d:ad:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F5:0E:6A:89:B1:7D:77:AC:87:BC:BC:AE:EA:D1:BC:5B:B1:BF:84
            X509v3 Authority Key Identifier:
                keyid:FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:12:1c:0a:58:63:12:6f:42:b2:2b:4c:33:a4:48:6c:d4:dd:
         d0:9c:93:f7:b6:da:cc:5c:48:51:dc:88:05:6d:65:c6:56:41:
         a7:8d:33:f2:cf:17:1a:84:c8:55:a3:57:d2:3e:f0:6a:10:0f:
         03:62:59:f7:67:78:a3:9b:04:b8:66:fc:94:b4:62:a5:72:0d:
         d3:25:cd:d0:41:8d:45:eb:68:f5:89:79:48:42:19:8a:d5:0b:
         68:34:35:f0:b9:8b:9d:8d:bb:4c:90:bf:34:28:bf:a6:bc:09:
         bc:8d:c7:5f:dc:35:ef:0d:94:89:df:9f:c0:39:90:3c:65:f7:
         cc:34:64:54:19:2b:03:29:5d:7d:74:26:5f:5a:40:11:68:00:
         ae:86:f8:92:9f:5d:18:d9:fa:33:f8:15:f6:27:55:b4:7f:3e:
         b0:a4:33:64:b0:82:56:c2:d8:4a:3e:25:e9:59:9b:32:89:05:
         0b:1d:64:bd:51:95:32:6f:04:d1:c6:12:81:00:e9:19:77:4a:
         57:ec:e7:6c:59:cc:94:09:88:29:20:75:db:ff:b3:76:e0:10:
         f5:ac:00:9a:5e:12:86:b9:df:d4:2b:73:36:6d:f3:f0:35:f1:
         45:c4:4e:82:5c:fa:3d:52:a5:62:28:81:bd:6a:9a:ac:40:2e:
         33:82:4a:be
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUK4G5w45V8J4Vr+nqzYtS03lCU8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgxODRF
RjU2RTJGODAeFw0yNjA1MDMwMjUxNDdaFw0yNzA1MDIwMjU2NDdaMDMxMTAvBgNV
BAMTKDg0RjUwRTZBODlCMTdENzdBQzg3QkNCQ0FFRUFEMUJDNUJCMUJGODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCep005Br40kSoKAuMV4FTZJIg5
9B+v899xCkVr6CfEEODU+TmsvJ06JjNvJUxYM5Tmg+ydQR1HlTSd54dbncpCqfcc
e7c4JIrPpi88k0Vd8gI37kboI5dLo1BOeZWMbsg/avm6lAMeuJrDHEZWjY1VOCq2
c3KDR5ASSHKlFbKKD5wD5gY3apv3YenCoHFVWrsZpuU1uG4xLe9v3Jw96cHb9cTa
z8QO1hn+lM1KwrK1tumoJZYg16VYqRwJFx7vIvae2vqrM8/jUk5mCZkkVhmNWMHS
ZEW9JVzgviC7ua5XWNJMjgzg/cGuKK3yr65Z7SWWQUD+n6h93ZI2QEmdreh/AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUhPUOaomxfXesh7y8rurRvFuxv4QwHwYDVR0j
BBgwFoAU/ATBvM+qC7IdZ+bMscyBhO9W4vgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTVkZWNhODItODlhYi00NTgyLThlODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkND
RkFBMEJCMjFENjdFNkNDQjFDQzgxODRFRjU2RTJGOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQzA0QzFCQ0NGQUEwQkIyMUQ2N0U2Q0NCMUNDODE4NEVGNTZF
MkY4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E1ZGVjYTgyLTg5YWItNDU4Mi04
ZTgyLThlYzhhNTFmZWM0Mi8wLzMxMzAzMzJlMzEzMDM3MmUzMjMwMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABna84wDQYJ
KoZIhvcNAQELBQADggEBAMESHApYYxJvQrIrTDOkSGzU3dCck/e22sxcSFHciAVt
ZcZWQaeNM/LPFxqEyFWjV9I+8GoQDwNiWfdneKObBLhm/JS0YqVyDdMlzdBBjUXr
aPWJeUhCGYrVC2g0NfC5i52Nu0yQvzQov6a8CbyNx1/cNe8NlInfn8A5kDxl98w0
ZFQZKwMpXX10Jl9aQBFoAK6G+JKfXRjZ+jP4FfYnVbR/PrCkM2SwglbC2Eo+JelZ
mzKJBQsdZL1RlTJvBNHGEoEA6Rl3Slfs52xZzJQJiCkgddv/s3bgEPWsAJpeEoa5
39QrczZt8/A18UXEToJc+j1SpWIogb1qmqxALjOCSr4=
-----END CERTIFICATE-----
Generated at Wed May 13 03:55:36 2026 by rpki-client