Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134342e302f32332d3234203d3e203137393232.roa
File:                     3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (raw, json)
Hash identifier:          19cvxsjH0jmLxb1jG1lOK+sOgukmzTDGlXRjxR2U/wQ=
Subject key identifier:   A7:98:22:B7:FD:A4:FA:D6:77:63:41:64:0C:25:43:D6:4B:F4:F5:29
Certificate issuer:       /CN=B679ABD48A919D142B31732EEB7434BD0864B337
Certificate serial:       6FBE4E78463A9C20CB2BA94ED78205BAC56B742F
Authority key identifier: B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134342e302f32332d3234203d3e203137393232.roa
Signing time:             Sun 03 May 2026 02:57:41 +0000
ROA not before:           Sun 03 May 2026 02:52:41 +0000
ROA not after:            Sun 02 May 2027 02:57:41 +0000
asID:                     17922
IP address blocks:        103.96.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
                          rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:be:4e:78:46:3a:9c:20:cb:2b:a9:4e:d7:82:05:ba:c5:6b:74:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B679ABD48A919D142B31732EEB7434BD0864B337
        Validity
            Not Before: May  3 02:52:41 2026 GMT
            Not After : May  2 02:57:41 2027 GMT
        Subject: CN=A79822B7FDA4FAD6776341640C2543D64BF4F529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:8c:69:0d:2b:8b:30:23:a1:a0:bb:c2:79:
                    0f:5c:b9:16:d8:2d:af:d8:4d:e4:fa:b3:03:73:82:
                    71:0b:b4:d1:58:79:37:4a:85:61:bc:43:71:c6:8c:
                    b6:a3:21:95:f7:e0:d8:9f:e5:47:b4:4e:92:3f:4e:
                    14:18:f2:af:1e:6a:07:a2:da:a0:73:4b:3a:52:70:
                    a6:9e:7d:33:9a:73:8c:71:c1:df:10:7c:ee:7f:94:
                    d8:25:38:9b:42:73:e5:a4:40:d1:d3:b7:05:7e:a3:
                    af:e5:21:30:20:25:ac:0a:6f:2c:a5:7e:95:73:56:
                    e0:73:0e:3e:65:92:ca:39:be:19:8d:e9:92:f8:b2:
                    de:a8:0e:60:d9:4f:06:37:67:21:35:d0:34:89:4a:
                    1e:32:b2:c9:6e:e7:1a:17:14:05:4e:88:f1:a6:9a:
                    ed:19:0f:01:b5:89:d1:0b:84:d7:ff:52:db:24:fe:
                    b3:97:e8:c5:71:46:f8:ec:0a:46:8c:0b:61:68:22:
                    f6:bb:ee:02:be:5d:8f:36:60:25:f0:c4:56:1a:91:
                    ab:94:b2:84:d9:ee:77:16:e1:2b:bd:93:45:3e:77:
                    47:20:d0:45:4d:38:8e:06:60:65:1d:f6:50:b0:4d:
                    a2:f5:4a:fa:a0:50:94:29:c9:03:f6:f7:f7:16:7e:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:98:22:B7:FD:A4:FA:D6:77:63:41:64:0C:25:43:D6:4B:F4:F5:29
            X509v3 Authority Key Identifier:
                keyid:B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134342e302f32332d3234203d3e203137393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:b6:b6:86:6b:d8:1b:f0:73:7c:50:92:d9:52:1d:d8:fd:
         6f:ef:53:44:5c:5f:40:87:58:5c:90:af:44:f1:ff:17:26:b2:
         3c:95:7d:9c:0b:b4:ff:ae:39:5c:d9:e6:52:31:c7:1d:bb:12:
         4f:bf:4a:61:e8:00:6c:46:8f:bf:27:c0:e8:d9:4d:19:ea:d6:
         0d:21:85:2a:dd:fa:25:54:da:6c:c6:d6:25:6a:4d:da:2c:ee:
         cb:48:f9:8b:74:fe:0a:8b:bb:ac:ac:92:0c:16:39:8e:42:1b:
         32:c2:8f:35:51:b6:3a:b1:72:21:da:02:16:f4:95:a4:98:8b:
         07:de:51:6d:d0:79:59:53:3e:ce:5d:df:04:5a:1b:c4:f8:f3:
         7a:93:0f:61:39:09:b0:ef:3e:f0:24:c0:65:c8:ce:7f:42:7d:
         b6:26:cb:fd:99:48:90:3c:dd:06:b5:49:38:b3:4e:17:7f:c1:
         ec:0c:1b:68:e1:ae:0a:8c:31:a9:ee:12:db:2f:d2:2b:cf:16:
         7b:04:2c:e6:12:7e:45:21:ed:d5:9d:5e:b9:91:82:2a:14:27:
         32:59:bd:f6:df:3c:5e:a4:dd:bd:d5:26:61:ce:fd:6c:4f:d1:
         ed:90:57:6c:69:90:63:bf:14:c2:04:e6:71:f2:0b:53:b8:16:
         4e:00:73:e3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUb75OeEY6nCDLK6lO14IFusVrdC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY3OUFCRDQ4QTkxOUQxNDJCMzE3MzJFRUI3NDM0QkQw
ODY0QjMzNzAeFw0yNjA1MDMwMjUyNDFaFw0yNzA1MDIwMjU3NDFaMDMxMTAvBgNV
BAMTKEE3OTgyMkI3RkRBNEZBRDY3NzYzNDE2NDBDMjU0M0Q2NEJGNEY1MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzC4xpDSuLMCOhoLvCeQ9cuRbY
La/YTeT6swNzgnELtNFYeTdKhWG8Q3HGjLajIZX34Nif5Ue0TpI/ThQY8q8eagei
2qBzSzpScKaefTOac4xxwd8QfO5/lNglOJtCc+WkQNHTtwV+o6/lITAgJawKbyyl
fpVzVuBzDj5lkso5vhmN6ZL4st6oDmDZTwY3ZyE10DSJSh4ysslu5xoXFAVOiPGm
mu0ZDwG1idELhNf/Utsk/rOX6MVxRvjsCkaMC2FoIva77gK+XY82YCXwxFYakauU
soTZ7ncW4Su9k0U+d0cg0EVNOI4GYGUd9lCwTaL1SvqgUJQpyQP29/cWftIjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUp5git/2k+tZ3Y0FkDCVD1kv09SkwHwYDVR0j
BBgwFoAUtnmr1IqRnRQrMXMu63Q0vQhkszcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTgyNjFjMzctNTlhNS00MzY5LTkxZTUtNGIxMzY2MDEwYzZkLzAvQjY3OUFCRDQ4
QTkxOUQxNDJCMzE3MzJFRUI3NDM0QkQwODY0QjMzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNjc5QUJENDhBOTE5RDE0MkIzMTczMkVFQjc0MzRCRDA4NjRC
MzM3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E4MjYxYzM3LTU5YTUtNDM2OS05
MWU1LTRiMTM2NjAxMGM2ZC8wLzMxMzAzMzJlMzkzNjJlMzEzNDM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNzM5MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdgkDANBgkqhkiG
9w0BAQsFAAOCAQEAIPW2toZr2Bvwc3xQktlSHdj9b+9TRFxfQIdYXJCvRPH/Fyay
PJV9nAu0/645XNnmUjHHHbsST79KYegAbEaPvyfA6NlNGerWDSGFKt36JVTabMbW
JWpN2izuy0j5i3T+Cou7rKySDBY5jkIbMsKPNVG2OrFyIdoCFvSVpJiLB95RbdB5
WVM+zl3fBFobxPjzepMPYTkJsO8+8CTAZcjOf0J9tibL/ZlIkDzdBrVJOLNOF3/B
7AwbaOGuCowxqe4S2y/SK88WewQs5hJ+RSHt1Z1euZGCKhQnMlm99t88XqTdvdUm
Yc79bE/R7ZBXbGmQY78UwgTmcfILU7gWTgBz4w==
-----END CERTIFICATE-----
Generated at Wed May 13 12:02:40 2026 by rpki-client