Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134342e302f32332d3234203d3e2034373631.roa
File:                     3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (raw, json)
Hash identifier:          WMt8uGFjDPg74NN6xDD4yix+o7SOuzqi5JHQbnLLFL0=
Subject key identifier:   7C:3F:9E:FB:51:FC:C5:49:D9:C7:13:02:C6:8C:B7:DA:87:E3:B5:5F
Certificate issuer:       /CN=B679ABD48A919D142B31732EEB7434BD0864B337
Certificate serial:       1B023FA81775BE84DA0911959702F0059898C395
Authority key identifier: B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134342e302f32332d3234203d3e2034373631.roa
Signing time:             Sun 03 May 2026 02:57:42 +0000
ROA not before:           Sun 03 May 2026 02:52:42 +0000
ROA not after:            Sun 02 May 2027 02:57:42 +0000
asID:                     4761
IP address blocks:        103.96.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
                          rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:02:3f:a8:17:75:be:84:da:09:11:95:97:02:f0:05:98:98:c3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B679ABD48A919D142B31732EEB7434BD0864B337
        Validity
            Not Before: May  3 02:52:42 2026 GMT
            Not After : May  2 02:57:42 2027 GMT
        Subject: CN=7C3F9EFB51FCC549D9C71302C68CB7DA87E3B55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:a3:a3:0a:34:c9:41:1c:b5:1f:69:99:70:
                    36:80:19:c2:ec:4d:0f:c0:9f:87:6c:e7:5f:ca:e1:
                    26:a3:f3:c5:21:bf:19:76:77:ca:c3:aa:cb:43:47:
                    33:ff:55:38:04:7f:ae:c0:ae:c2:44:f7:75:83:9f:
                    47:8c:00:7d:30:ca:00:e2:cf:73:3b:c5:b2:df:25:
                    a0:52:1f:8d:cd:66:da:93:e5:10:3b:62:64:81:68:
                    7d:dc:0b:8e:dd:30:58:39:4b:73:e3:92:06:72:c9:
                    a6:03:fd:81:15:12:b8:cf:64:f5:a2:40:0f:e1:06:
                    1c:90:5b:05:1b:6a:a8:03:34:6d:c3:f0:74:ef:d5:
                    42:0d:a7:51:48:9e:b3:42:b2:9a:c5:c9:de:26:03:
                    63:d1:b6:53:d2:d1:41:67:16:c2:13:72:4d:7f:f4:
                    41:6f:e6:17:3c:ed:8f:63:71:3f:d5:35:21:32:54:
                    2e:f4:48:56:1d:6c:e8:29:60:ca:44:02:c3:59:c9:
                    ae:fe:b5:12:86:13:bc:7a:88:c1:5a:d4:20:1c:33:
                    cb:b0:00:43:82:bb:17:29:d5:e0:5e:a2:59:b2:df:
                    7e:7b:63:08:c2:a1:86:b1:af:94:5e:a3:b4:85:d8:
                    08:ec:09:4b:9a:a4:07:78:e9:42:6f:c6:ef:6b:cc:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3F:9E:FB:51:FC:C5:49:D9:C7:13:02:C6:8C:B7:DA:87:E3:B5:5F
            X509v3 Authority Key Identifier:
                keyid:B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134342e302f32332d3234203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:b2:10:06:07:dc:96:a4:68:5f:e3:a7:26:9d:80:07:f1:cd:
         e8:25:ac:69:a1:43:54:cf:f9:a6:72:f4:b0:20:d6:96:08:54:
         b3:fb:59:bc:1b:9b:24:ff:27:da:e8:0d:5e:7e:12:1f:c0:12:
         0a:01:78:93:9c:3b:63:9c:84:57:74:22:64:3a:d8:b5:63:83:
         c0:7c:ab:1c:47:2e:12:60:b0:1b:d6:cf:9a:ef:ef:34:75:1a:
         1b:b3:f4:97:17:18:ec:b5:11:0b:00:bf:ef:a5:c1:07:01:75:
         6c:95:bd:a5:ef:c2:1f:00:74:58:5d:7e:19:27:bb:84:36:b8:
         13:c1:31:53:ea:61:e0:da:67:af:fa:60:1c:5c:fe:43:e7:a3:
         d0:a0:85:5e:6f:ed:e9:fe:8b:31:d6:5a:ae:cc:a4:41:99:9e:
         cb:ca:00:5b:7d:5b:d0:4d:39:ac:fd:13:c9:3b:e7:93:0a:22:
         21:a2:8d:3d:42:f0:1c:70:f3:0e:ce:41:74:d3:aa:1f:18:43:
         3b:f2:ea:a1:09:98:1b:e0:ca:dc:f1:24:70:4e:c7:01:fb:02:
         96:ad:32:35:81:1d:c1:49:0a:79:4d:17:f2:18:91:c2:f1:a0:
         e8:34:9f:53:f6:44:aa:89:05:9f:82:52:e9:91:0e:83:bb:c9:
         45:68:3d:2e
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGwI/qBd1voTaCRGVlwLwBZiYw5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY3OUFCRDQ4QTkxOUQxNDJCMzE3MzJFRUI3NDM0QkQw
ODY0QjMzNzAeFw0yNjA1MDMwMjUyNDJaFw0yNzA1MDIwMjU3NDJaMDMxMTAvBgNV
BAMTKDdDM0Y5RUZCNTFGQ0M1NDlEOUM3MTMwMkM2OENCN0RBODdFM0I1NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzb6OjCjTJQRy1H2mZcDaAGcLs
TQ/An4ds51/K4Saj88Uhvxl2d8rDqstDRzP/VTgEf67ArsJE93WDn0eMAH0wygDi
z3M7xbLfJaBSH43NZtqT5RA7YmSBaH3cC47dMFg5S3PjkgZyyaYD/YEVErjPZPWi
QA/hBhyQWwUbaqgDNG3D8HTv1UINp1FInrNCsprFyd4mA2PRtlPS0UFnFsITck1/
9EFv5hc87Y9jcT/VNSEyVC70SFYdbOgpYMpEAsNZya7+tRKGE7x6iMFa1CAcM8uw
AEOCuxcp1eBeolmy3357YwjCoYaxr5Reo7SF2AjsCUuapAd46UJvxu9rzBvtAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUfD+e+1H8xUnZxxMCxoy32ofjtV8wHwYDVR0j
BBgwFoAUtnmr1IqRnRQrMXMu63Q0vQhkszcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTgyNjFjMzctNTlhNS00MzY5LTkxZTUtNGIxMzY2MDEwYzZkLzAvQjY3OUFCRDQ4
QTkxOUQxNDJCMzE3MzJFRUI3NDM0QkQwODY0QjMzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNjc5QUJENDhBOTE5RDE0MkIzMTczMkVFQjc0MzRCRDA4NjRC
MzM3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E4MjYxYzM3LTU5YTUtNDM2OS05
MWU1LTRiMTM2NjAxMGM2ZC8wLzMxMzAzMzJlMzkzNjJlMzEzNDM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnYJAwDQYJKoZIhvcN
AQELBQADggEBAJ2yEAYH3JakaF/jpyadgAfxzeglrGmhQ1TP+aZy9LAg1pYIVLP7
WbwbmyT/J9roDV5+Eh/AEgoBeJOcO2OchFd0ImQ62LVjg8B8qxxHLhJgsBvWz5rv
7zR1Ghuz9JcXGOy1EQsAv++lwQcBdWyVvaXvwh8AdFhdfhknu4Q2uBPBMVPqYeDa
Z6/6YBxc/kPno9CghV5v7en+izHWWq7MpEGZnsvKAFt9W9BNOaz9E8k755MKIiGi
jT1C8Bxw8w7OQXTTqh8YQzvy6qEJmBvgytzxJHBOxwH7ApatMjWBHcFJCnlNF/IY
kcLxoOg0n1P2RKqJBZ+CUumRDoO7yUVoPS4=
-----END CERTIFICATE-----
Generated at Wed May 13 07:59:29 2026 by rpki-client