Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/3130332e37392e35302e302f32332d3233203d3e20313337323839.roa
File:                     3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (raw, json)
Hash identifier:          2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=
Subject key identifier:   07:B5:40:7B:2E:22:20:29:6E:AE:51:6A:C1:84:69:B2:51:37:0D:5C
Certificate issuer:       /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3
Certificate serial:       18CE9DF2952CC83230108AB26027276C92712527
Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/3130332e37392e35302e302f32332d3233203d3e20313337323839.roa
Signing time:             Sun 03 May 2026 02:58:32 +0000
ROA not before:           Sun 03 May 2026 02:53:32 +0000
ROA not after:            Sun 02 May 2027 02:58:32 +0000
asID:                     137289
IP address blocks:        103.79.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl
                          rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ce:9d:f2:95:2c:c8:32:30:10:8a:b2:60:27:27:6c:92:71:25:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3
        Validity
            Not Before: May  3 02:53:32 2026 GMT
            Not After : May  2 02:58:32 2027 GMT
        Subject: CN=07B5407B2E2220296EAE516AC18469B251370D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:0e:06:da:97:69:00:19:d3:b7:28:7a:d0:
                    67:e8:a9:db:2d:2e:1b:2d:05:91:95:dc:90:a6:6b:
                    0b:79:0e:45:fb:79:41:e8:cb:e9:c7:e0:4b:ca:73:
                    65:34:77:55:86:fc:df:fa:84:45:57:f6:03:14:6e:
                    26:d0:f3:05:57:28:91:c9:bf:65:34:8e:19:b2:67:
                    fe:3b:49:c0:49:78:14:43:c6:7e:69:24:67:75:ad:
                    8b:6f:0c:66:9e:57:e4:f5:27:42:e5:e6:60:5f:9d:
                    9c:b6:c7:ad:62:62:0e:74:12:15:30:08:8f:c9:4e:
                    55:ec:b1:a1:52:00:d4:a0:37:3a:7a:1f:50:b4:2a:
                    2e:d7:ad:0e:ca:0c:bc:1c:10:91:41:d3:8a:59:c4:
                    93:34:78:6f:fb:31:d9:d7:3b:98:bf:c4:43:c5:eb:
                    90:d5:2a:3e:b6:88:40:50:82:db:fb:64:39:27:7a:
                    1e:e9:e0:a6:01:95:31:c9:27:9d:17:36:35:8f:a0:
                    a6:de:f5:f9:73:41:73:9b:6e:d8:f9:20:b3:ac:43:
                    a2:1e:12:7f:6f:46:af:cb:73:7f:44:02:52:1f:ca:
                    01:d5:e9:00:50:e8:e9:fc:d9:87:11:ed:89:b4:89:
                    2f:5c:ca:bf:de:f4:91:1e:f2:4a:da:a7:07:99:79:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B5:40:7B:2E:22:20:29:6E:AE:51:6A:C1:84:69:B2:51:37:0D:5C
            X509v3 Authority Key Identifier:
                keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/3130332e37392e35302e302f32332d3233203d3e20313337323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:a4:eb:5d:5d:d7:57:d7:b4:a0:ff:2c:2e:40:af:f1:7e:ed:
         ae:10:48:22:86:32:89:34:12:fa:ca:25:65:24:38:e2:01:df:
         41:fa:e9:fb:ef:ed:eb:05:0d:d1:3d:b4:f5:bf:e0:4e:ea:0c:
         fe:bb:57:8c:35:b3:1e:ef:67:02:75:bc:97:19:d6:b5:af:8a:
         62:a3:c1:ac:30:bc:ca:66:24:28:62:2b:54:89:cf:30:b8:36:
         37:91:a8:7b:96:ed:28:b0:10:de:c0:52:47:65:d9:67:03:17:
         7c:81:c8:10:ab:5a:33:9a:ce:aa:b2:37:8b:16:db:c9:81:42:
         0d:a5:4b:f3:58:38:fa:08:02:2e:c2:c2:05:ce:99:be:c6:a9:
         da:69:91:f7:81:c1:fb:6d:24:e3:11:e2:9c:bf:18:e7:8e:4d:
         9f:29:92:84:e6:db:ab:9b:ae:ea:50:9e:ce:85:57:49:39:15:
         25:bb:60:7c:4b:46:af:73:5a:a8:4a:e4:3f:97:3d:fa:b2:8d:
         ec:3d:cf:a4:69:ed:c4:0e:71:70:83:30:83:5c:b3:21:bb:c1:
         1e:5b:68:07:51:11:16:71:c7:b0:c2:ea:88:75:2a:fc:4b:a9:
         b4:ab:a2:f5:a5:44:c2:1b:44:f7:fd:49:d1:cc:28:51:fb:53:
         f0:b6:fb:de
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGM6d8pUsyDIwEIqyYCcnbJJxJScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0
OEIwNDdFMzAeFw0yNjA1MDMwMjUzMzJaFw0yNzA1MDIwMjU4MzJaMDMxMTAvBgNV
BAMTKDA3QjU0MDdCMkUyMjIwMjk2RUFFNTE2QUMxODQ2OUIyNTEzNzBENUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kg4G2pdpABnTtyh60Gfoqdst
LhstBZGV3JCmawt5DkX7eUHoy+nH4EvKc2U0d1WG/N/6hEVX9gMUbibQ8wVXKJHJ
v2U0jhmyZ/47ScBJeBRDxn5pJGd1rYtvDGaeV+T1J0Ll5mBfnZy2x61iYg50EhUw
CI/JTlXssaFSANSgNzp6H1C0Ki7XrQ7KDLwcEJFB04pZxJM0eG/7MdnXO5i/xEPF
65DVKj62iEBQgtv7ZDkneh7p4KYBlTHJJ50XNjWPoKbe9flzQXObbtj5ILOsQ6Ie
En9vRq/Lc39EAlIfygHV6QBQ6On82YcR7Ym0iS9cyr/e9JEe8krapweZeXMHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUB7VAey4iIClurlFqwYRpslE3DVwwHwYDVR0j
BBgwFoAUmLFuyIQwDH8unlOkpkesZ0iwR+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWJjYWVhM2ItYmQ3Zi00ODFhLTliYzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4
NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0OEIwNDdFMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OEIxNkVDODg0MzAwQzdGMkU5RTUzQTRBNjQ3QUM2NzQ4QjA0
N0UzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FiY2FlYTNiLWJkN2YtNDgxYS05
YmM3LWFhMTYwZDA1ZDI2Mi8wLzMxMzAzMzJlMzczOTJlMzUzMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzMzNzMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdPMjANBgkqhkiG
9w0BAQsFAAOCAQEAIaTrXV3XV9e0oP8sLkCv8X7trhBIIoYyiTQS+solZSQ44gHf
Qfrp++/t6wUN0T209b/gTuoM/rtXjDWzHu9nAnW8lxnWta+KYqPBrDC8ymYkKGIr
VInPMLg2N5Goe5btKLAQ3sBSR2XZZwMXfIHIEKtaM5rOqrI3ixbbyYFCDaVL81g4
+ggCLsLCBc6Zvsap2mmR94HB+20k4xHinL8Y545NnymShObbq5uu6lCezoVXSTkV
JbtgfEtGr3NaqErkP5c9+rKN7D3PpGntxA5xcIMwg1yzIbvBHltoB1ERFnHHsMLq
iHUq/EuptKui9aVEwhtE9/1J0cwoUftT8Lb73g==
-----END CERTIFICATE-----
Generated at Tue May 12 22:56:20 2026 by rpki-client