Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34392e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e34392e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          5KzkNf07feOIGCfh44Vo/vYmH0G2S6b1CbPLKbpvIPk=
Subject key identifier:   17:F7:B9:67:16:A2:54:25:C5:80:29:B5:74:29:2C:CD:28:74:F5:AE
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       7240523AA125EB39752A84D9BD28D3BD26D3C4EC
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34392e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:04 +0000
ROA not before:           Sun 03 May 2026 02:54:04 +0000
ROA not after:            Sun 02 May 2027 02:59:04 +0000
asID:                     63501
IP address blocks:        103.39.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:40:52:3a:a1:25:eb:39:75:2a:84:d9:bd:28:d3:bd:26:d3:c4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:04 2026 GMT
            Not After : May  2 02:59:04 2027 GMT
        Subject: CN=17F7B96716A25425C58029B574292CCD2874F5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:ec:d4:d0:85:a9:86:fa:50:dd:bb:2f:af:
                    c6:61:bf:a9:f0:9d:9e:d4:4b:6a:bd:e0:1c:19:b5:
                    3e:dc:6f:f6:63:96:a0:0e:5c:88:1b:fe:d9:7a:02:
                    da:a2:7a:01:e9:c5:c9:89:3c:00:b8:9e:28:8a:6a:
                    37:d3:1c:5d:16:ba:e5:ad:04:fa:03:43:c6:e5:53:
                    f7:77:a8:2d:d5:56:99:dd:a4:44:55:7a:71:4f:26:
                    29:02:e6:b3:a8:38:d4:7a:81:f7:e2:aa:ad:2c:aa:
                    70:91:12:e6:7a:ba:5d:e1:84:b7:19:23:50:cc:02:
                    ce:ae:68:dd:95:85:fd:55:1f:e2:83:77:92:b4:7b:
                    ee:21:98:51:bc:de:82:fc:01:39:3d:01:1e:11:a4:
                    44:ee:ad:07:ad:79:a8:99:d0:d2:20:b4:dc:6e:97:
                    9c:12:ae:d4:98:a1:79:25:16:8e:31:6d:7a:2c:75:
                    a2:30:6e:55:d4:58:a6:ed:0c:86:d2:92:3b:53:08:
                    f8:cb:c1:f6:3f:63:cb:42:32:92:dc:ef:3a:8f:79:
                    f8:2d:5a:11:b4:04:79:3a:83:61:5b:82:80:98:d7:
                    dc:44:91:a5:27:33:56:d2:a0:62:a0:c8:cf:e4:92:
                    59:a5:fc:41:05:69:49:c1:cc:e2:ec:12:03:2a:28:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F7:B9:67:16:A2:54:25:C5:80:29:B5:74:29:2C:CD:28:74:F5:AE
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34392e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e9:c5:d2:cf:2b:9d:76:07:a1:65:a7:61:39:5e:bb:ae:0f:
         11:fb:d4:5a:a6:7c:20:64:c8:d0:54:61:7e:22:63:20:0f:d4:
         71:44:c7:95:83:8f:72:d2:9b:9e:8b:5e:f1:e1:37:7d:ba:70:
         78:a0:6b:8e:ef:ff:c3:af:53:93:02:08:a2:1f:63:54:0d:11:
         50:d9:77:a4:98:ba:fa:93:00:17:1f:3c:f4:df:18:59:91:89:
         69:de:37:59:c3:f1:7d:52:bf:f2:8c:ef:99:4a:83:8c:04:ce:
         08:3d:44:36:dd:60:1d:07:1f:7b:6e:21:d3:19:be:33:6f:9c:
         c6:93:8e:28:ae:49:8e:48:76:82:68:6e:b6:85:0c:5d:83:b6:
         49:bd:4b:15:55:c2:5f:d7:d5:34:50:8e:f1:8d:4d:a2:2a:17:
         4f:81:e0:1e:ca:29:b1:37:1c:9d:04:c5:03:22:54:8d:2f:e1:
         6e:83:94:70:0a:35:28:0d:fe:65:82:55:f3:fd:e0:50:c7:19:
         0b:c1:db:f4:ff:2d:00:38:3a:77:4b:08:5c:93:68:66:21:22:
         38:ad:98:8b:b1:a2:49:84:a3:94:e0:9d:25:42:d8:fd:2a:26:
         00:0d:a1:55:ed:22:45:81:74:36:1e:94:5e:f5:8a:fa:f4:a8:
         18:12:43:74
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUckBSOqEl6zl1KoTZvSjTvSbTxOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI4NTEyNjVEMjA5N0M0N0U1MDdEOEM1MUIxMDc3RDA5
NzlBRjQ2NDAeFw0yNjA1MDMwMjU0MDRaFw0yNzA1MDIwMjU5MDRaMDMxMTAvBgNV
BAMTKDE3RjdCOTY3MTZBMjU0MjVDNTgwMjlCNTc0MjkyQ0NEMjg3NEY1QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAC+zU0IWphvpQ3bsvr8Zhv6nw
nZ7US2q94BwZtT7cb/ZjlqAOXIgb/tl6AtqiegHpxcmJPAC4niiKajfTHF0WuuWt
BPoDQ8blU/d3qC3VVpndpERVenFPJikC5rOoONR6gffiqq0sqnCREuZ6ul3hhLcZ
I1DMAs6uaN2Vhf1VH+KDd5K0e+4hmFG83oL8ATk9AR4RpETurQeteaiZ0NIgtNxu
l5wSrtSYoXklFo4xbXosdaIwblXUWKbtDIbSkjtTCPjLwfY/Y8tCMpLc7zqPefgt
WhG0BHk6g2FbgoCY19xEkaUnM1bSoGKgyM/kklml/EEFaUnBzOLsEgMqKJPrAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUF/e5ZxaiVCXFgCm1dCkszSh09a4wHwYDVR0j
BBgwFoAUkoUSZdIJfEflB9jFGxB30Jea9GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQ5MThiMTUtZTYzZS00YjM4LWEwNWMtNjUwZmI0OWYwNTk0LzAvOTI4NTEyNjVE
MjA5N0M0N0U1MDdEOEM1MUIxMDc3RDA5NzlBRjQ2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85Mjg1MTI2NUQyMDk3QzQ3RTUwN0Q4QzUxQjEwNzdEMDk3OUFG
NDY0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzQzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnJzEwDQYJKoZIhvcN
AQELBQADggEBAF7pxdLPK512B6Flp2E5XruuDxH71FqmfCBkyNBUYX4iYyAP1HFE
x5WDj3LSm56LXvHhN326cHiga47v/8OvU5MCCKIfY1QNEVDZd6SYuvqTABcfPPTf
GFmRiWneN1nD8X1Sv/KM75lKg4wEzgg9RDbdYB0HH3tuIdMZvjNvnMaTjiiuSY5I
doJobraFDF2Dtkm9SxVVwl/X1TRQjvGNTaIqF0+B4B7KKbE3HJ0ExQMiVI0v4W6D
lHAKNSgN/mWCVfP94FDHGQvB2/T/LQA4OndLCFyTaGYhIjitmIuxokmEo5TgnSVC
2P0qJgANoVXtIkWBdDYelF71ivr0qBgSQ3Q=
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:54 2026 by rpki-client