Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa
File:                     3130332e33392e35302e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier:          HYReHL0eW4kzWHBhDOOy62QnvnnHrx+SI0FPnDcGVhY=
Subject key identifier:   7F:9A:31:0B:20:62:DD:B2:CE:DD:9F:F9:69:6F:CE:DE:CD:B0:D6:0F
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       033414DF353DE4C948B3A054339EA93C4206E40A
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:04 +0000
ROA not before:           Sun 03 May 2026 02:54:04 +0000
ROA not after:            Sun 02 May 2027 02:59:04 +0000
asID:                     63501
IP address blocks:        103.39.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:34:14:df:35:3d:e4:c9:48:b3:a0:54:33:9e:a9:3c:42:06:e4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:04 2026 GMT
            Not After : May  2 02:59:04 2027 GMT
        Subject: CN=7F9A310B2062DDB2CEDD9FF9696FCEDECDB0D60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:34:3d:d6:28:40:2f:56:54:0f:0e:a4:f3:
                    f1:c6:72:2d:8c:8d:8d:3b:f3:31:77:0a:02:d4:81:
                    12:4f:aa:48:a1:f9:93:85:18:47:62:80:00:3f:da:
                    2c:fc:1e:27:e8:03:dc:f8:0b:10:2b:57:a7:ff:4a:
                    5f:83:5d:6a:30:42:ac:fa:bc:d3:3f:2e:11:0e:57:
                    9d:a4:4e:fd:df:a1:cf:33:81:59:df:24:70:cc:bd:
                    a3:a5:24:d3:15:01:a7:6e:d9:0a:49:1b:cb:ea:30:
                    76:80:0c:f2:fc:56:32:d6:f0:8b:b1:aa:f8:0f:c6:
                    2c:59:cc:cf:13:75:f5:ea:a2:7a:b5:7a:92:6f:5b:
                    32:a1:c4:7b:09:54:6e:fa:7b:5d:b7:5f:16:31:be:
                    e8:1f:ff:84:ad:08:09:af:1f:a3:3c:8e:2a:14:d3:
                    e3:bb:9e:74:4a:81:26:2f:88:1a:78:6c:05:2f:c8:
                    b8:0f:e7:55:75:b4:a8:87:cf:76:e6:11:0e:f4:6e:
                    15:90:45:34:3d:5e:c3:d3:01:4d:f1:c2:5e:62:0d:
                    13:e8:a4:0b:09:97:0f:fe:dc:18:54:4c:5d:3f:84:
                    a5:1a:12:34:0c:2d:4b:d3:ea:ca:27:4e:82:24:f0:
                    73:43:f4:a4:09:31:de:21:85:06:2c:f7:ad:0b:ec:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9A:31:0B:20:62:DD:B2:CE:DD:9F:F9:69:6F:CE:DE:CD:B0:D6:0F
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:49:df:33:47:a2:66:c3:95:0a:49:78:f0:54:95:6b:fb:80:
         6d:65:67:b9:c8:b6:b1:16:c9:5d:b5:54:e1:2f:86:e3:66:ea:
         9f:74:64:76:28:65:73:ce:08:46:dd:78:a5:50:a4:5b:e9:0d:
         f6:6b:de:67:35:6d:68:c5:41:ac:8d:56:02:32:51:ae:6d:cb:
         08:2f:7a:09:b5:16:fe:b1:6e:e8:1e:86:72:55:fb:22:27:11:
         32:ae:ed:37:1e:a7:a3:2f:2d:d2:61:51:2b:49:96:39:12:b6:
         0a:f7:a5:f8:91:85:8e:e7:c5:b8:db:35:be:df:0e:3b:12:93:
         f5:94:44:9c:c6:59:45:82:2c:db:7c:50:f5:2f:84:58:91:6a:
         1a:95:4f:b1:37:74:26:59:bf:d0:fc:95:11:d1:95:a3:d1:d8:
         70:26:0b:9c:ec:b5:6b:41:10:9c:f8:9c:68:71:77:f1:df:ee:
         a8:9d:15:29:62:56:68:ad:51:6c:b7:48:e8:36:e2:31:13:fb:
         d5:9f:d4:d8:7b:51:a2:5d:d2:ec:1e:35:c2:20:cc:2f:81:e9:
         49:fd:06:69:8f:a2:1e:ef:11:3f:ce:5a:5e:05:27:17:ed:2d:
         b0:9a:8e:ac:e8:7d:3b:3f:1c:c4:11:39:59:1d:e6:a1:70:6a:
         32:7f:22:d6
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUAzQU3zU95MlIs6BUM56pPEIG5AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI4NTEyNjVEMjA5N0M0N0U1MDdEOEM1MUIxMDc3RDA5
NzlBRjQ2NDAeFw0yNjA1MDMwMjU0MDRaFw0yNzA1MDIwMjU5MDRaMDMxMTAvBgNV
BAMTKDdGOUEzMTBCMjA2MkREQjJDRUREOUZGOTY5NkZDRURFQ0RCMEQ2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZjQ91ihAL1ZUDw6k8/HGci2M
jY078zF3CgLUgRJPqkih+ZOFGEdigAA/2iz8HifoA9z4CxArV6f/Sl+DXWowQqz6
vNM/LhEOV52kTv3foc8zgVnfJHDMvaOlJNMVAadu2QpJG8vqMHaADPL8VjLW8Iux
qvgPxixZzM8TdfXqonq1epJvWzKhxHsJVG76e123XxYxvugf/4StCAmvH6M8jioU
0+O7nnRKgSYviBp4bAUvyLgP51V1tKiHz3bmEQ70bhWQRTQ9XsPTAU3xwl5iDRPo
pAsJlw/+3BhUTF0/hKUaEjQMLUvT6sonToIk8HND9KQJMd4hhQYs960L7LTnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUf5oxCyBi3bLO3Z/5aW/O3s2w1g8wHwYDVR0j
BBgwFoAUkoUSZdIJfEflB9jFGxB30Jea9GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQ5MThiMTUtZTYzZS00YjM4LWEwNWMtNjUwZmI0OWYwNTk0LzAvOTI4NTEyNjVE
MjA5N0M0N0U1MDdEOEM1MUIxMDc3RDA5NzlBRjQ2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85Mjg1MTI2NUQyMDk3QzQ3RTUwN0Q4QzUxQjEwNzdEMDk3OUFG
NDY0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzUzMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnJzIwDQYJKoZIhvcN
AQELBQADggEBAGJJ3zNHombDlQpJePBUlWv7gG1lZ7nItrEWyV21VOEvhuNm6p90
ZHYoZXPOCEbdeKVQpFvpDfZr3mc1bWjFQayNVgIyUa5tywgvegm1Fv6xbugehnJV
+yInETKu7Tcep6MvLdJhUStJljkStgr3pfiRhY7nxbjbNb7fDjsSk/WURJzGWUWC
LNt8UPUvhFiRahqVT7E3dCZZv9D8lRHRlaPR2HAmC5zstWtBEJz4nGhxd/Hf7qid
FSliVmitUWy3SOg24jET+9Wf1Nh7UaJd0uweNcIgzC+B6Un9BmmPoh7vET/OWl4F
JxftLbCajqzofTs/HMQROVkd5qFwajJ/ItY=
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:56 2026 by rpki-client