Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e332e302f32342d3234203d3e203138303539.roa
File:                     3130332e342e332e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          7CcojKOiE+oET6Z5thocYDQyOb9IemIZZU/VLvi+iwc=
Subject key identifier:   B2:0D:38:59:7A:F3:B8:6F:8B:6D:C5:9C:4D:98:4F:28:34:74:EA:2D
Certificate issuer:       /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial:       7D2FF3ECC9B9005283D0D8AA3150313D01F39B36
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e332e302f32342d3234203d3e203138303539.roa
Signing time:             Sun 03 May 2026 03:03:37 +0000
ROA not before:           Sun 03 May 2026 02:58:37 +0000
ROA not after:            Sun 02 May 2027 03:03:37 +0000
asID:                     18059
IP address blocks:        103.4.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
                          rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2f:f3:ec:c9:b9:00:52:83:d0:d8:aa:31:50:31:3d:01:f3:9b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67239F5E47D123019D26807163E6542441401507
        Validity
            Not Before: May  3 02:58:37 2026 GMT
            Not After : May  2 03:03:37 2027 GMT
        Subject: CN=B20D38597AF3B86F8B6DC59C4D984F283474EA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:92:76:b9:27:8d:cd:a7:09:6f:f2:0a:1e:
                    58:e5:4a:ef:e3:9f:da:16:df:4b:85:81:11:5d:9f:
                    02:bf:8a:62:33:a3:f0:32:90:2e:88:13:8e:a0:0e:
                    5c:84:8d:a2:95:fd:fa:f3:99:c0:98:53:61:48:63:
                    f9:86:ac:ba:89:d7:eb:e7:70:26:df:1e:56:9c:e5:
                    0a:f1:b9:0d:b1:82:19:fb:87:6e:5f:39:bc:70:7c:
                    8d:e9:b3:36:65:3d:5b:86:94:22:66:f1:5c:71:97:
                    b0:0c:c1:be:f5:97:6c:4c:ce:d8:d6:2d:3e:4e:64:
                    58:b5:3f:9a:14:42:eb:23:c6:9c:66:2c:f9:26:68:
                    a9:80:5b:f2:17:91:c5:e2:8d:c4:a6:d0:41:72:4e:
                    47:6a:ae:19:e7:da:75:85:4c:cc:4b:55:fa:02:3d:
                    54:b5:cd:1b:dd:06:bb:2d:be:d5:51:e9:60:65:2a:
                    d7:bb:29:fa:aa:2b:74:bb:d3:dd:2d:a2:f0:82:56:
                    73:0c:a3:72:4e:48:f4:cc:a5:57:4e:f1:1e:e9:61:
                    81:a8:f7:5f:36:62:95:72:2f:1a:5c:1d:37:d2:fc:
                    4e:c5:5f:f5:a1:a5:8e:67:22:c9:29:8d:02:b5:d0:
                    e9:1c:e5:02:c8:99:cc:60:4a:c3:a0:f2:07:f3:05:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0D:38:59:7A:F3:B8:6F:8B:6D:C5:9C:4D:98:4F:28:34:74:EA:2D
            X509v3 Authority Key Identifier:
                keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e332e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:da:64:f5:d2:f1:34:ad:87:d6:4c:81:c6:02:4c:38:2d:1f:
         d9:6e:8d:3c:91:33:40:94:a8:11:a8:03:a8:04:41:61:fb:83:
         66:0f:d5:fd:f0:45:3b:ce:c2:c8:b8:1c:ec:c1:17:c0:0f:49:
         8b:09:15:d2:ca:f8:18:89:4e:82:e6:16:7e:a4:fc:a1:93:8c:
         3a:9c:73:03:2f:78:56:a2:84:8c:aa:a7:d4:22:ed:93:6b:e1:
         29:88:a4:f1:2a:34:5c:24:6a:1f:76:97:bc:56:4f:42:05:1d:
         28:5d:06:dd:ff:9d:7b:70:f9:f7:2d:a9:9c:24:0b:c2:1d:1f:
         db:2f:fa:5e:02:94:13:42:47:3f:83:24:2f:fb:1a:60:63:db:
         da:a7:c9:8b:31:8a:7c:8c:16:c7:91:ff:64:86:ce:c6:80:54:
         ed:8e:72:8f:d3:db:d5:2c:3f:9c:f6:78:c3:74:ea:02:4c:6d:
         4f:26:7c:a0:06:1a:51:8f:3b:b7:11:b3:ce:87:49:2e:36:96:
         fb:d2:03:80:a7:e5:96:cf:86:19:87:6e:72:8a:12:ca:ef:17:
         ef:5a:08:5a:86:f4:dd:e6:1f:1b:73:cd:f7:92:c7:34:5b:ac:
         37:63:df:a9:68:ae:fa:a1:db:45:2c:ad:8b:64:3c:8e:19:06:
         f2:3b:02:0a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUfS/z7Mm5AFKD0NiqMVAxPQHzmzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0
MTQwMTUwNzAeFw0yNjA1MDMwMjU4MzdaFw0yNzA1MDIwMzAzMzdaMDMxMTAvBgNV
BAMTKEIyMEQzODU5N0FGM0I4NkY4QjZEQzU5QzREOTg0RjI4MzQ3NEVBMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JpJ2uSeNzacJb/IKHljlSu/j
n9oW30uFgRFdnwK/imIzo/AykC6IE46gDlyEjaKV/frzmcCYU2FIY/mGrLqJ1+vn
cCbfHlac5QrxuQ2xghn7h25fObxwfI3pszZlPVuGlCJm8Vxxl7AMwb71l2xMztjW
LT5OZFi1P5oUQusjxpxmLPkmaKmAW/IXkcXijcSm0EFyTkdqrhnn2nWFTMxLVfoC
PVS1zRvdBrstvtVR6WBlKte7KfqqK3S7090tovCCVnMMo3JOSPTMpVdO8R7pYYGo
9182YpVyLxpcHTfS/E7FX/WhpY5nIskpjQK10Okc5QLImcxgSsOg8gfzBXBLAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUsg04WXrzuG+LbcWcTZhPKDR06i0wHwYDVR0j
BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0
N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx
NTA3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkGCCsGAQUFBzALhn1yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI4MzY3NjMtMTJiNi00ZDhmLWFk
MGItNGNkNWI2MTk1OWVmLzAvMzEzMDMzMmUzNDJlMzMyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZwQDMA0GCSqGSIb3DQEBCwUA
A4IBAQAK2mT10vE0rYfWTIHGAkw4LR/Zbo08kTNAlKgRqAOoBEFh+4NmD9X98EU7
zsLIuBzswRfAD0mLCRXSyvgYiU6C5hZ+pPyhk4w6nHMDL3hWooSMqqfUIu2Ta+Ep
iKTxKjRcJGofdpe8Vk9CBR0oXQbd/517cPn3LamcJAvCHR/bL/peApQTQkc/gyQv
+xpgY9vap8mLMYp8jBbHkf9khs7GgFTtjnKP09vVLD+c9njDdOoCTG1PJnygBhpR
jzu3EbPOh0kuNpb70gOAp+WWz4YZh25yihLK7xfvWghahvTd5h8bc833ksc0W6w3
Y9+paK76odtFLK2LZDyOGQbyOwIK
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:22 2026 by rpki-client