Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/3130332e38332e39362e302f32322d3234203d3e20313336303738.roa
File:                     3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (raw, json)
Hash identifier:          FGY54/U/sApIO0WnuIi9FgJuB2ojszOr2KUIIMJQgfQ=
Subject key identifier:   35:D9:C1:2B:52:09:78:9E:65:6D:99:C6:5E:CF:84:CF:7F:9C:ED:12
Certificate issuer:       /CN=529B615ABA9F13191A216A37170723B01A89793A
Certificate serial:       6B708AE51E146475852688525D58C71168AFD93B
Authority key identifier: 52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/3130332e38332e39362e302f32322d3234203d3e20313336303738.roa
Signing time:             Sun 03 May 2026 03:05:46 +0000
ROA not before:           Sun 03 May 2026 03:00:46 +0000
ROA not after:            Sun 02 May 2027 03:05:46 +0000
asID:                     136078
IP address blocks:        103.83.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl
                          rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:8a:e5:1e:14:64:75:85:26:88:52:5d:58:c7:11:68:af:d9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529B615ABA9F13191A216A37170723B01A89793A
        Validity
            Not Before: May  3 03:00:46 2026 GMT
            Not After : May  2 03:05:46 2027 GMT
        Subject: CN=35D9C12B5209789E656D99C65ECF84CF7F9CED12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:b4:5e:dd:ae:e0:fc:79:d0:f1:1d:97:46:
                    22:1a:64:33:78:4c:ea:65:f3:2c:f1:7c:64:97:b1:
                    15:44:4c:e2:d7:ab:db:07:55:51:8a:6b:6b:81:58:
                    8f:35:ad:b5:c5:dd:fe:46:0c:23:7f:00:2a:3e:6f:
                    ed:4d:52:70:3e:c6:c4:3c:ef:03:55:31:7e:30:4b:
                    6d:c2:e1:35:bc:33:d1:87:7f:dc:bd:fe:7d:72:01:
                    21:a2:22:dd:c8:32:51:ed:cd:63:45:1a:8f:9a:9f:
                    88:a1:d8:67:d5:03:26:67:fb:83:3b:59:0d:8f:d2:
                    2a:e1:e6:6a:da:32:bf:ad:01:68:01:12:73:78:c3:
                    43:6d:a1:df:9a:ac:da:ca:f9:20:fb:7c:d8:54:bb:
                    5d:3b:d6:33:47:14:e3:9f:f9:61:d2:e2:9b:1a:49:
                    8b:49:cf:ee:96:6b:ed:bb:37:cc:38:4d:0b:bf:9c:
                    4d:c9:3e:21:e1:9a:f4:de:4e:e6:41:9a:e0:e6:a9:
                    78:b3:a1:62:0d:b7:b1:e9:be:4f:d6:6b:5b:bf:01:
                    a7:8f:12:85:7f:c3:02:fc:69:65:3e:e5:c5:fe:b7:
                    4f:cf:e4:40:18:0a:2a:b1:81:f4:97:6a:41:ab:37:
                    3c:7f:ea:5f:16:44:53:b3:ff:5d:7e:5a:39:d7:55:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D9:C1:2B:52:09:78:9E:65:6D:99:C6:5E:CF:84:CF:7F:9C:ED:12
            X509v3 Authority Key Identifier:
                keyid:52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/3130332e38332e39362e302f32322d3234203d3e20313336303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:87:0b:53:65:0b:04:4f:b4:6f:5f:1b:2c:63:85:69:4e:e4:
         3c:69:ae:65:65:41:b3:32:62:0a:4a:b8:f7:8b:b0:19:fe:ea:
         f8:4e:0a:f1:73:53:bd:5d:3a:4b:84:37:a6:81:8a:04:2a:ac:
         34:ba:7c:54:90:90:42:07:e7:76:f6:bb:6e:d8:52:d9:6f:c7:
         c4:23:cb:36:af:c2:c0:ed:28:9f:29:6b:71:7c:c8:f4:ce:3d:
         d9:81:76:3e:c0:43:70:5e:24:30:eb:cd:53:c9:6f:9a:00:82:
         e3:e3:d8:84:56:1e:80:08:20:0f:bd:1c:95:0e:35:60:e3:15:
         e5:88:dd:e0:41:97:33:5a:19:88:03:92:0b:3f:f6:b1:12:26:
         05:6d:5c:7c:d0:21:a7:5a:7a:51:be:66:7b:fc:77:6a:50:1a:
         5a:5e:54:d9:b5:39:75:79:28:9a:5b:5e:3d:82:f4:5c:a6:75:
         11:85:85:41:d5:51:d0:ce:dd:5a:76:b6:5e:6a:d3:c4:eb:79:
         c8:00:ad:0b:98:28:55:b0:aa:31:8f:b1:3e:bc:af:5f:10:a5:
         10:84:8e:7a:92:48:ea:53:15:e4:59:8a:41:e8:d7:31:d4:53:
         14:f5:d0:74:43:72:43:5a:d9:2e:f1:02:f7:80:c2:1e:c5:8d:
         3d:4b:bf:cf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUa3CK5R4UZHWFJohSXVjHEWiv2TswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI5QjYxNUFCQTlGMTMxOTFBMjE2QTM3MTcwNzIzQjAx
QTg5NzkzQTAeFw0yNjA1MDMwMzAwNDZaFw0yNzA1MDIwMzA1NDZaMDMxMTAvBgNV
BAMTKDM1RDlDMTJCNTIwOTc4OUU2NTZEOTlDNjVFQ0Y4NENGN0Y5Q0VEMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZ7Re3a7g/HnQ8R2XRiIaZDN4
TOpl8yzxfGSXsRVETOLXq9sHVVGKa2uBWI81rbXF3f5GDCN/ACo+b+1NUnA+xsQ8
7wNVMX4wS23C4TW8M9GHf9y9/n1yASGiIt3IMlHtzWNFGo+an4ih2GfVAyZn+4M7
WQ2P0irh5mraMr+tAWgBEnN4w0Ntod+arNrK+SD7fNhUu1071jNHFOOf+WHS4psa
SYtJz+6Wa+27N8w4TQu/nE3JPiHhmvTeTuZBmuDmqXizoWINt7Hpvk/Wa1u/AaeP
EoV/wwL8aWU+5cX+t0/P5EAYCiqxgfSXakGrNzx/6l8WRFOz/11+WjnXVRp5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUNdnBK1IJeJ5lbZnGXs+Ez3+c7RIwHwYDVR0j
BBgwFoAUUpthWrqfExkaIWo3FwcjsBqJeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzZlYzM1ZWQtMGYzNi00M2Q3LWI1MzctMDZkYjMxNGM5MGQ1LzAvNTI5QjYxNUFC
QTlGMTMxOTFBMjE2QTM3MTcwNzIzQjAxQTg5NzkzQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MjlCNjE1QUJBOUYxMzE5MUEyMTZBMzcxNzA3MjNCMDFBODk3
OTNBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2ZWMzNWVkLTBmMzYtNDNkNy1i
NTM3LTA2ZGIzMTRjOTBkNS8wLzMxMzAzMzJlMzgzMzJlMzkzNjJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdTYDANBgkqhkiG
9w0BAQsFAAOCAQEAiocLU2ULBE+0b18bLGOFaU7kPGmuZWVBszJiCkq494uwGf7q
+E4K8XNTvV06S4Q3poGKBCqsNLp8VJCQQgfndva7bthS2W/HxCPLNq/CwO0onylr
cXzI9M492YF2PsBDcF4kMOvNU8lvmgCC4+PYhFYegAggD70clQ41YOMV5Yjd4EGX
M1oZiAOSCz/2sRImBW1cfNAhp1p6Ub5me/x3alAaWl5U2bU5dXkomltePYL0XKZ1
EYWFQdVR0M7dWna2XmrTxOt5yACtC5goVbCqMY+xPryvXxClEISOepJI6lMV5FmK
QejXMdRTFPXQdENyQ1rZLvEC94DCHsWNPUu/zw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:57 2026 by rpki-client