Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa
File:                     3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa (raw, json)
Hash identifier:          NJvu5a2G0jjnlwhF7q1VResc9Hvm9KMupvNKyxPdQCg=
Subject key identifier:   A4:DF:45:93:94:98:CB:E2:F5:2F:0F:98:DB:9C:35:15:28:99:C7:9A
Certificate issuer:       /CN=790B62849B574740604A7D3662FBB56A4DB8F510
Certificate serial:       45B304585DF5014DFC7741A4AA845A47F9DBCED7
Authority key identifier: 79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa
Signing time:             Sun 03 May 2026 03:06:50 +0000
ROA not before:           Sun 03 May 2026 03:01:50 +0000
ROA not after:            Sun 02 May 2027 03:06:50 +0000
asID:                     151569
IP address blocks:        103.38.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.crl
                          rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b3:04:58:5d:f5:01:4d:fc:77:41:a4:aa:84:5a:47:f9:db:ce:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790B62849B574740604A7D3662FBB56A4DB8F510
        Validity
            Not Before: May  3 03:01:50 2026 GMT
            Not After : May  2 03:06:50 2027 GMT
        Subject: CN=A4DF45939498CBE2F52F0F98DB9C35152899C79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:57:1c:40:3e:fa:72:fa:78:28:e5:08:10:
                    45:93:7a:9b:a4:58:e6:04:14:25:33:27:ad:72:3b:
                    72:f0:82:77:ce:ea:e2:be:f8:d8:cd:f8:6d:da:9b:
                    58:27:49:d6:ba:f5:3a:a3:53:24:12:41:e6:4d:7f:
                    0c:15:4b:fb:d7:10:22:62:a9:43:14:f9:ef:22:48:
                    f4:6a:53:e3:27:0e:c0:0c:65:d2:9f:9b:cd:7c:1f:
                    9f:c1:4f:33:d6:1f:a8:3f:72:d1:b4:59:10:75:e6:
                    82:03:b5:65:20:0c:e5:1d:d3:7a:40:15:b8:35:d5:
                    ed:5f:4e:b2:5d:3d:82:cd:69:6d:60:73:7e:6e:f8:
                    77:72:8a:16:3d:fd:fe:ea:14:0e:9a:79:19:8b:03:
                    e6:ff:76:de:e5:c9:40:42:6b:a9:05:22:1a:45:b8:
                    e1:fd:d5:93:58:f7:b3:71:7e:bf:f3:bb:aa:e5:8a:
                    b7:28:f0:ed:d4:70:e1:88:d8:21:05:55:be:a6:d1:
                    09:d6:1b:fc:9e:3f:a2:1b:2d:98:03:46:fb:cf:c7:
                    8e:01:b1:5e:e4:78:5d:a5:41:2c:9e:da:0a:1f:48:
                    7c:36:d0:86:f7:e8:13:c1:74:4e:d7:01:63:59:da:
                    6d:a0:28:8f:7d:2a:50:7a:90:05:7b:19:9f:09:ba:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DF:45:93:94:98:CB:E2:F5:2F:0F:98:DB:9C:35:15:28:99:C7:9A
            X509v3 Authority Key Identifier:
                keyid:79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:90:05:8d:9b:22:42:7c:3a:d5:c5:da:6b:50:7d:ae:14:40:
         78:ac:43:a0:17:df:b2:6e:07:dd:f7:9b:41:40:ef:6c:b0:a7:
         80:93:9f:04:86:ce:f4:d1:b1:e0:ce:ca:fe:fe:11:1c:25:ff:
         52:a0:77:70:72:cd:99:37:b2:8f:6b:97:98:f6:83:21:9d:5f:
         6c:c3:10:33:1b:4a:3d:d9:ba:40:df:24:92:79:fe:56:66:7a:
         6f:3b:fb:71:05:01:35:da:c3:77:13:de:7e:c4:ec:5d:7d:e9:
         5d:14:6e:4d:75:91:2f:4a:6f:e5:77:57:49:06:02:f8:19:b9:
         9b:41:72:a5:45:41:a4:77:57:12:16:fc:75:5b:7e:a8:69:11:
         95:67:72:7a:09:87:31:57:b3:fd:d5:55:b1:c3:9d:b4:02:7b:
         1b:c2:11:f8:9e:f7:cf:1d:60:09:c4:33:5a:a5:c3:3d:f3:15:
         e6:a7:78:92:c5:c0:70:dd:88:87:fe:9f:95:ae:b9:fa:a7:ac:
         70:95:6e:d6:e2:52:27:5e:1f:aa:c0:fc:89:94:9d:65:d1:90:
         fb:be:15:88:b1:99:94:14:ef:25:6f:d3:64:4c:41:1f:9d:b2:
         b1:58:b0:b6:a0:04:73:7d:0f:cf:4b:fc:50:78:ef:44:1a:c7:
         68:e9:cc:f8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURbMEWF31AU38d0GkqoRaR/nbztcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwQjYyODQ5QjU3NDc0MDYwNEE3RDM2NjJGQkI1NkE0
REI4RjUxMDAeFw0yNjA1MDMwMzAxNTBaFw0yNzA1MDIwMzA2NTBaMDMxMTAvBgNV
BAMTKEE0REY0NTkzOTQ5OENCRTJGNTJGMEY5OERCOUMzNTE1Mjg5OUM3OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7VccQD76cvp4KOUIEEWTepuk
WOYEFCUzJ61yO3LwgnfO6uK++NjN+G3am1gnSda69TqjUyQSQeZNfwwVS/vXECJi
qUMU+e8iSPRqU+MnDsAMZdKfm818H5/BTzPWH6g/ctG0WRB15oIDtWUgDOUd03pA
Fbg11e1fTrJdPYLNaW1gc35u+HdyihY9/f7qFA6aeRmLA+b/dt7lyUBCa6kFIhpF
uOH91ZNY97Nxfr/zu6rlirco8O3UcOGI2CEFVb6m0QnWG/yeP6IbLZgDRvvPx44B
sV7keF2lQSye2gofSHw20Ib36BPBdE7XAWNZ2m2gKI99KlB6kAV7GZ8JuhdRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUpN9Fk5SYy+L1Lw+Y25w1FSiZx5owHwYDVR0j
BBgwFoAUeQtihJtXR0BgSn02Yvu1ak249RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2FiZWViY2MtYTI0Ny00ZmRlLWFhODYtYzY2NjllYWJjZDgyLzAvNzkwQjYyODQ5
QjU3NDc0MDYwNEE3RDM2NjJGQkI1NkE0REI4RjUxMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83OTBCNjI4NDlCNTc0NzQwNjA0QTdEMzY2MkZCQjU2QTREQjhG
NTEwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NhYmVlYmNjLWEyNDctNGZkZS1h
YTg2LWM2NjY5ZWFiY2Q4Mi8wLzMxMzAzMzJlMzMzODJlMzEzMTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyZvMA0GCSqG
SIb3DQEBCwUAA4IBAQAPkAWNmyJCfDrVxdprUH2uFEB4rEOgF9+ybgfd95tBQO9s
sKeAk58Ehs700bHgzsr+/hEcJf9SoHdwcs2ZN7KPa5eY9oMhnV9swxAzG0o92bpA
3ySSef5WZnpvO/txBQE12sN3E95+xOxdfeldFG5NdZEvSm/ld1dJBgL4GbmbQXKl
RUGkd1cSFvx1W36oaRGVZ3J6CYcxV7P91VWxw520AnsbwhH4nvfPHWAJxDNapcM9
8xXmp3iSxcBw3YiH/p+Vrrn6p6xwlW7W4lInXh+qwPyJlJ1l0ZD7vhWIsZmUFO8l
b9NkTEEfnbKxWLC2oARzfQ/PS/xQeO9EGsdo6cz4
-----END CERTIFICATE-----
Generated at Wed May 13 03:56:12 2026 by rpki-client