Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa
File:                     3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (raw, json)
Hash identifier:          lNL+7ARcgDGS7ohITNzXBQoor5a/mLNbtFseoR7TmUw=
Subject key identifier:   60:89:AD:FB:EF:34:6D:9F:31:63:B4:09:3D:BD:64:CF:93:20:43:F9
Certificate issuer:       /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569
Certificate serial:       361AE83F411A236AB326C429AAD658B069478FB1
Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa
Signing time:             Sun 03 May 2026 03:07:45 +0000
ROA not before:           Sun 03 May 2026 03:02:45 +0000
ROA not after:            Sun 02 May 2027 03:07:45 +0000
asID:                     132637
IP address blocks:        103.143.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl
                          rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1a:e8:3f:41:1a:23:6a:b3:26:c4:29:aa:d6:58:b0:69:47:8f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569
        Validity
            Not Before: May  3 03:02:45 2026 GMT
            Not After : May  2 03:07:45 2027 GMT
        Subject: CN=6089ADFBEF346D9F3163B4093DBD64CF932043F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:2d:59:a9:a4:8b:ce:8e:3c:68:79:a8:dd:
                    fe:54:e3:a8:92:3a:9f:b6:07:76:27:50:c1:04:03:
                    d3:55:29:5d:45:ce:2a:de:f7:4c:86:51:61:5a:e6:
                    d9:79:ff:7d:21:c2:80:d4:74:ad:69:76:9f:b2:ae:
                    e3:88:65:79:2d:06:77:81:28:e1:ac:9e:c1:88:21:
                    d3:14:f3:46:c2:7b:3f:0c:cd:26:f6:41:98:54:60:
                    dc:b0:ac:ab:de:2f:17:ec:02:95:f8:f1:b1:88:d4:
                    08:b9:81:ee:4e:aa:25:f5:39:b4:f9:1c:21:ed:c5:
                    6f:ef:fa:c5:f8:9d:ee:ad:db:5f:91:fc:da:ac:25:
                    87:8f:e1:fb:c5:f0:6f:91:d0:41:58:f9:ea:da:5e:
                    7f:e1:74:83:b8:cb:33:d3:05:e1:9b:ed:dc:66:01:
                    3d:18:0c:5d:f0:7d:46:5a:fa:02:5e:39:7e:6b:2d:
                    00:87:1d:aa:e1:02:c1:80:af:34:1b:37:04:57:b5:
                    e4:50:4e:6b:e2:c3:e2:3c:be:30:75:17:45:32:75:
                    04:4a:a9:d2:a0:41:0e:c4:92:a5:5a:49:16:72:1f:
                    66:d5:09:01:a3:fd:cb:43:b6:a0:30:73:88:ad:7d:
                    3e:6b:6c:6a:71:4b:77:4b:a5:d2:ff:6a:99:87:46:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:89:AD:FB:EF:34:6D:9F:31:63:B4:09:3D:BD:64:CF:93:20:43:F9
            X509v3 Authority Key Identifier:
                keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:dd:59:96:e1:aa:aa:02:db:87:51:90:cd:13:82:be:3d:ce:
         d4:97:f7:09:7c:88:d6:7e:f2:2f:01:f5:e6:ae:47:54:c2:84:
         10:9f:84:80:8f:1b:8f:e5:9c:c7:73:52:ef:68:f3:5b:60:f2:
         de:3e:7a:74:2b:47:ec:cd:75:db:bd:3a:0c:71:06:bd:f6:07:
         60:b2:c9:8b:3f:a3:20:3b:15:5f:e1:20:94:9e:ec:c6:3f:a5:
         77:e8:ad:61:79:d4:44:c6:7e:91:8f:7f:f2:d5:5c:05:7e:9a:
         dc:06:81:c0:a2:54:4b:00:35:0e:7e:91:f0:9f:ff:89:ad:6b:
         7b:2f:0d:02:81:7f:78:63:e2:b9:1b:33:ce:14:58:70:cf:91:
         07:dc:bf:48:90:97:70:cb:68:0d:93:f2:cf:22:b8:4e:83:ff:
         ce:46:4d:72:4c:b3:f3:23:21:4f:52:1f:d9:20:23:a5:18:84:
         c8:88:60:ec:a7:22:04:f6:4f:82:37:3e:02:fa:81:05:14:eb:
         ba:4d:96:ac:69:3c:32:50:3c:7a:e8:79:53:f8:e4:b4:54:38:
         5f:33:72:3c:bd:84:20:42:06:e4:da:3f:d5:4c:84:b0:c5:3e:
         74:0c:8d:02:ad:b8:d6:50:ae:c3:39:9e:9e:2f:46:bc:43:82:
         1b:b0:14:b8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNhroP0EaI2qzJsQpqtZYsGlHj7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUwOEUz
RUZEOTU2OTAeFw0yNjA1MDMwMzAyNDVaFw0yNzA1MDIwMzA3NDVaMDMxMTAvBgNV
BAMTKDYwODlBREZCRUYzNDZEOUYzMTYzQjQwOTNEQkQ2NENGOTMyMDQzRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzS1ZqaSLzo48aHmo3f5U46iS
Op+2B3YnUMEEA9NVKV1Fzire90yGUWFa5tl5/30hwoDUdK1pdp+yruOIZXktBneB
KOGsnsGIIdMU80bCez8MzSb2QZhUYNywrKveLxfsApX48bGI1Ai5ge5OqiX1ObT5
HCHtxW/v+sX4ne6t21+R/NqsJYeP4fvF8G+R0EFY+eraXn/hdIO4yzPTBeGb7dxm
AT0YDF3wfUZa+gJeOX5rLQCHHarhAsGArzQbNwRXteRQTmviw+I8vjB1F0UydQRK
qdKgQQ7EkqVaSRZyH2bVCQGj/ctDtqAwc4itfT5rbGpxS3dLpdL/apmHRkMlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUYImt++80bZ8xY7QJPb1kz5MgQ/kwHwYDVR0j
BBgwFoAUmAYbkvBBB9x+qcajio3gjj79lWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2Y2ZDU1ODItOWE2My00MWU1LTg5NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJG
MDQxMDdEQzdFQTlDNkEzOEE4REUwOEUzRUZEOTU2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85ODA2MUI5MkYwNDEwN0RDN0VBOUM2QTM4QThERTA4RTNFRkQ5
NTY5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NmNmQ1NTgyLTlhNjMtNDFlNS04
OTY5LWRiOTE5Mjc3YTVlNS8wLzMxMzAzMzJlMzEzNDMzMmUzMjM0MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzIzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnj/UwDQYJ
KoZIhvcNAQELBQADggEBABTdWZbhqqoC24dRkM0Tgr49ztSX9wl8iNZ+8i8B9eau
R1TChBCfhICPG4/lnMdzUu9o81tg8t4+enQrR+zNddu9OgxxBr32B2CyyYs/oyA7
FV/hIJSe7MY/pXforWF51ETGfpGPf/LVXAV+mtwGgcCiVEsANQ5+kfCf/4mta3sv
DQKBf3hj4rkbM84UWHDPkQfcv0iQl3DLaA2T8s8iuE6D/85GTXJMs/MjIU9SH9kg
I6UYhMiIYOynIgT2T4I3PgL6gQUU67pNlqxpPDJQPHroeVP45LRUOF8zcjy9hCBC
BuTaP9VMhLDFPnQMjQKtuNZQrsM5np4vRrxDghuwFLg=
-----END CERTIFICATE-----
Generated at Wed May 13 06:55:33 2026 by rpki-client