Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa
File:                     3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=
Subject key identifier:   61:84:D3:D5:BC:ED:EB:6B:A1:BA:A5:C5:32:1C:EF:88:4E:C8:5E:DE
Certificate issuer:       /CN=36987F1D265142449AF11F138E84E3AE2398BB71
Certificate serial:       64343A0C4A373B32FF023C0194C333603FCB0A73
Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa
Signing time:             Sun 03 May 2026 03:09:15 +0000
ROA not before:           Sun 03 May 2026 03:04:15 +0000
ROA not after:            Sun 02 May 2027 03:09:15 +0000
asID:                     38496
IP address blocks:        103.112.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl
                          rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:34:3a:0c:4a:37:3b:32:ff:02:3c:01:94:c3:33:60:3f:cb:0a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71
        Validity
            Not Before: May  3 03:04:15 2026 GMT
            Not After : May  2 03:09:15 2027 GMT
        Subject: CN=6184D3D5BCEDEB6BA1BAA5C5321CEF884EC85EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:15:70:5a:cf:c7:1c:e3:7e:43:a2:4a:9a:
                    d6:97:8d:2d:fd:2d:b1:36:df:00:ec:8d:9b:a9:83:
                    bf:e9:4d:9d:11:67:94:f0:0c:8e:78:ea:2f:d8:5b:
                    50:8b:39:e6:56:ce:37:3c:63:93:a6:18:03:b6:4d:
                    d9:1b:88:12:13:24:34:17:f8:87:b5:69:d6:f3:9d:
                    4e:4f:75:6d:35:8e:0d:6d:bf:e5:cc:42:b7:15:6b:
                    36:8a:f0:e5:2b:e4:ae:80:a5:8f:0a:09:85:02:95:
                    9c:70:aa:d0:b9:0b:0a:c1:c7:be:40:0c:79:00:e5:
                    2f:14:27:c5:31:0b:f5:12:ce:ef:06:4b:81:4d:f6:
                    56:6a:e9:e2:55:df:6e:e5:49:4e:0f:7d:a2:1a:95:
                    ee:97:99:b9:e5:c5:4a:0c:64:b7:5e:bf:de:dd:cf:
                    28:2a:6b:da:16:49:19:69:19:3b:6a:54:10:8d:51:
                    63:c4:70:6e:e2:56:22:f5:7b:42:af:6b:d4:30:58:
                    fa:7c:70:23:33:c7:fa:8f:37:62:54:01:8f:b3:4c:
                    91:1f:c2:b5:4f:7f:9a:fa:55:23:ba:23:6d:d0:50:
                    a9:07:12:ea:7f:64:6b:a4:d2:5f:47:0f:29:56:89:
                    6d:90:7a:a2:02:17:10:08:95:a5:0f:27:84:86:7d:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:84:D3:D5:BC:ED:EB:6B:A1:BA:A5:C5:32:1C:EF:88:4E:C8:5E:DE
            X509v3 Authority Key Identifier:
                keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c0:67:3a:27:d9:06:09:8d:0d:83:c6:2c:95:4f:58:d2:a2:
         8d:88:f1:66:d9:d3:03:77:00:b4:11:65:41:77:ef:89:d9:5c:
         5e:72:e5:25:32:73:7f:0c:e6:11:58:06:bd:f5:98:cc:ce:48:
         57:b6:aa:ba:d9:8c:3c:32:51:08:1d:a5:c6:3e:08:83:45:85:
         cc:b8:0c:2c:3c:f9:f1:a4:78:25:73:2f:c1:ff:bf:c6:2d:a0:
         fd:bf:8d:a2:8b:9e:16:53:51:8b:8c:5a:7b:af:16:83:ff:b1:
         d8:01:86:5c:ae:03:b5:67:dd:2b:0b:40:e3:71:ca:df:3e:fd:
         6f:15:2f:01:b5:07:75:b5:cf:a3:05:70:4e:8d:75:18:fd:3e:
         c8:f1:02:1e:ff:57:b8:2c:92:47:c0:00:99:18:27:95:e7:85:
         cb:7a:a2:f4:eb:04:50:b1:b6:fa:fe:93:fb:91:35:85:09:c3:
         fe:67:20:b3:5e:f5:da:f6:fc:87:d1:3b:b3:73:da:70:8e:8f:
         71:fd:e0:39:bb:25:e1:cc:86:e1:b9:57:a8:64:4f:d1:65:77:
         4e:d8:97:47:9c:66:29:cf:76:e8:a8:81:53:04:60:6b:e6:47:
         5c:3f:10:1f:55:86:f0:ca:25:3b:1e:16:59:5c:6e:66:8c:a9:
         3b:5c:f5:5f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZDQ6DEo3OzL/AjwBlMMzYD/LCnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy
Mzk4QkI3MTAeFw0yNjA1MDMwMzA0MTVaFw0yNzA1MDIwMzA5MTVaMDMxMTAvBgNV
BAMTKDYxODREM0Q1QkNFREVCNkJBMUJBQTVDNTMyMUNFRjg4NEVDODVFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqhVwWs/HHON+Q6JKmtaXjS39
LbE23wDsjZupg7/pTZ0RZ5TwDI546i/YW1CLOeZWzjc8Y5OmGAO2TdkbiBITJDQX
+Ie1adbznU5PdW01jg1tv+XMQrcVazaK8OUr5K6ApY8KCYUClZxwqtC5CwrBx75A
DHkA5S8UJ8UxC/USzu8GS4FN9lZq6eJV327lSU4PfaIale6XmbnlxUoMZLdev97d
zygqa9oWSRlpGTtqVBCNUWPEcG7iViL1e0Kva9QwWPp8cCMzx/qPN2JUAY+zTJEf
wrVPf5r6VSO6I23QUKkHEup/ZGuk0l9HDylWiW2QeqICFxAIlaUPJ4SGfX9LAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYYTT1bzt62uhuqXFMhzviE7IXt4wHwYDVR0j
BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy
NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC
QjcxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QyZDZkMGRmLWMyMWUtNDkxYy1i
MTE2LTRhMWQ5YTJjNzRiZS8wLzMxMzAzMzJlMzEzMTMyMmUzMjMyMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3DfMA0GCSqG
SIb3DQEBCwUAA4IBAQCQwGc6J9kGCY0Ng8YslU9Y0qKNiPFm2dMDdwC0EWVBd++J
2VxecuUlMnN/DOYRWAa99ZjMzkhXtqq62Yw8MlEIHaXGPgiDRYXMuAwsPPnxpHgl
cy/B/7/GLaD9v42ii54WU1GLjFp7rxaD/7HYAYZcrgO1Z90rC0DjccrfPv1vFS8B
tQd1tc+jBXBOjXUY/T7I8QIe/1e4LJJHwACZGCeV54XLeqL06wRQsbb6/pP7kTWF
CcP+ZyCzXvXa9vyH0Tuzc9pwjo9x/eA5uyXhzIbhuVeoZE/RZXdO2JdHnGYpz3bo
qIFTBGBr5kdcPxAfVYbwyiU7HhZZXG5mjKk7XPVf
-----END CERTIFICATE-----
Generated at Wed May 13 02:16:32 2026 by rpki-client