Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3232382e302f32342d3234203d3e203633383638.roa
File:                     3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (raw, json)
Hash identifier:          un5/MncOqw/wwzU2UuxhsRYNEiAYmLczzv4yniu8AsM=
Subject key identifier:   38:42:61:F9:4E:C3:3B:58:D8:A0:AC:9D:9E:37:F5:57:CE:D3:B2:59
Certificate issuer:       /CN=EB314E0C129A5CAF077447531422664A0DBA21EB
Certificate serial:       2546E44F2D9EE2645416F87BBBDA8A092B564335
Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3232382e302f32342d3234203d3e203633383638.roa
Signing time:             Sun 03 May 2026 03:09:21 +0000
ROA not before:           Sun 03 May 2026 03:04:21 +0000
ROA not after:            Sun 02 May 2027 03:09:21 +0000
asID:                     63868
IP address blocks:        103.49.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl
                          rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:46:e4:4f:2d:9e:e2:64:54:16:f8:7b:bb:da:8a:09:2b:56:43:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB
        Validity
            Not Before: May  3 03:04:21 2026 GMT
            Not After : May  2 03:09:21 2027 GMT
        Subject: CN=384261F94EC33B58D8A0AC9D9E37F557CED3B259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:83:bf:3f:c8:22:3e:b5:c0:db:49:53:45:
                    12:27:c4:b7:0f:7a:af:98:1b:ca:d5:1a:7b:7e:1b:
                    17:1a:94:6d:7a:eb:b8:1b:09:7e:3c:28:d4:ff:0e:
                    8a:cc:ab:40:44:5f:01:71:f9:c2:5b:ac:a2:74:01:
                    2c:fe:7e:0a:09:c6:d1:41:12:b2:91:e6:2f:04:cf:
                    6c:b9:3d:cf:db:44:ef:cd:dc:14:e6:33:32:13:e2:
                    7d:c3:ee:f9:93:ae:7c:d0:54:00:ad:a3:a5:a2:a2:
                    b9:67:61:60:e3:28:21:06:ca:f1:e9:fb:72:26:87:
                    3e:cd:ac:cb:67:b1:a0:2e:96:0c:b4:72:69:ed:c9:
                    e0:e3:ef:86:ac:78:be:25:c8:68:f1:ff:8f:f6:60:
                    9b:38:f7:26:00:b0:39:db:1f:8e:b7:ef:95:bd:de:
                    82:07:b7:f1:1b:e7:f9:7f:f5:7b:84:4a:dd:ad:d7:
                    01:a4:6a:a6:2b:c6:75:90:b6:a2:07:fc:04:52:84:
                    d4:17:62:f8:ab:95:95:57:85:dd:ad:99:af:80:23:
                    21:9d:fd:e7:29:44:37:f1:c1:81:2b:3a:09:dd:8b:
                    e1:ff:66:c4:f3:ba:e1:05:8c:e1:57:04:c6:c8:29:
                    b6:f1:48:6a:ee:7c:93:b0:fd:2f:9d:de:b2:20:33:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:42:61:F9:4E:C3:3B:58:D8:A0:AC:9D:9E:37:F5:57:CE:D3:B2:59
            X509v3 Authority Key Identifier:
                keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3232382e302f32342d3234203d3e203633383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:63:35:8f:07:07:73:73:30:e7:bd:d6:90:cb:91:ff:a9:
         0d:e0:10:f6:c1:6d:10:b0:cc:1d:e3:bd:4d:97:db:3d:7f:db:
         81:3f:3d:05:32:f3:7c:ee:25:43:fc:80:26:c6:8c:ed:f7:ca:
         da:b5:55:3e:8a:c1:c9:77:87:2e:78:ed:04:dd:d2:61:b1:b5:
         d3:14:f4:8e:a9:ed:f4:73:ac:02:ee:79:e4:e9:46:50:8c:be:
         22:7e:0f:9f:5a:da:b0:6a:bc:62:08:fd:16:93:ae:68:a3:bd:
         45:10:dd:33:2a:78:1a:cb:e3:a0:d0:f3:2b:e0:74:c8:b5:ad:
         a1:93:b1:48:b6:3b:91:55:16:02:2c:67:fe:af:6c:df:ed:45:
         3c:33:bb:f7:0b:41:eb:73:07:ce:76:a4:67:5f:b2:d7:60:40:
         89:1a:8c:1e:6e:e2:96:e8:c5:fa:52:ee:e9:52:92:f1:9c:aa:
         44:2a:27:e7:21:ec:bb:38:92:7f:a5:bf:5e:23:06:3e:ef:e4:
         aa:df:9b:39:e5:71:a4:77:c1:f4:0d:e5:3e:f9:51:b7:13:f7:
         7a:b0:86:df:24:2c:2f:97:77:45:66:5c:ca:4a:c8:31:49:67:
         10:58:d8:a0:b5:57:13:4c:08:32:f9:c2:0f:ab:4f:d6:79:17:
         fd:4c:38:21
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJUbkTy2e4mRUFvh7u9qKCStWQzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw
REJBMjFFQjAeFw0yNjA1MDMwMzA0MjFaFw0yNzA1MDIwMzA5MjFaMDMxMTAvBgNV
BAMTKDM4NDI2MUY5NEVDMzNCNThEOEEwQUM5RDlFMzdGNTU3Q0VEM0IyNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbdIO/P8giPrXA20lTRRInxLcP
eq+YG8rVGnt+GxcalG1667gbCX48KNT/DorMq0BEXwFx+cJbrKJ0ASz+fgoJxtFB
ErKR5i8Ez2y5Pc/bRO/N3BTmMzIT4n3D7vmTrnzQVACto6WiorlnYWDjKCEGyvHp
+3Imhz7NrMtnsaAulgy0cmntyeDj74aseL4lyGjx/4/2YJs49yYAsDnbH46375W9
3oIHt/Eb5/l/9XuESt2t1wGkaqYrxnWQtqIH/ARShNQXYvirlZVXhd2tma+AIyGd
/ecpRDfxwYErOgndi+H/ZsTzuuEFjOFXBMbIKbbxSGrufJOw/S+d3rIgM9vBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUOEJh+U7DO1jYoKydnjf1V87TslkwHwYDVR0j
BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx
MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy
MUVCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QzNzE5MjlkLWMzZDAtNGRhYS1i
NWZkLWEyNDk1NjBkNWQwNC8wLzMxMzAzMzJlMzQzOTJlMzIzMjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzMzM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcx5DANBgkqhkiG
9w0BAQsFAAOCAQEAoCVjNY8HB3NzMOe91pDLkf+pDeAQ9sFtELDMHeO9TZfbPX/b
gT89BTLzfO4lQ/yAJsaM7ffK2rVVPorByXeHLnjtBN3SYbG10xT0jqnt9HOsAu55
5OlGUIy+In4Pn1rasGq8Ygj9FpOuaKO9RRDdMyp4GsvjoNDzK+B0yLWtoZOxSLY7
kVUWAixn/q9s3+1FPDO79wtB63MHznakZ1+y12BAiRqMHm7ilujF+lLu6VKS8Zyq
RCon5yHsuziSf6W/XiMGPu/kqt+bOeVxpHfB9A3lPvlRtxP3erCG3yQsL5d3RWZc
ykrIMUlnEFjYoLVXE0wIMvnCD6tP1nkX/Uw4IQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:51:05 2026 by rpki-client