Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3233302e302f32342d3234203d3e203633383638.roa
File:                     3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (raw, json)
Hash identifier:          XZkVD58+fA+9TgN/E8SS+oOsYxABbo9pdQXTqmdzBkg=
Subject key identifier:   86:52:31:9A:81:EB:59:82:08:88:81:EC:34:8F:B0:13:A7:2C:B5:23
Certificate issuer:       /CN=EB314E0C129A5CAF077447531422664A0DBA21EB
Certificate serial:       79875CAEE34A61011D985BCC7348DA7D2E158EC2
Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3233302e302f32342d3234203d3e203633383638.roa
Signing time:             Sun 03 May 2026 03:09:20 +0000
ROA not before:           Sun 03 May 2026 03:04:20 +0000
ROA not after:            Sun 02 May 2027 03:09:20 +0000
asID:                     63868
IP address blocks:        103.49.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl
                          rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:87:5c:ae:e3:4a:61:01:1d:98:5b:cc:73:48:da:7d:2e:15:8e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB
        Validity
            Not Before: May  3 03:04:20 2026 GMT
            Not After : May  2 03:09:20 2027 GMT
        Subject: CN=8652319A81EB5982088881EC348FB013A72CB523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:5c:e7:81:ec:33:8b:ba:60:7d:2e:36:df:
                    17:76:b4:2e:41:e2:6e:b0:24:7e:71:ec:7d:ed:7b:
                    51:c7:c8:60:03:8a:46:a8:6b:f1:a6:4d:d0:a9:6b:
                    05:ef:7b:fb:ec:d1:97:17:c0:39:6d:00:75:71:67:
                    ba:1a:cd:50:c6:0a:bf:00:d3:eb:67:35:24:ca:eb:
                    3a:10:39:01:23:04:bc:4a:be:86:ba:fc:7c:9e:d3:
                    a0:fc:f2:37:01:00:7c:23:5e:7a:f5:1c:6d:ed:f7:
                    16:78:d2:85:de:39:1a:d0:7f:2c:1e:55:f7:4f:70:
                    42:47:25:8a:0b:b1:c0:18:f3:f1:42:82:b8:20:c5:
                    6f:be:8a:5e:19:99:a9:48:f0:9a:39:e6:c4:53:c0:
                    df:8f:17:58:9c:e4:ca:38:89:5a:ac:14:1b:89:0f:
                    33:09:d0:b7:26:62:60:73:cc:2a:bc:e3:af:de:5e:
                    c7:9a:37:bc:c7:9d:7d:94:ed:0e:19:22:4f:55:5c:
                    81:77:bc:36:35:a5:6d:ca:16:ed:6c:81:92:15:9a:
                    c1:a0:b8:62:85:22:9d:d7:72:fa:80:b5:7e:47:1b:
                    9d:9d:58:fe:ee:4f:ac:ce:0a:a8:e1:e3:2e:15:24:
                    9f:f0:57:ab:ca:48:1f:5f:f4:fe:e9:39:06:36:67:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:31:9A:81:EB:59:82:08:88:81:EC:34:8F:B0:13:A7:2C:B5:23
            X509v3 Authority Key Identifier:
                keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3233302e302f32342d3234203d3e203633383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:65:cb:c3:08:c8:68:d5:62:16:bb:18:b3:0f:88:bd:7d:f0:
         37:26:df:9b:96:bf:75:41:f4:ce:2e:85:09:34:92:b6:8c:5b:
         31:10:7a:ec:1d:a6:cc:09:ef:35:ca:2d:f4:59:a0:17:c0:88:
         39:8d:82:ad:27:60:e9:bd:6a:aa:af:4a:f0:28:16:5c:c0:51:
         11:bd:73:a7:c3:5d:14:41:20:df:9e:f5:c6:b9:30:64:a8:c9:
         e1:fa:a6:e3:86:c2:82:5e:2e:44:66:50:51:eb:e4:cb:2f:40:
         3d:34:87:78:5c:4b:cb:63:a6:84:ce:b2:89:0f:65:c1:f5:b8:
         cc:68:33:a6:24:9b:c5:dc:66:d8:44:08:01:5a:0d:bc:bb:6d:
         fd:16:2e:9f:2f:7e:10:42:a3:9c:70:55:08:30:85:86:dc:34:
         4a:8f:81:6b:95:a2:cc:bc:4a:b9:25:54:b4:c9:6d:52:32:d6:
         4b:39:9a:7d:22:7b:a6:9d:f5:35:2c:06:8d:c9:d5:85:29:1b:
         c7:f2:e7:87:a5:b2:cf:ab:4f:af:cc:3d:07:dd:8f:50:81:a9:
         40:b6:33:a3:4d:58:2e:2e:7c:94:28:51:8a:5a:75:f7:a0:2f:
         0a:78:5a:8a:ea:e1:1a:01:27:bb:78:b6:04:35:57:84:1b:10:
         24:86:1c:07
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUeYdcruNKYQEdmFvMc0jafS4VjsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw
REJBMjFFQjAeFw0yNjA1MDMwMzA0MjBaFw0yNzA1MDIwMzA5MjBaMDMxMTAvBgNV
BAMTKDg2NTIzMTlBODFFQjU5ODIwODg4ODFFQzM0OEZCMDEzQTcyQ0I1MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2I1zngewzi7pgfS423xd2tC5B
4m6wJH5x7H3te1HHyGADikaoa/GmTdCpawXve/vs0ZcXwDltAHVxZ7oazVDGCr8A
0+tnNSTK6zoQOQEjBLxKvoa6/Hye06D88jcBAHwjXnr1HG3t9xZ40oXeORrQfywe
VfdPcEJHJYoLscAY8/FCgrggxW++il4ZmalI8Jo55sRTwN+PF1ic5Mo4iVqsFBuJ
DzMJ0LcmYmBzzCq846/eXseaN7zHnX2U7Q4ZIk9VXIF3vDY1pW3KFu1sgZIVmsGg
uGKFIp3XcvqAtX5HG52dWP7uT6zOCqjh4y4VJJ/wV6vKSB9f9P7pOQY2Z943AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUhlIxmoHrWYIIiIHsNI+wE6cstSMwHwYDVR0j
BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx
MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy
MUVCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QzNzE5MjlkLWMzZDAtNGRhYS1i
NWZkLWEyNDk1NjBkNWQwNC8wLzMxMzAzMzJlMzQzOTJlMzIzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzMzM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcx5jANBgkqhkiG
9w0BAQsFAAOCAQEARmXLwwjIaNViFrsYsw+IvX3wNybfm5a/dUH0zi6FCTSStoxb
MRB67B2mzAnvNcot9FmgF8CIOY2CrSdg6b1qqq9K8CgWXMBREb1zp8NdFEEg3571
xrkwZKjJ4fqm44bCgl4uRGZQUevkyy9APTSHeFxLy2OmhM6yiQ9lwfW4zGgzpiSb
xdxm2EQIAVoNvLtt/RYuny9+EEKjnHBVCDCFhtw0So+Ba5WizLxKuSVUtMltUjLW
SzmafSJ7pp31NSwGjcnVhSkbx/Lnh6Wyz6tPr8w9B92PUIGpQLYzo01YLi58lChR
ilp196AvCnhaiurhGgEnu3i2BDVXhBsQJIYcBw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:42 2026 by rpki-client