Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3130332e32332e3131362e302f32332d3234203d3e203538333835.roa
File:                     3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (raw, json)
Hash identifier:          xg8S5Jz4WdUD3Z66GOwGk02Rpx5TvYnlOCLFL6/urQw=
Subject key identifier:   24:39:A9:F3:91:04:1A:FD:F4:CE:A6:CA:BB:4D:0B:95:02:5B:2D:B3
Certificate issuer:       /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6
Certificate serial:       375A8D87D7BFB995CD12B0D6867027F7B4C95FB4
Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3130332e32332e3131362e302f32332d3234203d3e203538333835.roa
Signing time:             Sun 03 May 2026 03:09:24 +0000
ROA not before:           Sun 03 May 2026 03:04:24 +0000
ROA not after:            Sun 02 May 2027 03:09:24 +0000
asID:                     58385
IP address blocks:        103.23.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl
                          rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5a:8d:87:d7:bf:b9:95:cd:12:b0:d6:86:70:27:f7:b4:c9:5f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6
        Validity
            Not Before: May  3 03:04:24 2026 GMT
            Not After : May  2 03:09:24 2027 GMT
        Subject: CN=2439A9F391041AFDF4CEA6CABB4D0B95025B2DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:23:93:76:a1:7e:26:c5:71:ca:87:a1:98:
                    c9:95:7c:fb:03:e8:c5:15:22:e4:08:3d:ec:a8:99:
                    f1:ec:ca:c7:3b:f9:f3:ff:bc:af:15:8e:15:6d:63:
                    d0:5b:e6:77:7c:cc:20:ce:cf:ca:4a:2b:85:d0:52:
                    3f:10:ff:2a:11:3c:f2:46:39:c7:d6:f9:da:14:1b:
                    39:8a:57:86:b3:ce:56:4f:e3:4a:e9:84:e9:9e:19:
                    f5:45:ed:b8:a2:94:85:7b:2c:36:cb:1b:45:fb:33:
                    6a:c2:bd:d0:5b:2e:26:73:22:43:05:9c:54:c7:1e:
                    1c:be:ee:ac:45:dd:86:73:ec:66:cd:46:01:a5:1d:
                    f8:9e:78:ce:75:70:2b:ef:27:47:92:6c:f3:4e:cc:
                    69:e9:18:42:bf:ea:a2:1f:0c:b3:11:a9:15:ee:ba:
                    53:af:6f:a9:02:8a:b6:03:d3:09:e4:99:a8:7f:55:
                    69:7c:54:e2:e7:d8:66:d7:7c:34:a6:c9:0e:76:11:
                    ed:82:c9:3f:39:b2:df:bc:20:86:ba:55:e7:91:19:
                    0a:d3:3e:64:91:99:ea:43:bf:8e:2a:7b:fe:20:b1:
                    a9:4a:d8:f8:7f:ec:3e:b9:f2:73:cc:b4:d6:36:22:
                    53:81:e7:fb:13:f0:d4:ff:ec:3d:cb:90:c4:1a:81:
                    3a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:A9:F3:91:04:1A:FD:F4:CE:A6:CA:BB:4D:0B:95:02:5B:2D:B3
            X509v3 Authority Key Identifier:
                keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3130332e32332e3131362e302f32332d3234203d3e203538333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:70:d1:87:6d:97:64:32:d3:62:83:66:82:1f:be:cb:e6:e4:
         ea:da:bd:6f:a1:e8:12:c3:54:fa:73:ed:7b:3e:d3:6e:20:25:
         64:87:45:0e:61:c8:6f:f9:05:35:13:0d:ad:42:7a:80:75:23:
         a2:80:b1:de:22:13:0e:da:5e:21:92:e9:a6:68:fc:fe:ad:95:
         b0:6c:79:74:98:ae:cb:be:12:19:a7:69:ee:62:54:01:93:c3:
         50:12:27:aa:bc:5f:a0:0d:a8:f4:aa:9c:3d:f4:29:84:74:84:
         88:4a:d3:79:10:e8:72:56:ae:81:88:92:75:74:bc:74:ad:8d:
         ea:89:58:76:cc:c9:eb:c8:9c:02:aa:56:aa:f7:31:60:86:c2:
         97:ee:70:75:6b:fb:e9:53:d8:23:81:e9:6a:73:31:fd:69:f7:
         af:c9:61:9c:67:df:51:12:fb:77:fd:7c:b8:ad:3c:db:2e:6c:
         10:e7:bf:e1:9c:8d:56:3b:be:29:6c:3f:ec:eb:89:89:0d:48:
         55:fb:46:d2:d3:79:de:2b:b4:87:34:f7:35:cd:72:97:b9:c9:
         3d:20:fd:89:a6:7e:f9:d2:5a:5a:0c:f2:f5:80:e0:88:74:3c:
         24:77:55:cd:fa:33:08:ce:56:10:2a:5e:fe:86:1e:42:6b:cc:
         87:3f:7d:08
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUN1qNh9e/uZXNErDWhnAn97TJX7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzMDVFQjFENzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMw
RDU1NTlDNjAeFw0yNjA1MDMwMzA0MjRaFw0yNzA1MDIwMzA5MjRaMDMxMTAvBgNV
BAMTKDI0MzlBOUYzOTEwNDFBRkRGNENFQTZDQUJCNEQwQjk1MDI1QjJEQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9yOTdqF+JsVxyoehmMmVfPsD
6MUVIuQIPeyomfHsysc7+fP/vK8VjhVtY9Bb5nd8zCDOz8pKK4XQUj8Q/yoRPPJG
OcfW+doUGzmKV4azzlZP40rphOmeGfVF7biilIV7LDbLG0X7M2rCvdBbLiZzIkMF
nFTHHhy+7qxF3YZz7GbNRgGlHfieeM51cCvvJ0eSbPNOzGnpGEK/6qIfDLMRqRXu
ulOvb6kCirYD0wnkmah/VWl8VOLn2GbXfDSmyQ52Ee2CyT85st+8IIa6VeeRGQrT
PmSRmepDv44qe/4gsalK2Ph/7D658nPMtNY2IlOB5/sT8NT/7D3LkMQagTrRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJDmp85EEGv30zqbKu00LlQJbLbMwHwYDVR0j
BBgwFoAUEDBesddWuOIFlI+p2WwH0w1VWcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDM5MjUzODgtMzVjNi00MWQ3LTlkYzQtZGI0ZDExOGQxMzVhLzAvMTAzMDVFQjFE
NzU2QjhFMjA1OTQ4RkE5RDk2QzA3RDMwRDU1NTlDNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDMwNUVCMUQ3NTZCOEUyMDU5NDhGQTlEOTZDMDdEMzBENTU1
OUM2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QzOTI1Mzg4LTM1YzYtNDFkNy05
ZGM0LWRiNGQxMThkMTM1YS8wLzMxMzAzMzJlMzIzMzJlMzEzMTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzODMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcXdDANBgkqhkiG
9w0BAQsFAAOCAQEAkHDRh22XZDLTYoNmgh++y+bk6tq9b6HoEsNU+nPtez7TbiAl
ZIdFDmHIb/kFNRMNrUJ6gHUjooCx3iITDtpeIZLppmj8/q2VsGx5dJiuy74SGadp
7mJUAZPDUBInqrxfoA2o9KqcPfQphHSEiErTeRDoclaugYiSdXS8dK2N6olYdszJ
68icAqpWqvcxYIbCl+5wdWv76VPYI4HpanMx/Wn3r8lhnGffURL7d/18uK082y5s
EOe/4ZyNVju+KWw/7OuJiQ1IVftG0tN53iu0hzT3Nc1yl7nJPSD9iaZ++dJaWgzy
9YDgiHQ8JHdVzfozCM5WECpe/oYeQmvMhz99CA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:01:29 2026 by rpki-client