Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa
File:                     3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (raw, json)
Hash identifier:          aWv2LNdALgBBdR5J3vxMwq5LFZy/FvWsDrFbKxxFcx4=
Subject key identifier:   A9:51:F7:B2:04:FA:C9:1C:23:60:D0:86:39:6A:F6:31:C6:EE:DD:55
Certificate issuer:       /CN=FBA3638DA562505698B924E173281E46359B1617
Certificate serial:       0B9F1FCF3B4166B30C8060B16BDC58BC3E760844
Authority key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa
Signing time:             Sun 03 May 2026 03:09:42 +0000
ROA not before:           Sun 03 May 2026 03:04:42 +0000
ROA not after:            Sun 02 May 2027 03:09:42 +0000
asID:                     141910
IP address blocks:        103.164.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
                          rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9f:1f:cf:3b:41:66:b3:0c:80:60:b1:6b:dc:58:bc:3e:76:08:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBA3638DA562505698B924E173281E46359B1617
        Validity
            Not Before: May  3 03:04:42 2026 GMT
            Not After : May  2 03:09:42 2027 GMT
        Subject: CN=A951F7B204FAC91C2360D086396AF631C6EEDD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:07:3c:2e:2f:cb:21:b6:fb:f7:9c:c0:5c:
                    c0:2c:51:2a:97:fc:8e:94:9a:ac:62:49:14:c1:b5:
                    33:df:5d:71:b0:be:1f:6c:86:aa:ba:e4:d3:a5:6d:
                    09:48:35:9f:b3:a1:d6:4b:a5:05:62:be:3d:00:80:
                    7f:1f:3a:f9:e1:da:cd:66:39:f2:37:5b:a5:0d:45:
                    d9:d2:ca:89:e2:d9:74:63:4a:05:ed:04:df:52:e6:
                    02:de:da:73:41:67:0f:5a:b0:f4:52:90:43:7c:48:
                    27:33:6f:06:3a:5c:9f:ef:59:15:51:6c:0d:c4:75:
                    af:2f:a9:d2:a3:60:20:19:f9:db:25:48:ad:4c:3c:
                    cb:95:d4:75:57:0f:9a:df:24:11:90:17:3c:99:21:
                    e6:19:b0:96:db:f6:e7:ce:04:4e:12:9f:5c:b7:60:
                    3f:5a:ad:bf:e1:65:75:64:4d:63:c5:09:04:76:ff:
                    5f:d3:24:38:e2:6c:94:04:c6:8f:bf:e7:ee:ac:5b:
                    7d:61:b1:19:17:a1:87:49:66:b0:66:27:99:00:8f:
                    7b:ca:e3:44:8e:19:46:16:a7:52:a5:cd:17:ad:95:
                    1b:8c:49:0d:dc:18:a3:cd:5e:32:48:29:19:f1:1a:
                    0a:08:4a:26:29:b5:35:d5:ad:8a:2a:4b:8c:b6:18:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:F7:B2:04:FA:C9:1C:23:60:D0:86:39:6A:F6:31:C6:EE:DD:55
            X509v3 Authority Key Identifier:
                keyid:FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:30:21:41:91:af:5f:b2:0e:30:28:d3:ff:15:17:2b:5c:04:
         b2:c9:01:84:22:a8:7f:4c:44:c5:c3:9d:2e:e1:9a:c9:68:1c:
         5e:34:a3:fc:68:4f:72:2c:a1:75:35:20:b7:b0:61:19:9d:9f:
         42:3c:ce:af:c1:e8:e0:3f:90:5a:e3:48:53:a2:8c:bb:31:7d:
         fc:00:1c:9b:c4:04:54:81:c6:ee:ce:d0:f8:ed:fd:0a:e9:47:
         26:d2:4d:c2:93:70:5e:91:bf:10:fe:ac:e7:79:6e:d5:85:2b:
         b7:72:6c:ce:52:15:11:04:6e:d1:84:7a:1c:8e:f2:c5:4d:33:
         56:04:02:17:d4:ce:47:e3:ab:69:e8:93:e9:37:be:54:e3:76:
         77:c6:62:f7:28:08:43:91:7e:7a:99:a1:a3:ae:45:cb:2e:ff:
         cf:31:58:39:a2:ce:3e:8c:a9:af:41:97:93:99:9d:c4:dd:e5:
         c1:73:31:55:e2:84:2c:3c:26:0a:e8:5b:0f:b5:a8:70:bc:5d:
         93:06:f2:c0:36:4b:f8:bb:0f:c4:d7:70:1d:2c:35:0b:3a:ab:
         8e:aa:e2:34:77:19:6b:66:2a:4e:45:2d:0d:b5:d6:9b:b2:35:
         bf:58:5f:33:16:49:f7:5a:17:9e:37:18:2e:dc:69:56:a5:e3:
         08:f3:84:ba
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUC58fzztBZrMMgGCxa9xYvD52CEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJBMzYzOERBNTYyNTA1Njk4QjkyNEUxNzMyODFFNDYz
NTlCMTYxNzAeFw0yNjA1MDMwMzA0NDJaFw0yNzA1MDIwMzA5NDJaMDMxMTAvBgNV
BAMTKEE5NTFGN0IyMDRGQUM5MUMyMzYwRDA4NjM5NkFGNjMxQzZFRURENTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Qwc8Li/LIbb795zAXMAsUSqX
/I6UmqxiSRTBtTPfXXGwvh9shqq65NOlbQlINZ+zodZLpQVivj0AgH8fOvnh2s1m
OfI3W6UNRdnSyoni2XRjSgXtBN9S5gLe2nNBZw9asPRSkEN8SCczbwY6XJ/vWRVR
bA3Eda8vqdKjYCAZ+dslSK1MPMuV1HVXD5rfJBGQFzyZIeYZsJbb9ufOBE4Sn1y3
YD9arb/hZXVkTWPFCQR2/1/TJDjibJQExo+/5+6sW31hsRkXoYdJZrBmJ5kAj3vK
40SOGUYWp1KlzRetlRuMSQ3cGKPNXjJIKRnxGgoISiYptTXVrYoqS4y2GHZPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqVH3sgT6yRwjYNCGOWr2Mcbu3VUwHwYDVR0j
BBgwFoAU+6NjjaViUFaYuSThcygeRjWbFhcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDUwMWNkZjktNTJlMS00Yzk4LTlhYjMtYWZiNzBmYWMzNzdjLzAvRkJBMzYzOERB
NTYyNTA1Njk4QjkyNEUxNzMyODFFNDYzNTlCMTYxNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQkEzNjM4REE1NjI1MDU2OThCOTI0RTE3MzI4MUU0NjM1OUIx
NjE3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q1MDFjZGY5LTUyZTEtNGM5OC05
YWIzLWFmYjcwZmFjMzc3Yy8wLzMxMzAzMzJlMzEzNjM0MmUzNTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6Q6MA0GCSqG
SIb3DQEBCwUAA4IBAQCuMCFBka9fsg4wKNP/FRcrXASyyQGEIqh/TETFw50u4ZrJ
aBxeNKP8aE9yLKF1NSC3sGEZnZ9CPM6vwejgP5Ba40hTooy7MX38ABybxARUgcbu
ztD47f0K6Ucm0k3Ck3Bekb8Q/qzneW7VhSu3cmzOUhURBG7RhHocjvLFTTNWBAIX
1M5H46tp6JPpN75U43Z3xmL3KAhDkX56maGjrkXLLv/PMVg5os4+jKmvQZeTmZ3E
3eXBczFV4oQsPCYK6FsPtahwvF2TBvLANkv4uw/E13AdLDULOquOquI0dxlrZipO
RS0NtdabsjW/WF8zFkn3WheeNxgu3GlWpeMI84S6
-----END CERTIFICATE-----
Generated at Wed May 13 08:10:27 2026 by rpki-client