Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa
File:                     3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (raw, json)
Hash identifier:          8b7JHKN9jGh8XEFxRZEHDDGBc52rA0ln90frZNev8wg=
Subject key identifier:   17:01:93:2E:DF:F8:05:00:E5:26:EF:3D:3C:9D:3F:8D:C7:1A:88:58
Certificate issuer:       /CN=4032440C7B463FEA0D28A5D4682DFA954E77451E
Certificate serial:       6FDCDC41ECC8FF5EEA8B809BF388790ED4B78DF9
Authority key identifier: 40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa
Signing time:             Sun 03 May 2026 03:10:04 +0000
ROA not before:           Sun 03 May 2026 03:05:04 +0000
ROA not after:            Sun 02 May 2027 03:10:04 +0000
asID:                     151577
IP address blocks:        103.76.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl
                          rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dc:dc:41:ec:c8:ff:5e:ea:8b:80:9b:f3:88:79:0e:d4:b7:8d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4032440C7B463FEA0D28A5D4682DFA954E77451E
        Validity
            Not Before: May  3 03:05:04 2026 GMT
            Not After : May  2 03:10:04 2027 GMT
        Subject: CN=1701932EDFF80500E526EF3D3C9D3F8DC71A8858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:a7:f1:d4:73:41:0f:f5:05:95:2f:cc:10:
                    c8:a9:d5:c6:a6:58:78:f3:46:d1:15:ab:08:3b:db:
                    4e:35:69:c0:6e:b8:de:d9:d6:c9:ad:98:98:76:a8:
                    15:d6:71:d2:1f:98:6c:0f:87:cb:3e:f3:fc:c5:8f:
                    66:d1:f6:bf:43:61:19:15:b1:bc:0c:7f:57:e0:e3:
                    31:79:af:ed:f4:4f:77:02:40:58:88:d6:64:eb:8e:
                    c5:64:f7:3f:e0:c8:12:76:57:d2:cc:dc:09:87:96:
                    b4:78:4d:6c:c2:86:6a:7d:e7:9d:93:67:2a:13:aa:
                    0c:97:17:34:9e:99:28:2e:62:4b:53:31:2a:dd:06:
                    50:d2:56:08:0f:bf:a7:dc:d6:bf:54:ae:aa:15:ab:
                    3e:64:6f:35:cc:86:3c:14:2f:dc:b8:0f:3f:28:fc:
                    f3:52:00:fe:71:e7:41:1c:4a:47:11:78:c7:76:6a:
                    94:55:75:0d:50:66:dd:44:5c:fa:67:ee:27:84:21:
                    48:8a:8a:12:c7:7f:0c:0b:df:17:4f:f4:32:a2:e1:
                    ef:2c:55:e7:c9:40:c6:e7:c7:40:d5:ef:7b:11:16:
                    6b:4d:76:e0:fa:0c:a0:89:8c:a0:1c:7c:29:79:c1:
                    af:e8:1a:17:53:a1:ce:d8:d1:3a:dc:c8:80:97:ec:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:01:93:2E:DF:F8:05:00:E5:26:EF:3D:3C:9D:3F:8D:C7:1A:88:58
            X509v3 Authority Key Identifier:
                keyid:40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:41:eb:a6:91:13:03:58:a6:16:e0:b9:48:63:e0:8b:a5:be:
         70:ce:2b:06:44:3b:3a:f2:b2:c8:3a:75:b4:41:3f:18:07:03:
         98:9f:be:1c:79:57:0b:d0:ee:ca:a8:d5:80:8d:72:26:2e:c7:
         cc:c5:c0:6a:84:22:ce:9b:8a:ad:3e:fb:a7:97:d9:6f:71:de:
         ae:9d:ee:e9:0c:1f:99:f4:27:fe:cc:ff:28:5b:96:2e:15:48:
         7d:11:98:9f:ee:e9:6c:16:0a:ae:bb:1f:44:9f:cc:dc:58:05:
         3c:36:d3:10:e6:ac:6f:77:d6:1e:ec:80:84:91:22:22:68:1b:
         b1:bc:64:0e:eb:49:34:1d:34:e8:2c:b1:8e:27:b3:75:55:d9:
         19:e4:d4:bf:2e:04:7d:35:9f:39:0e:22:05:97:ee:c4:de:1e:
         5d:47:67:59:9f:68:3c:e0:88:bf:8b:81:9f:48:53:68:f2:85:
         e7:2b:70:6d:10:db:45:7a:34:83:79:c4:2f:5a:c0:22:d5:bf:
         d4:f7:e5:43:e8:6c:32:ca:53:7b:3e:38:2b:fe:ff:92:a5:26:
         12:ab:5a:71:4a:22:30:ca:e1:f1:43:84:e1:0d:56:8c:01:db:
         bc:98:2f:19:c4:2a:0e:b3:1d:a2:33:c6:d3:1c:06:fa:a2:fa:
         e6:94:bb:f7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUb9zcQezI/17qi4Cb84h5DtS3jfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0
RTc3NDUxRTAeFw0yNjA1MDMwMzA1MDRaFw0yNzA1MDIwMzEwMDRaMDMxMTAvBgNV
BAMTKDE3MDE5MzJFREZGODA1MDBFNTI2RUYzRDNDOUQzRjhEQzcxQTg4NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaKfx1HNBD/UFlS/MEMip1cam
WHjzRtEVqwg72041acBuuN7Z1smtmJh2qBXWcdIfmGwPh8s+8/zFj2bR9r9DYRkV
sbwMf1fg4zF5r+30T3cCQFiI1mTrjsVk9z/gyBJ2V9LM3AmHlrR4TWzChmp9552T
ZyoTqgyXFzSemSguYktTMSrdBlDSVggPv6fc1r9UrqoVqz5kbzXMhjwUL9y4Dz8o
/PNSAP5x50EcSkcReMd2apRVdQ1QZt1EXPpn7ieEIUiKihLHfwwL3xdP9DKi4e8s
VefJQMbnx0DV73sRFmtNduD6DKCJjKAcfCl5wa/oGhdToc7Y0TrcyICX7H4bAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFwGTLt/4BQDlJu89PJ0/jccaiFgwHwYDVR0j
BBgwFoAUQDJEDHtGP+oNKKXUaC36lU53RR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDcyMGNlNzYtZGI3NS00NjUxLTg1YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3
QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0RTc3NDUxRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MDMyNDQwQzdCNDYzRkVBMEQyOEE1RDQ2ODJERkE5NTRFNzc0
NTFFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q3MjBjZTc2LWRiNzUtNDY1MS04
NWIwLTBiZmIxOGUwYjE3NS8wLzMxMzAzMzJlMzczNjJlMzEzMDM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0xqMA0GCSqG
SIb3DQEBCwUAA4IBAQA1QeumkRMDWKYW4LlIY+CLpb5wzisGRDs68rLIOnW0QT8Y
BwOYn74ceVcL0O7KqNWAjXImLsfMxcBqhCLOm4qtPvunl9lvcd6une7pDB+Z9Cf+
zP8oW5YuFUh9EZif7ulsFgquux9En8zcWAU8NtMQ5qxvd9Ye7ICEkSIiaBuxvGQO
60k0HTToLLGOJ7N1VdkZ5NS/LgR9NZ85DiIFl+7E3h5dR2dZn2g84Ii/i4GfSFNo
8oXnK3BtENtFejSDecQvWsAi1b/U9+VD6GwyylN7Pjgr/v+SpSYSq1pxSiIwyuHx
Q4ThDVaMAdu8mC8ZxCoOsx2iM8bTHAb6ovrmlLv3
-----END CERTIFICATE-----
Generated at Wed May 13 03:48:15 2026 by rpki-client