Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
File:                     3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (raw, json)
Hash identifier:          juymzIKjppYynqQQ7FDS68cI4msLoCrbwsScpp65U+4=
Subject key identifier:   1A:72:B0:85:8F:EE:23:A6:AD:A3:04:CE:25:46:99:FB:CB:AA:EF:26
Certificate issuer:       /CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6
Certificate serial:       5333A5F54A21255DB2CCACB56D32E292EEDA819E
Authority key identifier: 0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
Signing time:             Sun 03 May 2026 03:10:40 +0000
ROA not before:           Sun 03 May 2026 03:05:40 +0000
ROA not after:            Sun 02 May 2027 03:10:40 +0000
asID:                     141940
IP address blocks:        103.166.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl
                          rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:33:a5:f5:4a:21:25:5d:b2:cc:ac:b5:6d:32:e2:92:ee:da:81:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3CCC7AB1675820A7FDBCCF4502971C50B529F6
        Validity
            Not Before: May  3 03:05:40 2026 GMT
            Not After : May  2 03:10:40 2027 GMT
        Subject: CN=1A72B0858FEE23A6ADA304CE254699FBCBAAEF26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:30:44:03:fe:d2:1e:0b:82:a9:10:5d:91:
                    81:86:f0:25:0f:7f:8d:e8:33:53:07:4c:02:09:af:
                    be:58:d9:4e:24:ac:3a:4f:bf:91:a7:32:7e:83:5b:
                    a5:a5:bb:81:ad:90:6e:61:f3:42:d8:a5:88:f3:6a:
                    d7:b7:51:1e:77:90:f5:c2:31:d1:e3:6c:35:5a:ba:
                    db:31:38:06:4d:36:9e:ef:16:f8:09:81:19:96:ef:
                    5f:5e:f2:5b:a3:6a:af:12:15:eb:c5:b5:1f:57:f3:
                    8f:9e:42:ad:71:78:79:58:85:08:ae:48:3f:d9:b9:
                    7e:6c:4a:23:fd:ec:e3:76:d6:60:74:8e:2b:e9:e9:
                    90:1c:99:fb:b7:ea:95:99:38:58:76:0f:92:61:bd:
                    85:4e:d1:45:04:8a:31:65:e2:26:03:c9:b5:80:04:
                    ce:4c:d3:fc:17:20:ee:b4:bb:5e:7e:9c:3b:36:a2:
                    c8:e2:a2:56:88:2c:ea:f3:04:26:a2:fc:23:89:cb:
                    f4:35:8f:c1:c7:fb:44:87:00:04:f6:a2:4c:cb:5c:
                    27:6c:95:b7:a3:ef:53:1b:e8:b9:f8:c0:d7:43:88:
                    ee:e5:83:e3:ce:37:3b:f3:18:ce:e9:64:9f:a1:3b:
                    ff:69:fe:04:a9:3e:b9:06:a4:f7:81:9c:58:c7:a7:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:B0:85:8F:EE:23:A6:AD:A3:04:CE:25:46:99:FB:CB:AA:EF:26
            X509v3 Authority Key Identifier:
                keyid:0D:3C:CC:7A:B1:67:58:20:A7:FD:BC:CF:45:02:97:1C:50:B5:29:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D3CCC7AB1675820A7FDBCCF4502971C50B529F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:97:79:50:89:ef:d7:19:33:a8:f6:26:d7:c7:9e:49:15:ff:
         2c:e6:86:ad:69:f8:32:9a:18:8c:17:bb:e4:f3:a4:6e:de:1a:
         6b:b8:7f:22:ab:47:cb:9e:68:5d:ba:9e:e6:a9:cf:27:c6:57:
         35:cc:37:5c:07:57:4f:06:57:e3:c3:72:a4:f5:cd:f3:d0:1e:
         15:2f:d1:d6:e4:07:67:6d:b5:92:29:34:22:36:c0:65:14:c6:
         23:ce:5d:bb:d9:77:eb:85:d1:cc:6c:5b:2b:9d:92:5a:ac:80:
         0b:b5:73:64:34:76:a7:7b:a2:89:05:7c:5a:97:e7:8f:8e:76:
         0d:65:d4:b6:67:44:b7:a0:66:76:be:53:f7:4f:f4:55:96:53:
         9f:d9:77:c2:c3:c1:ed:e4:93:14:7c:ff:60:e0:78:d3:0b:31:
         4d:53:b7:8b:dc:cd:75:0a:f1:e5:e0:51:3e:3c:38:32:5a:88:
         ac:7d:b6:89:a8:ab:47:10:5f:79:6d:6a:a5:15:8e:91:a5:65:
         d9:a0:27:ef:f9:89:a6:47:13:32:1e:43:06:90:89:fc:2a:33:
         ec:da:66:ea:01:25:cc:0d:8c:e5:d1:b5:bb:cd:42:db:06:5d:
         25:bb:6b:8c:38:0c:26:c4:3e:af:b2:b8:d1:4b:de:4a:ea:97:
         26:de:7e:14
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUzOl9UohJV2yzKy1bTLiku7agZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQzQ0NDN0FCMTY3NTgyMEE3RkRCQ0NGNDUwMjk3MUM1
MEI1MjlGNjAeFw0yNjA1MDMwMzA1NDBaFw0yNzA1MDIwMzEwNDBaMDMxMTAvBgNV
BAMTKDFBNzJCMDg1OEZFRTIzQTZBREEzMDRDRTI1NDY5OUZCQ0JBQUVGMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5TBEA/7SHguCqRBdkYGG8CUP
f43oM1MHTAIJr75Y2U4krDpPv5GnMn6DW6Wlu4GtkG5h80LYpYjzate3UR53kPXC
MdHjbDVautsxOAZNNp7vFvgJgRmW719e8lujaq8SFevFtR9X84+eQq1xeHlYhQiu
SD/ZuX5sSiP97ON21mB0jivp6ZAcmfu36pWZOFh2D5JhvYVO0UUEijFl4iYDybWA
BM5M0/wXIO60u15+nDs2osjiolaILOrzBCai/COJy/Q1j8HH+0SHAAT2okzLXCds
lbej71Mb6Ln4wNdDiO7lg+PONzvzGM7pZJ+hO/9p/gSpPrkGpPeBnFjHp2UlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUGnKwhY/uI6atowTOJUaZ+8uq7yYwHwYDVR0j
BBgwFoAUDTzMerFnWCCn/bzPRQKXHFC1KfYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDkwOTNhZDYtYjExNS00ZjEwLTg4ZDctNmU1N2RjZmQzMjIzLzAvMEQzQ0NDN0FC
MTY3NTgyMEE3RkRCQ0NGNDUwMjk3MUM1MEI1MjlGNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wRDNDQ0M3QUIxNjc1ODIwQTdGREJDQ0Y0NTAyOTcxQzUwQjUy
OUY2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q5MDkzYWQ2LWIxMTUtNGYxMC04
OGQ3LTZlNTdkY2ZkMzIyMy8wLzMxMzAzMzJlMzEzNjM2MmUzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6YeMA0GCSqG
SIb3DQEBCwUAA4IBAQB0l3lQie/XGTOo9ibXx55JFf8s5oatafgymhiMF7vk86Ru
3hpruH8iq0fLnmhdup7mqc8nxlc1zDdcB1dPBlfjw3Kk9c3z0B4VL9HW5AdnbbWS
KTQiNsBlFMYjzl272XfrhdHMbFsrnZJarIALtXNkNHane6KJBXxal+ePjnYNZdS2
Z0S3oGZ2vlP3T/RVllOf2XfCw8Ht5JMUfP9g4HjTCzFNU7eL3M11CvHl4FE+PDgy
WoisfbaJqKtHEF95bWqlFY6RpWXZoCfv+YmmRxMyHkMGkIn8KjPs2mbqASXMDYzl
0bW7zULbBl0lu2uMOAwmxD6vsrjRS95K6pcm3n4U
-----END CERTIFICATE-----
Generated at Wed May 13 11:55:41 2026 by rpki-client