Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa
File:                     3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (raw, json)
Hash identifier:          1ahR27z0iK0sLUuSdSvJqFvWkpicPRlm9gEDg/UGewo=
Subject key identifier:   4D:F9:DA:03:95:63:93:84:B8:38:DA:46:45:B1:FA:5A:42:8E:7B:FD
Certificate issuer:       /CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C
Certificate serial:       40545A3C5E50EDF3FD9DD11C20765E87C30FC215
Authority key identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa
Signing time:             Sun 03 May 2026 03:10:47 +0000
ROA not before:           Sun 03 May 2026 03:05:47 +0000
ROA not after:            Sun 02 May 2027 03:10:47 +0000
asID:                     59288
IP address blocks:        103.229.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl
                          rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:54:5a:3c:5e:50:ed:f3:fd:9d:d1:1c:20:76:5e:87:c3:0f:c2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C
        Validity
            Not Before: May  3 03:05:47 2026 GMT
            Not After : May  2 03:10:47 2027 GMT
        Subject: CN=4DF9DA0395639384B838DA4645B1FA5A428E7BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:73:2f:7d:da:19:60:c7:74:0b:ef:5f:e4:73:
                    35:80:a7:d5:2d:1f:59:29:c8:9f:fb:6c:72:bc:ce:
                    e4:c9:bb:81:e8:e8:45:7f:fd:1f:31:d1:c2:04:68:
                    db:2f:cf:3a:1d:73:87:e9:71:86:9d:69:16:d8:c0:
                    1b:27:2b:54:3a:f7:4b:76:fa:5c:d9:60:20:25:35:
                    a8:4d:70:c5:e5:69:63:eb:33:99:1d:d7:96:0b:74:
                    a1:fb:fb:57:43:8b:91:1f:f3:33:7e:9b:84:fd:79:
                    0e:66:8d:70:ae:87:21:23:f9:c7:76:d5:ab:8c:0f:
                    92:0e:e1:5e:d5:c8:e0:9a:58:7c:d8:e6:23:56:b7:
                    f9:57:54:84:f3:42:9a:54:a7:99:3c:f2:2a:ff:a6:
                    ac:cb:da:51:b1:65:1f:72:c9:49:54:78:19:10:9a:
                    71:47:b7:f7:87:fb:91:d8:89:55:58:10:aa:60:1a:
                    b2:ad:90:c6:1a:ef:98:1a:c4:16:a3:b7:8b:46:5a:
                    a8:5f:a6:0b:c3:e9:1e:2a:92:0d:3a:0f:47:46:8a:
                    82:5f:ed:0d:c4:83:a4:0b:fb:90:78:c5:9f:78:f8:
                    9c:22:d7:ef:64:3d:6a:23:09:ed:f4:9a:71:48:01:
                    96:6d:0a:67:31:2f:35:b2:b5:59:fa:8f:57:eb:31:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:DA:03:95:63:93:84:B8:38:DA:46:45:B1:FA:5A:42:8E:7B:FD
            X509v3 Authority Key Identifier:
                keyid:0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:11:c1:2e:bb:e6:f2:22:4b:9d:1d:44:4f:df:8c:d8:e2:48:
         47:3d:38:ac:2a:28:9e:f9:99:6e:ce:7c:12:ef:49:bc:f3:c6:
         01:ca:b3:7f:06:a1:d4:93:06:8a:e7:d0:0c:80:a1:bb:33:79:
         32:55:55:b1:f2:8f:63:b0:b2:9f:57:51:34:a7:81:e9:3a:a5:
         42:92:f2:c9:4e:40:28:98:ba:83:9a:8d:68:9e:b2:bb:c0:82:
         0f:94:f9:74:03:a0:24:28:34:79:73:ca:a7:54:88:08:da:63:
         44:61:b8:8f:6c:9a:89:2b:83:30:49:0c:3f:f7:dc:a7:b0:ed:
         13:05:a1:1a:19:ab:d6:30:09:a7:89:2d:64:19:c4:33:83:17:
         68:f0:c1:34:7e:fa:2f:33:86:d5:b9:18:ac:69:82:13:7c:b2:
         5a:5a:84:27:30:d3:dc:bf:8c:cc:5e:d0:ad:36:74:6d:95:20:
         8f:b1:83:14:fe:2f:43:80:52:aa:7f:0b:6c:64:78:4d:92:1a:
         7d:ae:38:93:66:e5:45:0b:69:aa:44:42:c2:4d:f9:bf:72:69:
         4a:69:6c:58:3a:e3:43:76:29:7c:ec:5a:10:5f:77:67:5d:d0:
         bc:86:0f:56:d4:38:b0:54:fc:e9:05:81:68:40:73:e6:6d:44:
         63:3b:72:f1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQFRaPF5Q7fP9ndEcIHZeh8MPwhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMz
QUZFN0EzQzAeFw0yNjA1MDMwMzA1NDdaFw0yNzA1MDIwMzEwNDdaMDMxMTAvBgNV
BAMTKDRERjlEQTAzOTU2MzkzODRCODM4REE0NjQ1QjFGQTVBNDI4RTdCRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccy992hlgx3QL71/kczWAp9Ut
H1kpyJ/7bHK8zuTJu4Ho6EV//R8x0cIEaNsvzzodc4fpcYadaRbYwBsnK1Q690t2
+lzZYCAlNahNcMXlaWPrM5kd15YLdKH7+1dDi5Ef8zN+m4T9eQ5mjXCuhyEj+cd2
1auMD5IO4V7VyOCaWHzY5iNWt/lXVITzQppUp5k88ir/pqzL2lGxZR9yyUlUeBkQ
mnFHt/eH+5HYiVVYEKpgGrKtkMYa75gaxBajt4tGWqhfpgvD6R4qkg06D0dGioJf
7Q3Eg6QL+5B4xZ94+Jwi1+9kPWojCe30mnFIAZZtCmcxLzWytVn6j1frMa2DAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTfnaA5Vjk4S4ONpGRbH6WkKOe/0wHwYDVR0j
BBgwFoAUDc7yEOay2cVc/9OxXl6UDDr+ejwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBF
NkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMzQUZFN0EzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wRENFRjIxMEU2QjJEOUM1NUNGRkQzQjE1RTVFOTQwQzNBRkU3
QTNDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q5M2ViOGY2LWJiNmMtNGVhNy04
NmRmLWIyNDNjNTE2NGQyMi8wLzMxMzAzMzJlMzIzMjM5MmUzMTM2MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM5MzIzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+WgMA0GCSqG
SIb3DQEBCwUAA4IBAQAxEcEuu+byIkudHURP34zY4khHPTisKiie+ZluznwS70m8
88YByrN/BqHUkwaK59AMgKG7M3kyVVWx8o9jsLKfV1E0p4HpOqVCkvLJTkAomLqD
mo1onrK7wIIPlPl0A6AkKDR5c8qnVIgI2mNEYbiPbJqJK4MwSQw/99ynsO0TBaEa
GavWMAmniS1kGcQzgxdo8ME0fvovM4bVuRisaYITfLJaWoQnMNPcv4zMXtCtNnRt
lSCPsYMU/i9DgFKqfwtsZHhNkhp9rjiTZuVFC2mqRELCTfm/cmlKaWxYOuNDdil8
7FoQX3dnXdC8hg9W1DiwVPzpBYFoQHPmbURjO3Lx
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:58 2026 by rpki-client