Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa
File:                     3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (raw, json)
Hash identifier:          J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=
Subject key identifier:   9F:25:3B:3D:3D:7D:C2:C8:43:CF:10:DD:00:B4:CF:29:F8:22:7E:63
Certificate issuer:       /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618
Certificate serial:       65836A883890D4F163A2DF3342B2C288E53E00A8
Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa
Signing time:             Sun 03 May 2026 03:11:44 +0000
ROA not before:           Sun 03 May 2026 03:06:44 +0000
ROA not after:            Sun 02 May 2027 03:11:44 +0000
asID:                     141595
IP address blocks:        103.172.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl
                          rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:83:6a:88:38:90:d4:f1:63:a2:df:33:42:b2:c2:88:e5:3e:00:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618
        Validity
            Not Before: May  3 03:06:44 2026 GMT
            Not After : May  2 03:11:44 2027 GMT
        Subject: CN=9F253B3D3D7DC2C843CF10DD00B4CF29F8227E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:02:c2:80:33:b5:5b:f1:6f:fc:c2:75:07:
                    fd:f8:55:a0:66:9b:23:23:45:28:37:fc:ed:f6:07:
                    8c:41:60:e2:ee:d8:e6:1f:de:21:99:3e:ae:6a:3a:
                    cb:5f:b5:f6:85:3d:65:75:0b:e0:80:b0:06:15:4f:
                    2f:cc:52:7b:46:ad:6f:27:59:ff:97:1b:97:17:4e:
                    95:b6:0c:58:2d:a8:c9:39:15:4f:fd:3d:6d:e0:eb:
                    ac:81:c8:3b:64:cb:df:ab:13:d3:e6:de:63:01:2e:
                    88:33:82:41:85:4f:3b:65:7d:9d:a9:40:08:bd:b7:
                    48:4b:9d:d4:12:a1:79:91:46:8f:ab:af:fe:c1:b5:
                    04:81:ed:d9:df:aa:89:90:bb:fd:9b:6b:c9:79:7b:
                    92:ed:fe:65:20:6e:56:da:a7:a1:27:3b:1a:2f:99:
                    f6:28:89:a8:9c:0e:13:df:b6:d8:a4:6b:df:df:d2:
                    18:11:f9:63:01:25:a0:ba:f8:5b:db:fb:c1:42:d5:
                    4a:06:72:43:ef:91:59:d1:db:62:4f:a5:be:47:eb:
                    57:b1:2e:30:16:32:14:fb:14:e9:32:32:4f:49:67:
                    54:5c:79:41:e1:60:85:0d:29:69:5b:93:fd:84:0f:
                    66:9b:c7:f4:b6:d5:0d:0b:34:2f:30:22:2d:0e:b2:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:25:3B:3D:3D:7D:C2:C8:43:CF:10:DD:00:B4:CF:29:F8:22:7E:63
            X509v3 Authority Key Identifier:
                keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f1:38:c8:74:91:e1:b3:87:70:d9:94:c1:0b:70:a6:63:65:
         ae:28:51:59:19:08:6a:b2:87:89:39:f0:ff:8d:88:f0:62:16:
         06:c7:e3:6e:25:3b:1d:f5:48:d9:99:e5:ba:df:be:0c:35:6c:
         5f:43:f4:6f:cb:82:25:06:4c:70:a1:e9:79:7e:19:4f:4d:55:
         09:89:52:58:16:a6:aa:f7:88:83:07:d8:2d:0a:38:05:a1:b4:
         ed:fb:3a:88:f7:ca:44:0c:e1:92:9c:97:77:07:a0:f4:c5:83:
         b8:62:68:97:48:a3:86:df:21:73:5e:8b:cb:b3:1e:79:5e:a4:
         3f:85:67:57:fb:5b:b5:1e:46:32:68:a8:68:4d:19:41:53:15:
         03:03:68:e5:94:99:9f:07:b8:ab:48:d9:de:82:ba:24:5c:07:
         ee:09:e0:4d:1b:70:02:33:89:dd:5d:4a:5b:30:a8:34:4e:77:
         72:ff:39:68:2f:66:9f:dc:fc:7d:56:cd:13:75:9c:27:ea:fd:
         c3:c5:43:fc:0d:46:57:5d:53:64:6e:53:6f:c5:25:9a:bb:ae:
         3b:63:66:f3:63:a5:08:56:e1:a0:89:0d:4c:fb:c5:41:6c:f1:
         81:e5:d0:77:78:79:c1:f8:18:41:2c:08:b9:a3:c4:a6:21:ca:
         9a:c7:c2:ff
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZYNqiDiQ1PFjot8zQrLCiOU+AKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE
NkE3NzYxODAeFw0yNjA1MDMwMzA2NDRaFw0yNzA1MDIwMzExNDRaMDMxMTAvBgNV
BAMTKDlGMjUzQjNEM0Q3REMyQzg0M0NGMTBERDAwQjRDRjI5RjgyMjdFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbwLCgDO1W/Fv/MJ1B/34VaBm
myMjRSg3/O32B4xBYOLu2OYf3iGZPq5qOstftfaFPWV1C+CAsAYVTy/MUntGrW8n
Wf+XG5cXTpW2DFgtqMk5FU/9PW3g66yByDtky9+rE9Pm3mMBLogzgkGFTztlfZ2p
QAi9t0hLndQSoXmRRo+rr/7BtQSB7dnfqomQu/2ba8l5e5Lt/mUgblbap6EnOxov
mfYoiaicDhPfttika9/f0hgR+WMBJaC6+Fvb+8FC1UoGckPvkVnR22JPpb5H61ex
LjAWMhT7FOkyMk9JZ1RceUHhYIUNKWlbk/2ED2abx/S21Q0LNC8wIi0Osq5rAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUnyU7PT19wshDzxDdALTPKfgifmMwHwYDVR0j
BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB
Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3
NjE4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RlNjAwNDg2LTk3ODAtNDNlZS1i
YjJkLWI4MTEwOTRhMTQ0NS8wLzMxMzAzMzJlMzEzNzMyMmUzMTMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrHowDQYJ
KoZIhvcNAQELBQADggEBACfxOMh0keGzh3DZlMELcKZjZa4oUVkZCGqyh4k58P+N
iPBiFgbH424lOx31SNmZ5brfvgw1bF9D9G/LgiUGTHCh6Xl+GU9NVQmJUlgWpqr3
iIMH2C0KOAWhtO37Ooj3ykQM4ZKcl3cHoPTFg7hiaJdIo4bfIXNei8uzHnlepD+F
Z1f7W7UeRjJoqGhNGUFTFQMDaOWUmZ8HuKtI2d6CuiRcB+4J4E0bcAIzid1dSlsw
qDROd3L/OWgvZp/c/H1WzRN1nCfq/cPFQ/wNRlddU2RuU2/FJZq7rjtjZvNjpQhW
4aCJDUz7xUFs8YHl0Hd4ecH4GEEsCLmjxKYhyprHwv8=
-----END CERTIFICATE-----
Generated at Wed May 13 08:27:44 2026 by rpki-client