Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e332e302f32342d3234203d3e20313530393935.roa
File:                     3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (raw, json)
Hash identifier:          tCQps77ttUsG2B2A/jlIdsatXSph5WwOuMOklCzgjjQ=
Subject key identifier:   E6:52:38:C5:EA:76:C2:C7:2B:25:E4:69:E4:04:B0:4A:56:FE:F6:70
Certificate issuer:       /CN=F5C77B8E76386E06F7C5963580F72FFDB6260833
Certificate serial:       110D1A5C80D523A9E7AC8835B487F61B8CDE1331
Authority key identifier: F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e332e302f32342d3234203d3e20313530393935.roa
Signing time:             Sun 03 May 2026 03:12:12 +0000
ROA not before:           Sun 03 May 2026 03:07:12 +0000
ROA not after:            Sun 02 May 2027 03:12:12 +0000
asID:                     150995
IP address blocks:        103.210.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl
                          rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0d:1a:5c:80:d5:23:a9:e7:ac:88:35:b4:87:f6:1b:8c:de:13:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C77B8E76386E06F7C5963580F72FFDB6260833
        Validity
            Not Before: May  3 03:07:12 2026 GMT
            Not After : May  2 03:12:12 2027 GMT
        Subject: CN=E65238C5EA76C2C72B25E469E404B04A56FEF670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:90:49:9e:a1:34:7e:fe:fc:5e:4e:73:be:
                    52:b0:1a:27:9c:8e:2a:c5:aa:9a:7b:24:80:74:ab:
                    71:d4:6a:46:4d:9a:61:84:a3:74:09:66:21:d2:d1:
                    3d:32:8a:1e:ee:8f:c3:0d:ac:aa:50:dd:17:8d:ea:
                    e9:4f:03:ab:9e:a5:f9:00:c7:a9:36:80:41:f2:73:
                    f5:a7:d2:ae:2c:9b:af:07:35:74:d5:c8:b1:75:a3:
                    bc:0f:eb:66:0b:c8:ce:d5:52:47:00:47:0d:d4:b0:
                    26:bb:78:cd:9f:f1:d4:5d:17:62:e9:8f:ae:2f:4d:
                    31:f3:b2:3c:ad:aa:ad:6f:17:fe:25:f7:e4:13:26:
                    0e:bb:b8:93:56:78:ce:da:72:54:88:b1:4d:9b:3f:
                    87:e4:c5:8b:49:ae:cc:c2:9c:62:3e:63:4c:7d:aa:
                    a0:5d:09:3a:4c:0e:2c:41:db:f9:d0:93:2b:26:2b:
                    c3:cc:ad:49:e0:8f:02:6e:11:69:84:24:9b:21:b6:
                    7a:50:d8:63:a2:f6:4e:21:df:a1:4d:16:6d:d1:3c:
                    5f:91:7c:03:66:7d:3e:80:e1:bd:14:43:16:f7:d8:
                    58:a0:cb:10:bd:e1:1a:32:81:3e:3c:5a:4e:a9:cd:
                    ab:c8:0e:4c:82:75:2a:40:2a:2f:44:17:21:53:f8:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:52:38:C5:EA:76:C2:C7:2B:25:E4:69:E4:04:B0:4A:56:FE:F6:70
            X509v3 Authority Key Identifier:
                keyid:F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e332e302f32342d3234203d3e20313530393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d4:67:17:a7:72:ee:97:24:46:47:c0:4f:60:97:1a:f1:50:
         2f:92:bb:f0:36:6c:a2:df:47:d2:38:80:31:d7:ed:6a:fa:c6:
         ec:f4:1b:14:d6:33:16:98:57:6d:56:0c:69:58:d5:c4:73:70:
         15:c2:c6:96:d8:d8:af:02:48:c2:f5:66:37:05:91:1c:cf:04:
         a3:6f:eb:49:52:5a:62:63:1f:98:5e:75:fa:e7:6d:3f:4c:72:
         91:c3:cc:dc:60:07:b9:e3:b6:76:34:8a:80:72:14:c2:99:d8:
         a0:cc:5f:be:c2:87:ad:d2:fa:f3:38:0a:6f:dd:1f:85:a8:5d:
         5c:1a:06:a4:a6:31:95:b0:20:0b:fc:15:12:5f:51:19:b8:11:
         e5:82:24:1a:49:98:40:d3:5d:2e:1e:40:11:41:c6:c1:04:a8:
         6b:5a:4d:6d:2e:58:03:e3:c0:fa:f3:18:5e:c0:0c:4f:90:7e:
         c1:14:57:cc:ed:77:08:65:8a:a4:b9:83:d2:21:78:c6:dd:78:
         9b:4e:b4:88:ef:70:65:b7:9a:e8:72:2d:bb:c0:3b:9b:dd:cd:
         3f:d9:ca:e3:f3:61:fa:9c:70:90:c5:4e:2f:b7:20:4f:b0:78:
         0e:da:06:49:88:94:37:d9:da:2f:f1:c7:fb:8a:32:27:00:70:
         65:72:9d:2c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEQ0aXIDVI6nnrIg1tIf2G4zeEzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDNzdCOEU3NjM4NkUwNkY3QzU5NjM1ODBGNzJGRkRC
NjI2MDgzMzAeFw0yNjA1MDMwMzA3MTJaFw0yNzA1MDIwMzEyMTJaMDMxMTAvBgNV
BAMTKEU2NTIzOEM1RUE3NkMyQzcyQjI1RTQ2OUU0MDRCMDRBNTZGRUY2NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96ZBJnqE0fv78Xk5zvlKwGiec
jirFqpp7JIB0q3HUakZNmmGEo3QJZiHS0T0yih7uj8MNrKpQ3ReN6ulPA6uepfkA
x6k2gEHyc/Wn0q4sm68HNXTVyLF1o7wP62YLyM7VUkcARw3UsCa7eM2f8dRdF2Lp
j64vTTHzsjytqq1vF/4l9+QTJg67uJNWeM7aclSIsU2bP4fkxYtJrszCnGI+Y0x9
qqBdCTpMDixB2/nQkysmK8PMrUngjwJuEWmEJJshtnpQ2GOi9k4h36FNFm3RPF+R
fANmfT6A4b0UQxb32FigyxC94RoygT48Wk6pzavIDkyCdSpAKi9EFyFT+H17AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5lI4xep2wscrJeRp5ASwSlb+9nAwHwYDVR0j
BBgwFoAU9cd7jnY4bgb3xZY1gPcv/bYmCDMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGZjMzBjNzEtZGYyZC00ZmM3LWI0MzUtNzUxMWRmMjg3YTZiLzAvRjVDNzdCOEU3
NjM4NkUwNkY3QzU5NjM1ODBGNzJGRkRCNjI2MDgzMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNUM3N0I4RTc2Mzg2RTA2RjdDNTk2MzU4MEY3MkZGREI2MjYw
ODMzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmYzMwYzcxLWRmMmQtNGZjNy1i
NDM1LTc1MTFkZjI4N2E2Yi8wLzMxMzAzMzJlMzIzMTMwMmUzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfSAzANBgkqhkiG
9w0BAQsFAAOCAQEAptRnF6dy7pckRkfAT2CXGvFQL5K78DZsot9H0jiAMdftavrG
7PQbFNYzFphXbVYMaVjVxHNwFcLGltjYrwJIwvVmNwWRHM8Eo2/rSVJaYmMfmF51
+udtP0xykcPM3GAHueO2djSKgHIUwpnYoMxfvsKHrdL68zgKb90fhahdXBoGpKYx
lbAgC/wVEl9RGbgR5YIkGkmYQNNdLh5AEUHGwQSoa1pNbS5YA+PA+vMYXsAMT5B+
wRRXzO13CGWKpLmD0iF4xt14m060iO9wZbea6HItu8A7m93NP9nK4/Nh+pxwkMVO
L7cgT7B4DtoGSYiUN9naL/HH+4oyJwBwZXKdLA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:49 2026 by rpki-client