Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa
File:                     3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa (raw, json)
Hash identifier:          kooWVrlzS9UWsCGHYmmAvq7mKkcskQV2XI8Ptq022/c=
Subject key identifier:   D4:FE:3E:AB:77:C3:A1:EA:A7:48:B8:43:50:7F:63:C9:E1:21:DE:A1
Certificate issuer:       /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial:       679622CE3B44A9B180C2D7BE7BA2D8180077DBE5
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa
Signing time:             Sun 03 May 2026 03:14:04 +0000
ROA not before:           Sun 03 May 2026 03:09:04 +0000
ROA not after:            Sun 02 May 2027 03:14:04 +0000
asID:                     38526
IP address blocks:        103.112.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
                          rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:96:22:ce:3b:44:a9:b1:80:c2:d7:be:7b:a2:d8:18:00:77:db:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
        Validity
            Not Before: May  3 03:09:04 2026 GMT
            Not After : May  2 03:14:04 2027 GMT
        Subject: CN=D4FE3EAB77C3A1EAA748B843507F63C9E121DEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:eb:2d:74:a1:d5:3c:8c:c2:b1:79:34:0c:
                    62:b8:88:1a:da:7b:84:42:ae:27:b4:46:dd:d2:07:
                    d4:e5:d6:0a:37:5d:a3:98:fe:70:24:36:22:90:b7:
                    97:63:27:06:94:57:fc:fb:61:15:39:08:fc:b4:63:
                    c3:4b:4e:3a:15:85:36:8b:94:48:67:b5:83:28:bf:
                    0a:86:07:a0:a9:75:31:3c:70:84:43:ac:22:65:9b:
                    e1:ef:ad:a4:40:25:94:7e:db:c9:69:22:7d:79:56:
                    56:28:86:02:3d:d3:49:5e:3a:d6:6d:f5:ef:91:77:
                    08:47:ea:a0:53:7e:41:a5:b6:ed:eb:3f:01:5f:92:
                    75:3d:6b:08:6d:8e:6a:e2:f1:e4:43:4e:c9:f6:75:
                    2c:51:ac:af:b0:19:f2:7e:94:16:a0:1d:94:ba:a2:
                    46:8b:f3:81:5e:48:b7:0d:55:40:8f:ef:c0:9a:d8:
                    a3:36:c5:6f:82:5f:a3:a1:02:d8:4b:cd:70:88:4b:
                    5a:45:49:6f:1b:2c:54:63:0d:59:f2:8e:1f:29:d4:
                    bc:5d:0e:b8:d8:2f:7a:92:a6:de:55:6f:7a:eb:10:
                    6f:b9:cd:51:18:c7:eb:76:1c:b4:7b:13:f2:d6:07:
                    b1:66:8f:e1:35:1f:d0:8d:08:bc:b7:2e:86:25:cf:
                    46:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:3E:AB:77:C3:A1:EA:A7:48:B8:43:50:7F:63:C9:E1:21:DE:A1
            X509v3 Authority Key Identifier:
                keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:9a:d0:11:a0:84:cc:ad:ff:34:8c:11:b7:aa:32:56:78:d7:
         c0:a4:6c:a6:bc:4f:8d:aa:30:b4:c3:fa:fe:f4:90:90:e9:1f:
         b3:45:a2:46:aa:e6:17:1b:69:fd:58:40:9a:a4:11:79:0c:1e:
         87:fa:72:7f:79:49:d3:26:88:ab:0c:2b:7c:0c:de:08:47:8f:
         e5:f3:09:5a:d4:82:98:0d:dc:7d:c6:01:eb:65:dc:68:be:79:
         e9:ec:c8:80:68:7a:f5:7e:4a:9a:5f:84:68:14:ec:d3:60:f1:
         0c:db:11:89:3d:d8:ac:89:cf:a8:03:3d:49:b8:08:dd:16:f2:
         cf:ef:c0:e4:6c:5b:e8:6d:5d:9e:01:47:cb:7e:66:34:c1:74:
         3d:9e:3a:b4:d3:be:f9:48:33:24:4d:95:af:5e:dd:aa:bb:9d:
         72:a2:db:11:4a:be:fc:e9:e7:ac:c7:66:ad:fb:56:55:3f:78:
         dc:17:e0:d2:28:f2:e6:55:ad:5d:ce:a1:71:9f:0c:0a:5f:f4:
         fb:52:52:37:9b:73:4c:2c:c1:7b:84:b6:1e:4b:0d:fe:19:0d:
         88:3d:84:e2:bf:d9:16:3f:6b:4e:87:c6:9c:85:18:3d:83:f6:
         31:74:6c:9a:55:dd:9c:15:5b:e2:0c:2a:97:92:0e:18:d9:8f:
         17:39:36:90
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZ5YizjtEqbGAwte+e6LYGAB32+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3
RTNDRkZENzAeFw0yNjA1MDMwMzA5MDRaFw0yNzA1MDIwMzE0MDRaMDMxMTAvBgNV
BAMTKEQ0RkUzRUFCNzdDM0ExRUFBNzQ4Qjg0MzUwN0Y2M0M5RTEyMURFQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzP+stdKHVPIzCsXk0DGK4iBra
e4RCrie0Rt3SB9Tl1go3XaOY/nAkNiKQt5djJwaUV/z7YRU5CPy0Y8NLTjoVhTaL
lEhntYMovwqGB6CpdTE8cIRDrCJlm+HvraRAJZR+28lpIn15VlYohgI900leOtZt
9e+RdwhH6qBTfkGltu3rPwFfknU9awhtjmri8eRDTsn2dSxRrK+wGfJ+lBagHZS6
okaL84FeSLcNVUCP78Ca2KM2xW+CX6OhAthLzXCIS1pFSW8bLFRjDVnyjh8p1Lxd
DrjYL3qSpt5Vb3rrEG+5zVEYx+t2HLR7E/LWB7Fmj+E1H9CNCLy3LoYlz0ZrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU1P4+q3fDoeqnSLhDUH9jyeEh3qEwHwYDVR0j
BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0
REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG
RkQ3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMxMzAzMzJlMzEzMTMyMmUzMTM5MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3DBMA0GCSqG
SIb3DQEBCwUAA4IBAQBZmtARoITMrf80jBG3qjJWeNfApGymvE+NqjC0w/r+9JCQ
6R+zRaJGquYXG2n9WECapBF5DB6H+nJ/eUnTJoirDCt8DN4IR4/l8wla1IKYDdx9
xgHrZdxovnnp7MiAaHr1fkqaX4RoFOzTYPEM2xGJPdisic+oAz1JuAjdFvLP78Dk
bFvobV2eAUfLfmY0wXQ9njq00775SDMkTZWvXt2qu51yotsRSr786eesx2at+1ZV
P3jcF+DSKPLmVa1dzqFxnwwKX/T7UlI3m3NMLMF7hLYeSw3+GQ2IPYTiv9kWP2tO
h8achRg9g/YxdGyaVd2cFVviDCqXkg4Y2Y8XOTaQ
-----END CERTIFICATE-----
Generated at Wed May 13 07:38:57 2026 by rpki-client