Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa
File:                     3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (raw, json)
Hash identifier:          27oObCgWzykb6CFKZyK6/jDYuaqop/FIGkUT/qI+p/Q=
Subject key identifier:   1F:C1:56:88:E7:E9:90:76:1E:36:6C:F5:B1:78:EA:59:94:7F:BB:76
Certificate issuer:       /CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
Certificate serial:       357975D249C44B34B8391A2AC28CCCAE67671E85
Authority key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa
Signing time:             Sun 03 May 2026 03:14:21 +0000
ROA not before:           Sun 03 May 2026 03:09:21 +0000
ROA not after:            Sun 02 May 2027 03:14:21 +0000
asID:                     149917
IP address blocks:        103.191.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl
                          rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:79:75:d2:49:c4:4b:34:b8:39:1a:2a:c2:8c:cc:ae:67:67:1e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9
        Validity
            Not Before: May  3 03:09:21 2026 GMT
            Not After : May  2 03:14:21 2027 GMT
        Subject: CN=1FC15688E7E990761E366CF5B178EA59947FBB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:40:42:cf:82:3e:19:d9:17:9c:6c:30:fc:9a:
                    2b:e2:de:d5:98:81:df:47:a3:0c:d3:58:27:5b:4f:
                    b1:25:57:97:58:c2:e1:9c:11:1b:3d:26:f1:34:f4:
                    db:00:8e:63:f9:e9:98:a8:e6:ae:d5:a9:37:fd:90:
                    fc:4d:52:52:26:e1:17:01:f5:29:df:61:63:5b:08:
                    f4:85:05:31:87:c3:c3:b1:f6:ee:f3:05:b2:48:0d:
                    16:9f:d6:c9:05:b2:3f:76:85:85:1f:bb:fe:70:6c:
                    85:ad:5a:13:38:ec:56:28:56:6e:f1:15:a8:84:19:
                    1e:c9:4c:40:c6:fc:62:e1:5c:d0:89:b0:cf:05:06:
                    b0:09:41:9d:ac:cf:5d:02:d1:10:dd:1a:9b:55:1c:
                    74:3e:d6:b3:13:a4:75:7b:9f:bc:61:a0:da:23:f0:
                    68:91:39:fe:37:32:73:37:f7:9e:58:ea:0f:14:82:
                    c9:b7:60:ab:3b:62:67:c2:48:1d:61:32:ac:4e:8d:
                    69:75:cc:26:8e:7c:86:76:02:e4:e7:2f:20:75:87:
                    b3:ae:04:21:98:41:5a:8b:79:7e:b7:b5:25:03:c3:
                    dd:82:f5:9c:20:22:64:d2:9d:a1:08:5b:3d:e9:95:
                    17:2f:cc:f8:2c:06:6d:f1:3b:2c:8f:2f:32:20:bf:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C1:56:88:E7:E9:90:76:1E:36:6C:F5:B1:78:EA:59:94:7F:BB:76
            X509v3 Authority Key Identifier:
                keyid:E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:31:56:48:81:ea:2a:7d:98:b2:15:68:a9:78:0c:c5:6f:
         81:d9:36:f0:b2:d5:9c:cc:6a:3a:d2:f1:69:0e:a7:c3:ef:6f:
         27:6e:57:55:02:1a:29:9b:52:2a:e2:7a:1e:70:64:10:e5:80:
         f5:73:64:13:dd:15:84:d8:f7:7e:6c:d4:8a:9f:27:4c:c1:72:
         4a:27:22:6a:ee:3f:e8:4c:60:4a:38:a6:e3:1b:e7:f6:c7:8e:
         fe:9c:e9:a6:51:2e:c6:46:78:65:74:70:f5:bf:7d:71:3f:4b:
         5e:40:94:fa:ab:72:5f:59:76:2f:ef:3e:0e:b6:e6:d9:45:2f:
         f6:9e:f1:65:0e:1d:a3:dc:4a:b2:65:39:5d:3f:bf:e3:98:7e:
         1c:11:3e:94:47:09:a9:b5:92:3d:f3:a2:d7:bd:ef:06:db:39:
         02:a8:85:f3:98:52:f3:bb:97:d1:d1:9e:88:eb:15:dd:94:21:
         70:e4:de:92:6f:79:b8:c5:ef:da:ea:a6:7d:e5:e5:b4:2a:e5:
         73:f8:71:cd:d5:e6:78:3b:9a:9f:82:11:39:35:94:13:f3:7d:
         30:c7:88:46:23:b3:a6:6b:ce:a9:0d:97:3b:57:62:b3:46:58:
         d5:9c:26:68:43:04:b2:ab:fc:bb:eb:0c:6b:6a:33:c7:04:56:
         63:a1:01:96
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNXl10knESzS4ORoqwozMrmdnHoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlGMkE0MTg5OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNB
RUMzNjBFOTAeFw0yNjA1MDMwMzA5MjFaFw0yNzA1MDIwMzE0MjFaMDMxMTAvBgNV
BAMTKDFGQzE1Njg4RTdFOTkwNzYxRTM2NkNGNUIxNzhFQTU5OTQ3RkJCNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrQELPgj4Z2RecbDD8mivi3tWY
gd9HowzTWCdbT7ElV5dYwuGcERs9JvE09NsAjmP56Zio5q7VqTf9kPxNUlIm4RcB
9SnfYWNbCPSFBTGHw8Ox9u7zBbJIDRaf1skFsj92hYUfu/5wbIWtWhM47FYoVm7x
FaiEGR7JTEDG/GLhXNCJsM8FBrAJQZ2sz10C0RDdGptVHHQ+1rMTpHV7n7xhoNoj
8GiROf43MnM3955Y6g8Ugsm3YKs7YmfCSB1hMqxOjWl1zCaOfIZ2AuTnLyB1h7Ou
BCGYQVqLeX63tSUDw92C9ZwgImTSnaEIWz3plRcvzPgsBm3xOyyPLzIgv1WXAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUH8FWiOfpkHYeNmz1sXjqWZR/u3YwHwYDVR0j
BBgwFoAU6fKkGJkLSA0gT6DQN6Wrs67DYOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTZhZGFlMmEtNDdiNi00YWU1LTljM2YtM2U4Y2I5MmEzOTg3LzAvRTlGMkE0MTg5
OTBCNDgwRDIwNEZBMEQwMzdBNUFCQjNBRUMzNjBFOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOUYyQTQxODk5MEI0ODBEMjA0RkEwRDAzN0E1QUJCM0FFQzM2
MEU5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2YWRhZTJhLTQ3YjYtNGFlNS05
YzNmLTNlOGNiOTJhMzk4Ny8wLzMxMzAzMzJlMzEzOTMxMmUzMTMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMxMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv3QwDQYJ
KoZIhvcNAQELBQADggEBAEleMVZIgeoqfZiyFWipeAzFb4HZNvCy1ZzMajrS8WkO
p8PvbyduV1UCGimbUirieh5wZBDlgPVzZBPdFYTY935s1IqfJ0zBckonImruP+hM
YEo4puMb5/bHjv6c6aZRLsZGeGV0cPW/fXE/S15AlPqrcl9Zdi/vPg625tlFL/ae
8WUOHaPcSrJlOV0/v+OYfhwRPpRHCam1kj3zote97wbbOQKohfOYUvO7l9HRnojr
Fd2UIXDk3pJvebjF79rqpn3l5bQq5XP4cc3V5ng7mp+CETk1lBPzfTDHiEYjs6Zr
zqkNlztXYrNGWNWcJmhDBLKr/LvrDGtqM8cEVmOhAZY=
-----END CERTIFICATE-----
Generated at Wed May 13 05:14:47 2026 by rpki-client