Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa
File:                     3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa (raw, json)
Hash identifier:          iF1/HI5T9x0r6R3Th5myrHplbkTjLUqKlDKBufNTpL0=
Subject key identifier:   8F:D0:11:A5:73:A3:5E:41:37:59:0E:DE:A5:1E:4B:F7:AC:4F:5F:0F
Certificate issuer:       /CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F
Certificate serial:       24B4342F705F6A0218BE5CD4A5ACE04D66C118B6
Authority key identifier: 65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa
Signing time:             Sun 03 May 2026 03:14:35 +0000
ROA not before:           Sun 03 May 2026 03:09:35 +0000
ROA not after:            Sun 02 May 2027 03:14:35 +0000
asID:                     149346
IP address blocks:        103.179.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl
                          rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b4:34:2f:70:5f:6a:02:18:be:5c:d4:a5:ac:e0:4d:66:c1:18:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F
        Validity
            Not Before: May  3 03:09:35 2026 GMT
            Not After : May  2 03:14:35 2027 GMT
        Subject: CN=8FD011A573A35E4137590EDEA51E4BF7AC4F5F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:bf:a9:62:09:39:a3:34:41:94:89:4e:d4:
                    6e:7f:5d:49:78:38:c4:04:8c:75:1a:b5:f3:41:28:
                    32:e3:94:4e:b8:02:38:31:c6:28:b1:94:05:60:32:
                    8e:82:c4:de:e3:ca:06:f1:5a:ef:65:05:04:b0:f9:
                    e4:7b:43:b3:f4:e1:f7:0c:34:d7:70:c0:fc:a8:f2:
                    af:86:82:e8:57:15:c5:1d:62:16:b4:35:23:3e:12:
                    92:0f:c2:43:3d:7b:04:11:e6:1e:05:3c:98:4e:9c:
                    3d:95:28:51:5f:1b:e1:ff:44:38:5e:f1:d6:1d:3f:
                    38:60:bf:e9:d8:f8:56:c4:49:fe:7e:c4:89:2b:d7:
                    3d:b1:9c:3e:32:d3:dc:30:62:54:b0:5d:d6:dd:dc:
                    66:29:80:6e:50:4d:ac:e4:31:6b:78:cb:38:d8:d1:
                    ad:b9:b6:e9:9d:4c:49:40:99:ee:aa:13:a0:41:36:
                    75:47:fb:27:ec:4a:c6:cf:71:a2:a6:b1:c7:a8:ef:
                    49:b7:13:a5:d2:b5:ef:91:49:d1:80:c3:bc:c2:db:
                    2b:93:2e:02:ac:76:cc:c2:f7:ee:fa:da:de:69:46:
                    f7:99:b8:25:8f:fd:4e:12:1b:97:6e:6a:0e:e0:31:
                    60:b7:89:b1:43:33:59:3c:1d:3b:90:27:69:43:ad:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D0:11:A5:73:A3:5E:41:37:59:0E:DE:A5:1E:4B:F7:AC:4F:5F:0F
            X509v3 Authority Key Identifier:
                keyid:65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:6a:8f:d3:50:00:ae:bb:fb:52:59:57:75:ff:e3:75:a9:8a:
         63:ed:17:a0:95:19:76:30:e2:8b:ee:be:90:0a:2f:44:22:56:
         de:ab:a0:43:2e:02:52:e3:26:3e:9a:74:c3:84:c4:92:cb:a4:
         8d:ec:f0:c7:27:2e:51:79:dd:b7:e6:fc:66:90:ba:58:cb:a5:
         32:67:76:90:a9:d3:e9:e7:63:5f:67:ca:b6:17:1a:4d:a1:5e:
         90:5a:27:40:5b:ee:34:3f:46:fc:35:85:2f:e8:ad:c9:07:08:
         a6:65:ef:4f:85:e9:37:27:0e:43:28:d0:e4:63:55:78:38:26:
         d3:1b:44:13:c7:08:fb:ee:3c:e3:f4:bc:20:62:ab:87:97:f4:
         fd:40:ce:49:38:82:e3:59:14:19:df:37:75:15:4f:18:01:1d:
         34:c1:56:be:06:8d:ae:68:c4:d0:3f:92:4f:6a:dd:33:3b:0e:
         7f:db:8d:67:a0:0f:b8:e0:d7:18:dc:0a:20:0c:d4:e8:66:ff:
         76:11:54:66:14:ce:c0:e8:64:d9:28:0f:92:ab:f9:6b:74:dc:
         ab:3e:f1:4e:63:d1:2e:ab:d6:f9:15:fd:d7:1e:bd:b2:80:ae:
         3f:67:e5:47:d3:94:dd:39:2e:74:fd:79:e5:a8:7d:09:a2:be:
         e4:b2:78:73
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJLQ0L3BfagIYvlzUpazgTWbBGLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVCMUFDNkZDNEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3
ODk3NkIxRjAeFw0yNjA1MDMwMzA5MzVaFw0yNzA1MDIwMzE0MzVaMDMxMTAvBgNV
BAMTKDhGRDAxMUE1NzNBMzVFNDEzNzU5MEVERUE1MUU0QkY3QUM0RjVGMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCno7+pYgk5ozRBlIlO1G5/XUl4
OMQEjHUatfNBKDLjlE64AjgxxiixlAVgMo6CxN7jygbxWu9lBQSw+eR7Q7P04fcM
NNdwwPyo8q+GguhXFcUdYha0NSM+EpIPwkM9ewQR5h4FPJhOnD2VKFFfG+H/RDhe
8dYdPzhgv+nY+FbESf5+xIkr1z2xnD4y09wwYlSwXdbd3GYpgG5QTazkMWt4yzjY
0a25tumdTElAme6qE6BBNnVH+yfsSsbPcaKmsceo70m3E6XSte+RSdGAw7zC2yuT
LgKsdszC9+762t5pRveZuCWP/U4SG5duag7gMWC3ibFDM1k8HTuQJ2lDrf7HAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUj9ARpXOjXkE3WQ7epR5L96xPXw8wHwYDVR0j
BBgwFoAUZbGsb8TQ8+zHOrR9YbCFb3iXax8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTg1MDYwNDgtNzM3ZS00NDFkLWE5MTMtMjk3MjZjMTFkNzQ0LzAvNjVCMUFDNkZD
NEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3ODk3NkIxRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NUIxQUM2RkM0RDBGM0VDQzczQUI0N0Q2MUIwODU2Rjc4OTc2
QjFGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U4NTA2MDQ4LTczN2UtNDQxZC1h
OTEzLTI5NzI2YzExZDc0NC8wLzMxMzAzMzJlMzEzNzM5MmUzNjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7NFMA0GCSqG
SIb3DQEBCwUAA4IBAQCKao/TUACuu/tSWVd1/+N1qYpj7ReglRl2MOKL7r6QCi9E
Ilbeq6BDLgJS4yY+mnTDhMSSy6SN7PDHJy5Red235vxmkLpYy6UyZ3aQqdPp52Nf
Z8q2FxpNoV6QWidAW+40P0b8NYUv6K3JBwimZe9Phek3Jw5DKNDkY1V4OCbTG0QT
xwj77jzj9LwgYquHl/T9QM5JOILjWRQZ3zd1FU8YAR00wVa+Bo2uaMTQP5JPat0z
Ow5/241noA+44NcY3AogDNToZv92EVRmFM7A6GTZKA+Sq/lrdNyrPvFOY9Euq9b5
Ff3XHr2ygK4/Z+VH05TdOS50/XnlqH0Jor7ksnhz
-----END CERTIFICATE-----
Generated at Wed May 13 12:43:43 2026 by rpki-client