Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35372e302f32342d3234203d3e20313530353530.roa
File:                     3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (raw, json)
Hash identifier:          W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=
Subject key identifier:   FB:AE:2B:84:44:24:47:55:BF:CC:DE:D0:99:96:D9:97:F8:E1:11:AD
Certificate issuer:       /CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Certificate serial:       59E7CC0AAD932123CF891EF0FFDBB9E765837570
Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35372e302f32342d3234203d3e20313530353530.roa
Signing time:             Sun 03 May 2026 03:15:04 +0000
ROA not before:           Sun 03 May 2026 03:10:04 +0000
ROA not after:            Sun 02 May 2027 03:15:04 +0000
asID:                     150550
IP address blocks:        103.85.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
                          rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e7:cc:0a:ad:93:21:23:cf:89:1e:f0:ff:db:b9:e7:65:83:75:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E
        Validity
            Not Before: May  3 03:10:04 2026 GMT
            Not After : May  2 03:15:04 2027 GMT
        Subject: CN=FBAE2B8444244755BFCCDED09996D997F8E111AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:60:44:aa:35:d5:b2:40:cb:73:9f:f6:02:
                    6e:e9:5f:04:45:ce:0a:57:54:c3:cf:92:e9:33:34:
                    60:c4:cf:b3:4c:89:e3:9f:b5:6d:39:b3:36:ea:89:
                    4d:95:13:9d:29:7d:32:9b:d6:a3:b4:ee:0d:62:c5:
                    62:e8:81:25:51:a5:3f:e6:5e:4b:a7:fc:91:3b:a8:
                    ff:2c:b4:09:81:20:8e:ea:2c:c0:1c:f0:0f:5b:c0:
                    6d:18:e5:3b:cf:54:e4:e5:af:00:01:ec:e2:d1:bb:
                    e3:76:af:d4:2f:18:42:67:7f:c1:b9:5d:0c:86:7d:
                    06:c8:c2:c3:f0:d3:87:2e:89:5f:24:da:20:bf:cb:
                    6f:f3:87:0a:d7:38:62:1a:e7:4f:26:5f:f3:44:b8:
                    9f:6c:75:48:46:54:82:32:d7:e1:61:fe:37:6d:43:
                    29:aa:9c:e6:99:ae:94:89:85:96:65:0d:6a:70:02:
                    ed:ba:5c:97:dd:82:99:ce:c9:fe:98:5b:9e:9b:2c:
                    cb:72:fd:c0:0d:c3:52:fb:ca:05:87:1e:c3:fb:03:
                    78:6c:71:41:f7:13:46:12:04:ce:6c:27:86:d1:c4:
                    91:56:2f:e9:24:ac:a0:42:4c:69:b1:24:15:54:7c:
                    f9:b3:51:e1:ec:16:a5:77:2a:7d:64:29:35:76:33:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AE:2B:84:44:24:47:55:BF:CC:DE:D0:99:96:D9:97:F8:E1:11:AD
            X509v3 Authority Key Identifier:
                keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35372e302f32342d3234203d3e20313530353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:02:72:86:b6:cb:96:0b:62:4b:ff:b8:a3:1d:ff:93:c9:da:
         4b:62:62:86:7c:aa:df:11:72:38:db:79:46:ef:38:33:08:38:
         f9:4e:8d:2b:9d:65:3c:7c:fc:e3:2f:d6:78:7f:b3:96:7d:60:
         35:52:4b:a6:86:60:7f:d7:05:5f:3a:03:ed:12:86:ad:80:f3:
         b1:39:ab:9b:96:1f:b6:62:10:83:2c:0f:99:87:78:93:69:61:
         d0:46:0f:44:58:56:03:16:a3:2e:2d:8c:34:32:76:31:e8:ca:
         74:79:db:b7:7d:da:df:39:38:dc:d5:41:96:ae:6d:6f:a7:3c:
         12:f8:ee:b4:0e:16:02:54:12:0c:2e:2f:c6:24:cf:75:ee:e2:
         a6:93:53:db:38:2b:97:a4:f5:5e:f8:b4:e3:ba:28:ff:15:a4:
         c5:09:76:99:b7:ea:1a:4f:e5:62:e5:93:8f:b8:d2:3e:8b:ce:
         d5:1c:52:c8:13:1b:62:ec:d5:f7:e3:36:d3:b0:62:f1:45:69:
         6c:d6:6e:7b:19:1d:1d:57:46:16:d6:33:f5:76:e1:72:fb:ea:
         24:d3:0f:ae:66:7b:7f:0d:3a:63:78:f3:5f:7b:86:ab:82:bf:
         92:ef:54:11:1b:3f:a8:f5:d8:d5:64:86:88:b8:c1:df:06:09:
         bb:be:cd:22
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWefMCq2TISPPiR7w/9u552WDdXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYzRkNGNzkwMkNGOTNDMDc5QzI1QTVCQjk1MDE3Nzcz
NkUzQTUzRTAeFw0yNjA1MDMwMzEwMDRaFw0yNzA1MDIwMzE1MDRaMDMxMTAvBgNV
BAMTKEZCQUUyQjg0NDQyNDQ3NTVCRkNDREVEMDk5OTZEOTk3RjhFMTExQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWWBEqjXVskDLc5/2Am7pXwRF
zgpXVMPPkukzNGDEz7NMieOftW05szbqiU2VE50pfTKb1qO07g1ixWLogSVRpT/m
Xkun/JE7qP8stAmBII7qLMAc8A9bwG0Y5TvPVOTlrwAB7OLRu+N2r9QvGEJnf8G5
XQyGfQbIwsPw04cuiV8k2iC/y2/zhwrXOGIa508mX/NEuJ9sdUhGVIIy1+Fh/jdt
QymqnOaZrpSJhZZlDWpwAu26XJfdgpnOyf6YW56bLMty/cANw1L7ygWHHsP7A3hs
cUH3E0YSBM5sJ4bRxJFWL+kkrKBCTGmxJBVUfPmzUeHsFqV3Kn1kKTV2M77LAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU+64rhEQkR1W/zN7QmZbZl/jhEa0wHwYDVR0j
BBgwFoAUFj/PeQLPk8B5wlpbuVAXdzbjpT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWE1NzYxM2ItOGIwNC00YzQ1LWJlZGYtNGFiMDYxZDRkY2Y5LzAvMTYzRkNGNzkw
MkNGOTNDMDc5QzI1QTVCQjk1MDE3NzczNkUzQTUzRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjNGQ0Y3OTAyQ0Y5M0MwNzlDMjVBNUJCOTUwMTc3NzM2RTNB
NTNFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNTc2MTNiLThiMDQtNGM0NS1i
ZWRmLTRhYjA2MWQ0ZGNmOS8wLzMxMzAzMzJlMzgzNTJlMzUzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdVOTANBgkqhkiG
9w0BAQsFAAOCAQEAdAJyhrbLlgtiS/+4ox3/k8naS2Jihnyq3xFyONt5Ru84Mwg4
+U6NK51lPHz84y/WeH+zln1gNVJLpoZgf9cFXzoD7RKGrYDzsTmrm5YftmIQgywP
mYd4k2lh0EYPRFhWAxajLi2MNDJ2MejKdHnbt33a3zk43NVBlq5tb6c8EvjutA4W
AlQSDC4vxiTPde7ippNT2zgrl6T1Xvi047oo/xWkxQl2mbfqGk/lYuWTj7jSPovO
1RxSyBMbYuzV9+M207Bi8UVpbNZuexkdHVdGFtYz9XbhcvvqJNMPrmZ7fw06Y3jz
X3uGq4K/ku9UERs/qPXY1WSGiLjB3wYJu77NIg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:27:07 2026 by rpki-client