Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e37322e3131302e302f32342d3234203d3e203538343736.roa
File:                     3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (raw, json)
Hash identifier:          xat5QRgiDjEvf5+MHrIJqdczPQXPNnHqQPKuqIFalY0=
Subject key identifier:   DA:42:89:B7:0B:26:A1:4F:DA:EC:B1:4D:0E:AF:B0:F1:DF:E0:61:EA
Certificate issuer:       /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1
Certificate serial:       1A014236721EB8EB6EB032CAA5FD22D894DFE424
Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e37322e3131302e302f32342d3234203d3e203538343736.roa
Signing time:             Sun 03 May 2026 03:18:24 +0000
ROA not before:           Sun 03 May 2026 03:13:24 +0000
ROA not after:            Sun 02 May 2027 03:18:24 +0000
asID:                     58476
IP address blocks:        103.72.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl
                          rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:01:42:36:72:1e:b8:eb:6e:b0:32:ca:a5:fd:22:d8:94:df:e4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1
        Validity
            Not Before: May  3 03:13:24 2026 GMT
            Not After : May  2 03:18:24 2027 GMT
        Subject: CN=DA4289B70B26A14FDAECB14D0EAFB0F1DFE061EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:87:15:42:0e:29:94:6d:18:d0:51:4f:5a:
                    98:a5:97:a3:dc:10:67:51:96:00:f2:97:af:19:6c:
                    2f:e4:d0:8b:82:f0:22:49:7a:2e:32:7b:a4:e2:53:
                    e7:6e:c5:b0:09:73:7a:87:8a:fc:25:de:be:c4:4f:
                    18:4a:7e:b9:6b:ff:1f:76:22:45:5b:b5:e9:12:df:
                    83:ce:27:10:c1:42:83:78:c1:4a:01:f5:db:b6:20:
                    9f:36:69:3c:60:4b:e0:7d:65:25:b6:94:1a:f9:c6:
                    8c:b7:cf:e0:2d:f0:d9:3c:22:85:4d:e8:23:67:bc:
                    42:b6:8a:9b:d4:63:60:05:9c:d1:81:32:52:36:3d:
                    14:a1:1f:26:fb:bb:39:e3:47:00:c5:da:84:ba:33:
                    1e:0c:5b:e3:78:e3:e0:a4:14:0d:21:ab:ae:4c:f4:
                    f4:1a:d1:40:52:8d:76:31:17:19:0c:c5:0c:f6:e9:
                    80:68:e8:9e:d2:12:dd:33:99:8c:31:a1:d2:22:96:
                    e8:9f:05:2d:d5:93:36:5c:9f:f9:a1:60:e9:74:e9:
                    11:4c:51:c8:f7:64:95:6c:d4:65:41:ea:8e:27:72:
                    38:da:a7:ee:52:d0:58:48:15:68:5e:1c:b2:2c:e6:
                    84:86:45:85:4c:71:72:26:d5:cf:e0:37:97:18:a4:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:42:89:B7:0B:26:A1:4F:DA:EC:B1:4D:0E:AF:B0:F1:DF:E0:61:EA
            X509v3 Authority Key Identifier:
                keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e37322e3131302e302f32342d3234203d3e203538343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:25:d0:a7:67:51:2f:1c:77:7a:0b:36:94:f5:f6:92:78:21:
         54:73:a8:81:60:34:c8:af:fd:75:ec:11:a4:e1:79:01:76:f7:
         87:6e:1d:32:18:0d:45:05:f2:a3:27:f2:c4:ec:41:94:c3:6d:
         d4:7e:47:15:5e:3d:c7:fe:43:87:ca:c6:14:a7:40:c2:5e:a5:
         78:59:5b:9d:4b:f4:1c:dd:a0:d9:71:18:5a:fd:7e:81:e9:eb:
         16:ef:28:1d:22:e8:8b:3a:1c:47:2f:60:0e:2c:e8:36:ee:07:
         14:8b:b6:b4:2f:5c:54:bc:ef:a3:26:22:7b:e9:70:50:41:30:
         03:a6:af:08:98:20:5b:bb:e6:5d:d1:58:43:2d:f6:aa:d3:19:
         4c:14:32:d9:97:8a:57:1c:a3:ad:21:7d:53:34:2e:e6:26:84:
         30:b1:f3:37:27:82:83:93:27:30:32:81:ff:2b:05:e4:e4:3f:
         0b:1e:9d:c8:05:a0:08:08:df:c6:14:17:e1:45:43:91:b2:bd:
         d7:8c:60:39:7b:38:c7:23:11:e9:18:54:63:12:55:de:c9:4e:
         e1:78:8d:a3:bd:bb:b7:78:d7:64:fd:3c:5d:cc:55:f8:a5:cd:
         96:80:a3:82:07:0e:bb:2f:a7:0f:4f:c8:be:72:ab:74:22:02:
         8b:6e:6b:47
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGgFCNnIeuOtusDLKpf0i2JTf5CQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1
RUVEODhEMTAeFw0yNjA1MDMwMzEzMjRaFw0yNzA1MDIwMzE4MjRaMDMxMTAvBgNV
BAMTKERBNDI4OUI3MEIyNkExNEZEQUVDQjE0RDBFQUZCMEYxREZFMDYxRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjIcVQg4plG0Y0FFPWpill6Pc
EGdRlgDyl68ZbC/k0IuC8CJJei4ye6TiU+duxbAJc3qHivwl3r7ETxhKfrlr/x92
IkVbtekS34POJxDBQoN4wUoB9du2IJ82aTxgS+B9ZSW2lBr5xoy3z+At8Nk8IoVN
6CNnvEK2ipvUY2AFnNGBMlI2PRShHyb7uznjRwDF2oS6Mx4MW+N44+CkFA0hq65M
9PQa0UBSjXYxFxkMxQz26YBo6J7SEt0zmYwxodIiluifBS3VkzZcn/mhYOl06RFM
Ucj3ZJVs1GVB6o4ncjjap+5S0FhIFWheHLIs5oSGRYVMcXIm1c/gN5cYpDAPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU2kKJtwsmoU/a7LFNDq+w8d/gYeowHwYDVR0j
BBgwFoAUsZxlaC0ReE19Kr2NS+vHxF7tiNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjdmNDkwNjgtYzBjYS00YTIxLTlhOGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1Njgy
RDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1RUVEODhEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMTlDNjU2ODJEMTE3ODREN0QyQUJEOEQ0QkVCQzdDNDVFRUQ4
OEQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3ZjQ5MDY4LWMwY2EtNGEyMS05
YThhLWVlZDI2ZmNkZDFhYS8wLzMxMzAzMzJlMzczMjJlMzEzMTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdIbjANBgkqhkiG
9w0BAQsFAAOCAQEANCXQp2dRLxx3egs2lPX2knghVHOogWA0yK/9dewRpOF5AXb3
h24dMhgNRQXyoyfyxOxBlMNt1H5HFV49x/5Dh8rGFKdAwl6leFlbnUv0HN2g2XEY
Wv1+genrFu8oHSLoizocRy9gDizoNu4HFIu2tC9cVLzvoyYie+lwUEEwA6avCJgg
W7vmXdFYQy32qtMZTBQy2ZeKVxyjrSF9UzQu5iaEMLHzNyeCg5MnMDKB/ysF5OQ/
Cx6dyAWgCAjfxhQX4UVDkbK914xgOXs4xyMR6RhUYxJV3slO4XiNo727t3jXZP08
XcxV+KXNloCjggcOuy+nD0/IvnKrdCICi25rRw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:11:58 2026 by rpki-client