Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa
File:                     3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa (raw, json)
Hash identifier:          iHiiX8SijifHyF+URYyoJlMsUbrSgCPm7mjyVuXV+U4=
Subject key identifier:   59:A2:55:EB:9D:E8:77:6D:25:57:FE:09:93:16:B1:8E:B1:3F:2A:6D
Certificate issuer:       /CN=777F8859548675F259A5672AD63DF1A9F42E8A67
Certificate serial:       17B366C09E08D89A9C7324C2186D3636117E8421
Authority key identifier: 77:7F:88:59:54:86:75:F2:59:A5:67:2A:D6:3D:F1:A9:F4:2E:8A:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777F8859548675F259A5672AD63DF1A9F42E8A67.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa
Signing time:             Sun 03 May 2026 03:19:07 +0000
ROA not before:           Sun 03 May 2026 03:14:07 +0000
ROA not after:            Sun 02 May 2027 03:19:07 +0000
asID:                     142352
IP address blocks:        103.169.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.crl
                          rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777F8859548675F259A5672AD63DF1A9F42E8A67.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b3:66:c0:9e:08:d8:9a:9c:73:24:c2:18:6d:36:36:11:7e:84:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777F8859548675F259A5672AD63DF1A9F42E8A67
        Validity
            Not Before: May  3 03:14:07 2026 GMT
            Not After : May  2 03:19:07 2027 GMT
        Subject: CN=59A255EB9DE8776D2557FE099316B18EB13F2A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e1:1c:c9:06:29:aa:de:a1:73:ca:76:e0:71:
                    45:51:54:2a:da:91:45:ad:99:e9:ef:60:2f:f6:e9:
                    a5:9f:2a:ce:da:f1:08:d7:fe:21:d5:bf:2b:a2:7f:
                    54:d3:26:29:15:ba:39:38:44:15:37:99:96:48:5f:
                    b3:10:b7:2b:f6:f4:a3:8b:df:c4:7e:aa:8b:85:9d:
                    53:5f:29:3d:2b:e2:4f:70:da:c0:19:3d:69:30:37:
                    1a:67:4e:2d:c7:64:9d:08:c7:55:34:6d:e5:ad:b8:
                    9a:3e:9b:ef:2f:a1:06:b5:b3:d2:a2:88:c2:6d:9e:
                    9d:90:00:fc:d2:36:3a:69:76:d8:86:9b:e8:49:e9:
                    34:e5:c3:d4:18:d0:69:b6:bc:1f:7f:44:4c:9d:16:
                    da:26:ae:ff:a4:b6:91:58:f0:c8:cc:75:6f:27:41:
                    c8:3c:0e:6c:6b:e1:6c:85:28:e5:ec:cc:6f:9f:6d:
                    08:43:93:5e:cc:d1:32:7c:3e:7b:de:95:fb:ae:74:
                    87:b6:05:76:8a:16:8f:e8:46:1d:17:87:43:f6:03:
                    02:dc:98:7e:63:29:0b:8f:2f:fe:50:b5:79:d7:3d:
                    d3:32:4e:8d:0e:17:e6:28:3b:e8:64:b1:de:5e:b6:
                    fa:06:12:0b:c7:90:f2:1c:b5:a8:72:e0:06:ca:a9:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A2:55:EB:9D:E8:77:6D:25:57:FE:09:93:16:B1:8E:B1:3F:2A:6D
            X509v3 Authority Key Identifier:
                keyid:77:7F:88:59:54:86:75:F2:59:A5:67:2A:D6:3D:F1:A9:F4:2E:8A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777F8859548675F259A5672AD63DF1A9F42E8A67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:51:f8:85:72:bf:6a:b4:eb:dd:14:31:7e:52:98:f0:51:
         22:c3:a0:e6:a6:7a:d7:f4:ae:e6:5c:e3:2a:61:ab:20:ba:17:
         61:41:22:e0:df:eb:38:8e:da:f2:d0:08:66:6b:b9:02:ef:dc:
         df:f9:e9:81:2d:a2:06:0c:39:67:85:d9:ed:de:0a:48:41:59:
         d7:04:3a:62:78:c3:77:8d:88:08:6c:cf:ac:c1:93:f2:dd:c6:
         76:09:5e:f1:c0:0c:84:3a:f7:0c:f0:14:87:bf:05:b5:47:77:
         1e:8f:57:46:ca:b0:13:87:16:b2:9b:22:18:8c:06:12:60:b6:
         db:cf:1d:d8:20:bb:6a:af:66:5a:e3:f9:d3:a3:41:45:d2:92:
         ab:e5:08:e4:d4:d1:c9:95:0c:e7:d5:d3:9e:04:52:2a:88:5b:
         fc:7d:8c:cf:47:9c:33:26:e6:6e:d2:60:6e:a8:02:f6:fd:4d:
         93:9e:f5:18:e5:0b:9c:23:90:fe:e1:23:d7:f8:86:50:cd:23:
         53:37:91:1b:e0:9a:3b:6e:4e:48:68:20:c8:df:07:36:87:59:
         02:bc:d6:87:be:01:9c:8f:a9:2c:e1:8b:30:56:b3:cb:b8:0c:
         a9:e9:df:0f:94:aa:cb:dc:a9:bb:d6:ad:92:ec:75:2a:f0:3c:
         ae:1a:59:a3
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUF7NmwJ4I2JqccyTCGG02NhF+hCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3Rjg4NTk1NDg2NzVGMjU5QTU2NzJBRDYzREYxQTlG
NDJFOEE2NzAeFw0yNjA1MDMwMzE0MDdaFw0yNzA1MDIwMzE5MDdaMDMxMTAvBgNV
BAMTKDU5QTI1NUVCOURFODc3NkQyNTU3RkUwOTkzMTZCMThFQjEzRjJBNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD24RzJBimq3qFzynbgcUVRVCra
kUWtmenvYC/26aWfKs7a8QjX/iHVvyuif1TTJikVujk4RBU3mZZIX7MQtyv29KOL
38R+qouFnVNfKT0r4k9w2sAZPWkwNxpnTi3HZJ0Ix1U0beWtuJo+m+8voQa1s9Ki
iMJtnp2QAPzSNjppdtiGm+hJ6TTlw9QY0Gm2vB9/REydFtomrv+ktpFY8MjMdW8n
Qcg8Dmxr4WyFKOXszG+fbQhDk17M0TJ8PnvelfuudIe2BXaKFo/oRh0Xh0P2AwLc
mH5jKQuPL/5QtXnXPdMyTo0OF+YoO+hksd5etvoGEgvHkPIctahy4AbKqXf3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUWaJV653od20lV/4JkxaxjrE/Km0wHwYDVR0j
BBgwFoAUd3+IWVSGdfJZpWcq1j3xqfQuimcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmJjZDlhN2QtZGUzNS00N2U4LTkyMjgtMTJkZmIwYjhlYWM4LzAvNzc3Rjg4NTk1
NDg2NzVGMjU5QTU2NzJBRDYzREYxQTlGNDJFOEE2Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NzdGODg1OTU0ODY3NUYyNTlBNTY3MkFENjNERjFBOUY0MkU4
QTY3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZiY2Q5YTdkLWRlMzUtNDdlOC05
MjI4LTEyZGZiMGI4ZWFjOC8wLzMxMzAzMzJlMzEzNjM5MmUzMTM4MzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqbowDQYJ
KoZIhvcNAQELBQADggEBAET/UfiFcr9qtOvdFDF+UpjwUSLDoOametf0ruZc4yph
qyC6F2FBIuDf6ziO2vLQCGZruQLv3N/56YEtogYMOWeF2e3eCkhBWdcEOmJ4w3eN
iAhsz6zBk/LdxnYJXvHADIQ69wzwFIe/BbVHdx6PV0bKsBOHFrKbIhiMBhJgttvP
Hdggu2qvZlrj+dOjQUXSkqvlCOTU0cmVDOfV054EUiqIW/x9jM9HnDMm5m7SYG6o
Avb9TZOe9RjlC5wjkP7hI9f4hlDNI1M3kRvgmjtuTkhoIMjfBzaHWQK81oe+AZyP
qSzhizBWs8u4DKnp3w+UqsvcqbvWrZLsdSrwPK4aWaM=
-----END CERTIFICATE-----
Generated at Wed May 13 03:15:37 2026 by rpki-client