Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa
File:                     3130332e352e35302e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          p4ukH1H84E2OXHZ0f+4rfYiVhbuRJ3ak7nrQukeOEIw=
Subject key identifier:   6A:6B:4A:8F:15:3D:37:CD:37:85:68:14:DB:A2:C8:C6:45:AF:19:56
Certificate issuer:       /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Certificate serial:       6161A5340F6AAC539D259856D9C8D0CA8C97A891
Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa
Signing time:             Sun 03 May 2026 02:24:44 +0000
ROA not before:           Sun 03 May 2026 02:19:44 +0000
ROA not after:            Sun 02 May 2027 02:24:44 +0000
asID:                     58381
IP address blocks:        103.5.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
                          rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:61:a5:34:0f:6a:ac:53:9d:25:98:56:d9:c8:d0:ca:8c:97:a8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
        Validity
            Not Before: May  3 02:19:44 2026 GMT
            Not After : May  2 02:24:44 2027 GMT
        Subject: CN=6A6B4A8F153D37CD37856814DBA2C8C645AF1956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:89:41:fe:79:78:68:cc:7f:5a:ca:41:d8:
                    dd:bb:60:43:0c:b5:31:51:1a:21:c9:63:82:ef:4c:
                    5b:26:e9:37:00:82:ba:c3:0e:e9:77:77:86:65:74:
                    63:9c:e5:aa:44:38:e5:f1:17:03:85:b3:17:aa:b7:
                    b7:a0:c9:c5:fb:ec:7f:e6:27:73:63:21:a4:f3:a7:
                    25:df:99:f7:b0:47:1f:11:60:0a:94:ca:ef:6c:c6:
                    5b:0c:df:19:9d:ef:fa:f2:02:72:36:ec:b6:3e:20:
                    75:08:db:4a:90:ee:5b:13:f1:7a:04:42:98:bd:b6:
                    4e:cf:0f:c8:7e:b1:1f:be:4b:41:1f:50:0b:06:c3:
                    49:80:7e:17:3c:7a:af:42:be:f4:13:91:af:d6:a7:
                    8d:4e:c4:83:d7:00:c8:5d:a2:c3:e7:f1:6f:ec:29:
                    a7:1e:51:25:88:d8:00:d8:7a:2d:69:80:4f:e3:b5:
                    ae:66:83:aa:b8:53:f1:70:2f:4b:28:43:5d:f4:04:
                    74:1a:a5:46:ee:22:48:d0:97:fe:2a:b6:2e:b8:1b:
                    ff:10:27:cd:15:35:8e:6c:10:34:10:1d:e1:6f:f6:
                    e4:33:49:ce:d7:c5:fa:63:cc:ae:af:19:c9:99:5a:
                    84:70:f7:15:77:1c:7a:db:78:1e:9c:cd:5d:fe:11:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6B:4A:8F:15:3D:37:CD:37:85:68:14:DB:A2:C8:C6:45:AF:19:56
            X509v3 Authority Key Identifier:
                keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:74:7e:8e:a2:83:3c:0c:7d:5f:74:59:5b:29:6e:a9:51:48:
         85:39:80:bf:99:6b:22:f0:00:bf:f5:94:45:91:3f:69:88:5d:
         75:99:0a:76:a0:70:9d:45:23:9a:87:f3:66:fa:f4:15:1b:95:
         96:dd:e8:2f:11:6c:cc:31:64:15:b1:ea:6d:8a:23:cd:b6:eb:
         08:28:74:f5:65:02:55:1b:8c:6a:1c:ca:1f:8e:1d:0a:24:ce:
         1c:27:49:36:30:b4:58:88:5e:50:9f:39:0c:32:62:a8:b6:73:
         fe:14:6f:64:01:14:99:70:72:82:52:53:2a:d7:df:4d:d1:8f:
         38:9e:47:8b:e1:9c:0e:99:70:f5:f8:7f:bc:60:50:4f:27:6a:
         b9:8c:78:68:e0:ba:fd:fe:39:7f:fc:62:8c:0a:6c:68:b4:75:
         09:8c:a8:e4:03:ed:7b:09:11:84:fc:22:02:b5:ef:58:8e:95:
         3e:0c:d2:ee:c2:7c:26:7b:ad:21:2e:bb:fd:9f:fc:50:f2:99:
         11:b3:a5:f6:0f:f1:84:35:5e:40:dd:97:cd:c9:eb:c6:55:99:
         e1:fd:df:c9:18:7d:ff:e2:bc:70:7b:e0:a1:8f:42:69:43:40:
         3e:4c:51:c2:35:42:97:b3:e2:0f:e8:1c:c7:03:35:85:3f:38:
         4a:d6:63:f5
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUYWGlNA9qrFOdJZhW2cjQyoyXqJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJC
REE5OUNCMDAeFw0yNjA1MDMwMjE5NDRaFw0yNzA1MDIwMjI0NDRaMDMxMTAvBgNV
BAMTKDZBNkI0QThGMTUzRDM3Q0QzNzg1NjgxNERCQTJDOEM2NDVBRjE5NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51YlB/nl4aMx/WspB2N27YEMM
tTFRGiHJY4LvTFsm6TcAgrrDDul3d4ZldGOc5apEOOXxFwOFsxeqt7egycX77H/m
J3NjIaTzpyXfmfewRx8RYAqUyu9sxlsM3xmd7/ryAnI27LY+IHUI20qQ7lsT8XoE
Qpi9tk7PD8h+sR++S0EfUAsGw0mAfhc8eq9CvvQTka/Wp41OxIPXAMhdosPn8W/s
KaceUSWI2ADYei1pgE/jta5mg6q4U/FwL0soQ130BHQapUbuIkjQl/4qti64G/8Q
J80VNY5sEDQQHeFv9uQzSc7XxfpjzK6vGcmZWoRw9xV3HHrbeB6czV3+EZNVAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUamtKjxU9N803hWgU26LIxkWvGVYwHwYDVR0j
BBgwFoAUD7Qksg1qRYDm0yM/zy658r2pnLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzM4ZDI3NTUtMzgwZC00NzdlLWJmMjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIw
RDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJCREE5OUNCMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wRkI0MjRCMjBENkE0NTgwRTZEMzIzM0ZDRjJFQjlGMkJEQTk5
Q0IwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm
MjUtMGFmMjkwMjZiZDcwLzAvMzEzMDMzMmUzNTJlMzUzMDJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM1MzgzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnBTIwDQYJKoZIhvcNAQEL
BQADggEBAGJ0fo6igzwMfV90WVspbqlRSIU5gL+ZayLwAL/1lEWRP2mIXXWZCnag
cJ1FI5qH82b69BUblZbd6C8RbMwxZBWx6m2KI8226wgodPVlAlUbjGocyh+OHQok
zhwnSTYwtFiIXlCfOQwyYqi2c/4Ub2QBFJlwcoJSUyrX303RjzieR4vhnA6ZcPX4
f7xgUE8narmMeGjguv3+OX/8YowKbGi0dQmMqOQD7XsJEYT8IgK171iOlT4M0u7C
fCZ7rSEuu/2f/FDymRGzpfYP8YQ1XkDdl83J68ZVmeH938kYff/ivHB74KGPQmlD
QD5MUcI1Qpez4g/oHMcDNYU/OErWY/U=
-----END CERTIFICATE-----
Generated at Wed May 6 02:05:41 2026 by rpki-client