Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32362e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          YCN7I5UWNLXuHygdgU/kJLypeaTF/PMJFgsLTKVnbT4=
Subject key identifier:   E8:F1:A1:12:91:01:21:D4:A0:6B:7B:A7:CE:0E:B9:87:9C:98:16:51
Certificate issuer:       /CN=7A642EBA720716DAB552755544A2F1F74B4C87F0
Certificate serial:       62D5C0A6B25200449DCBC66F336B869724335452
Authority key identifier: 7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
Signing time:             Sun 03 May 2026 02:25:46 +0000
ROA not before:           Sun 03 May 2026 02:20:46 +0000
ROA not after:            Sun 02 May 2027 02:25:46 +0000
asID:                     63869
IP address blocks:        103.50.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl
                          rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d5:c0:a6:b2:52:00:44:9d:cb:c6:6f:33:6b:86:97:24:33:54:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A642EBA720716DAB552755544A2F1F74B4C87F0
        Validity
            Not Before: May  3 02:20:46 2026 GMT
            Not After : May  2 02:25:46 2027 GMT
        Subject: CN=E8F1A112910121D4A06B7BA7CE0EB9879C981651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:a3:85:4e:b5:5c:d9:f0:81:61:84:28:c4:
                    88:39:8c:da:ed:06:ae:d7:ec:56:47:26:f8:43:6c:
                    0a:7c:81:15:59:83:8d:0f:02:55:ff:68:87:30:16:
                    ad:83:36:b0:a6:62:66:7c:23:1f:6f:a4:af:3d:64:
                    9c:d2:54:f2:52:f1:87:37:3a:37:99:b6:14:e9:50:
                    b2:b3:b1:c9:5b:00:8d:59:f1:cb:bc:56:f8:09:70:
                    dd:7b:f9:69:3a:72:bc:92:73:7c:fc:62:8b:8b:3a:
                    31:91:1a:27:e9:8f:24:a4:b5:1e:99:e4:e9:d0:39:
                    8e:d6:05:68:08:41:a7:c8:94:2a:60:84:71:31:e4:
                    9c:e3:c3:f4:26:39:c9:2d:d2:9c:2a:25:49:24:f2:
                    91:50:be:fa:d5:3f:78:1d:0b:97:e1:de:79:27:6a:
                    87:5a:20:68:17:58:04:57:64:93:29:9b:05:ea:50:
                    3a:87:92:7c:f1:4f:36:2a:fd:d8:5b:6c:4e:10:08:
                    e1:f8:2d:2d:90:b5:a9:9a:83:da:f7:67:34:62:d9:
                    56:db:d1:0a:4b:83:50:5e:bc:c7:10:22:9c:bb:69:
                    db:19:70:f9:21:ce:50:ca:71:62:00:11:0b:6b:94:
                    3a:c2:6e:87:48:0e:9f:3a:8d:91:ad:8b:74:65:13:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F1:A1:12:91:01:21:D4:A0:6B:7B:A7:CE:0E:B9:87:9C:98:16:51
            X509v3 Authority Key Identifier:
                keyid:7A:64:2E:BA:72:07:16:DA:B5:52:75:55:44:A2:F1:F7:4B:4C:87:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/7A642EBA720716DAB552755544A2F1F74B4C87F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A642EBA720716DAB552755544A2F1F74B4C87F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:39:cc:4b:17:d5:6b:65:0a:2a:9e:d5:4b:d7:55:1e:38:d2:
         b7:46:9c:0b:f3:70:e9:31:d1:5e:75:18:ec:0c:91:60:43:f7:
         55:67:5e:fd:e0:0c:d8:43:45:25:e3:c1:26:80:52:8e:a7:46:
         b0:7b:61:ba:93:3c:c4:3e:a5:e5:20:88:28:0b:dc:fd:88:4c:
         2e:94:4a:10:ed:0f:16:1a:17:ca:21:95:d6:9c:9b:d6:6e:b0:
         34:50:9f:49:6b:e8:3d:64:a2:d7:23:68:d0:e0:6d:2b:e4:b8:
         d5:10:e3:a5:82:00:c8:15:c8:57:7e:80:b2:bd:a7:b2:cf:fc:
         75:98:53:a7:32:0b:8e:97:41:e3:3d:0c:53:cf:3c:1b:ae:60:
         b4:52:58:7a:e5:4b:43:9b:f9:a1:e1:a9:1b:5e:3d:62:a0:0d:
         b9:f7:dc:88:07:1f:6b:3e:87:91:17:e7:cc:7a:2e:eb:41:b8:
         5c:0d:47:6d:fc:c5:20:92:35:48:1c:df:b5:01:da:08:c4:35:
         4d:4e:ab:03:15:16:17:f9:a4:14:de:8c:df:e1:4b:a3:94:f3:
         d9:3a:1f:99:ed:0c:a4:d0:3c:db:97:d0:d3:82:fc:84:4d:f7:
         aa:7a:da:ed:eb:7b:71:af:e7:63:9a:5b:38:96:1d:ef:41:f4:
         86:86:5e:67
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUYtXAprJSAESdy8ZvM2uGlyQzVFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E2NDJFQkE3MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0
QjRDODdGMDAeFw0yNjA1MDMwMjIwNDZaFw0yNzA1MDIwMjI1NDZaMDMxMTAvBgNV
BAMTKEU4RjFBMTEyOTEwMTIxRDRBMDZCN0JBN0NFMEVCOTg3OUM5ODE2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcF6OFTrVc2fCBYYQoxIg5jNrt
Bq7X7FZHJvhDbAp8gRVZg40PAlX/aIcwFq2DNrCmYmZ8Ix9vpK89ZJzSVPJS8Yc3
OjeZthTpULKzsclbAI1Z8cu8VvgJcN17+Wk6crySc3z8YouLOjGRGifpjySktR6Z
5OnQOY7WBWgIQafIlCpghHEx5Jzjw/QmOckt0pwqJUkk8pFQvvrVP3gdC5fh3nkn
aodaIGgXWARXZJMpmwXqUDqHknzxTzYq/dhbbE4QCOH4LS2Qtamag9r3ZzRi2Vbb
0QpLg1BevMcQIpy7adsZcPkhzlDKcWIAEQtrlDrCbodIDp86jZGti3RlE5oNAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU6PGhEpEBIdSga3unzg65h5yYFlEwHwYDVR0j
BBgwFoAUemQuunIHFtq1UnVVRKLx90tMh/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzc2Njg1NDEtZDZjNi00MDllLThhZDEtNWU4OWE0YjI4NTBlLzAvN0E2NDJFQkE3
MjA3MTZEQUI1NTI3NTU1NDRBMkYxRjc0QjRDODdGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QTY0MkVCQTcyMDcxNkRBQjU1Mjc1NTU0NEEyRjFGNzRCNEM4
N0YwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM3NjY4NTQxLWQ2YzYtNDA5ZS04
YWQxLTVlODlhNGIyODUwZS8wLzMxMzAzMzJlMzUzMDJlMzIzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnMhowDQYJKoZIhvcN
AQELBQADggEBABE5zEsX1WtlCiqe1UvXVR440rdGnAvzcOkx0V51GOwMkWBD91Vn
Xv3gDNhDRSXjwSaAUo6nRrB7YbqTPMQ+peUgiCgL3P2ITC6UShDtDxYaF8ohldac
m9ZusDRQn0lr6D1kotcjaNDgbSvkuNUQ46WCAMgVyFd+gLK9p7LP/HWYU6cyC46X
QeM9DFPPPBuuYLRSWHrlS0Ob+aHhqRtePWKgDbn33IgHH2s+h5EX58x6LutBuFwN
R238xSCSNUgc37UB2gjENU1OqwMVFhf5pBTejN/hS6OU89k6H5ntDKTQPNuX0NOC
/IRN96p62u3re3Gv52OaWziWHe9B9IaGXmc=
-----END CERTIFICATE-----
Generated at Wed May 13 20:25:46 2026 by rpki-client