Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/3130332e3136372e342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136372e342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          dXRSG12k0ppX+ri+7mTAl+dT1uExjDi4/YRLzs/TgNU=
Subject key identifier:   0A:57:A5:31:BE:00:52:0D:DD:4A:2A:35:A0:B4:23:0F:FC:8D:C5:EF
Certificate issuer:       /CN=380819CB34564C78D643A25A36874B03D1C8589A
Certificate serial:       39F2733E35F3B0A383D0E94DC81C8F09C8D4381D
Authority key identifier: 38:08:19:CB:34:56:4C:78:D6:43:A2:5A:36:87:4B:03:D1:C8:58:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/380819CB34564C78D643A25A36874B03D1C8589A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/3130332e3136372e342e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 02:37:46 +0000
ROA not before:           Sun 03 May 2026 02:32:46 +0000
ROA not after:            Sun 02 May 2027 02:37:46 +0000
asID:                     17995
IP address blocks:        103.167.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/380819CB34564C78D643A25A36874B03D1C8589A.crl
                          rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/380819CB34564C78D643A25A36874B03D1C8589A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/380819CB34564C78D643A25A36874B03D1C8589A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 15:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f2:73:3e:35:f3:b0:a3:83:d0:e9:4d:c8:1c:8f:09:c8:d4:38:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380819CB34564C78D643A25A36874B03D1C8589A
        Validity
            Not Before: May  3 02:32:46 2026 GMT
            Not After : May  2 02:37:46 2027 GMT
        Subject: CN=0A57A531BE00520DDD4A2A35A0B4230FFC8DC5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:cd:ee:ce:d9:e3:93:1b:13:be:e9:f0:93:
                    b5:88:5d:e2:fb:e9:e2:40:8a:58:66:43:9a:07:2c:
                    b0:6c:1d:17:98:c8:2e:5e:03:9b:95:cb:c0:63:85:
                    82:35:15:ff:e7:d1:f0:2d:09:e6:0a:cc:d5:be:66:
                    ed:d6:e0:f1:1b:88:7c:68:78:12:b0:83:c5:8f:85:
                    0f:16:c9:95:10:c8:06:a8:06:9e:e2:de:55:1f:3a:
                    8f:fc:f2:97:ea:56:4b:7c:63:7f:fa:60:9a:d4:3b:
                    0c:19:89:72:07:48:2f:9d:5b:84:13:a1:42:7c:55:
                    78:0b:c6:f2:20:ea:ec:d5:fc:51:6c:13:1f:3e:63:
                    16:7b:24:e8:3d:3a:2b:52:eb:d0:7e:8e:dd:4a:a9:
                    63:a2:02:64:64:01:cd:c5:f1:47:3c:49:b7:4e:86:
                    e9:8b:f4:37:95:4b:90:57:01:ce:06:d6:cf:46:c0:
                    2e:ea:2c:d9:fa:32:8b:68:fe:a7:ce:38:45:2a:72:
                    9d:fc:12:06:3d:81:54:b3:c2:92:01:2d:f6:15:c7:
                    d6:9b:88:c0:29:80:9b:0c:9c:3d:3f:c4:52:1b:c1:
                    3e:5d:66:9c:73:77:ae:41:11:bb:2d:1f:ac:d6:93:
                    c8:f0:3b:cc:a3:3f:6d:f7:68:e8:4d:99:7e:23:fc:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:57:A5:31:BE:00:52:0D:DD:4A:2A:35:A0:B4:23:0F:FC:8D:C5:EF
            X509v3 Authority Key Identifier:
                keyid:38:08:19:CB:34:56:4C:78:D6:43:A2:5A:36:87:4B:03:D1:C8:58:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/380819CB34564C78D643A25A36874B03D1C8589A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/380819CB34564C78D643A25A36874B03D1C8589A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/3130332e3136372e342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:cf:40:7b:de:06:ec:96:9b:3b:49:cc:aa:62:75:19:78:71:
         88:74:b6:b2:56:19:6d:4d:85:5a:6c:01:88:95:2b:ee:7f:07:
         59:84:8d:7d:53:45:ae:cd:bd:b6:bb:ea:76:55:5b:68:f5:5f:
         f9:c0:eb:37:c8:7d:f6:33:37:f9:b6:ad:67:bb:78:87:59:df:
         67:bc:90:ba:f9:24:7a:69:54:eb:05:31:d3:33:7b:1f:3f:0b:
         ba:f2:7a:85:ab:33:7f:7e:75:7c:61:bf:58:36:9e:f1:57:cb:
         db:ef:2e:01:76:23:f2:1e:c7:59:c9:eb:db:fa:8f:77:90:39:
         19:b5:3c:ea:78:18:6f:51:f2:f2:d2:e9:44:1c:f5:b3:ba:08:
         3d:19:b4:93:58:04:78:bb:f4:ae:a7:0a:e6:43:91:7c:60:33:
         4e:ba:a5:6c:b9:16:2d:66:e7:88:e6:8c:fc:2a:86:ba:f2:a1:
         e3:80:8f:91:70:9a:f6:a0:a7:7b:49:ce:cb:72:95:a4:ae:90:
         de:c5:e9:c4:58:a0:c4:30:1d:22:98:b1:4f:90:05:08:43:c5:
         72:a5:f5:46:79:2a:e6:bc:72:7b:2e:38:1b:d0:af:0f:fb:b4:
         e6:cf:1b:61:4f:d1:52:76:d7:9c:f0:fa:60:d9:e6:ef:f0:67:
         60:05:a7:a8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUOfJzPjXzsKOD0OlNyByPCcjUOB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgwODE5Q0IzNDU2NEM3OEQ2NDNBMjVBMzY4NzRCMDNE
MUM4NTg5QTAeFw0yNjA1MDMwMjMyNDZaFw0yNzA1MDIwMjM3NDZaMDMxMTAvBgNV
BAMTKDBBNTdBNTMxQkUwMDUyMERERDRBMkEzNUEwQjQyMzBGRkM4REM1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UM3uztnjkxsTvunwk7WIXeL7
6eJAilhmQ5oHLLBsHReYyC5eA5uVy8BjhYI1Ff/n0fAtCeYKzNW+Zu3W4PEbiHxo
eBKwg8WPhQ8WyZUQyAaoBp7i3lUfOo/88pfqVkt8Y3/6YJrUOwwZiXIHSC+dW4QT
oUJ8VXgLxvIg6uzV/FFsEx8+YxZ7JOg9OitS69B+jt1KqWOiAmRkAc3F8Uc8SbdO
humL9DeVS5BXAc4G1s9GwC7qLNn6Moto/qfOOEUqcp38EgY9gVSzwpIBLfYVx9ab
iMApgJsMnD0/xFIbwT5dZpxzd65BEbstH6zWk8jwO8yjP233aOhNmX4j/NyTAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUClelMb4AUg3dSio1oLQjD/yNxe8wHwYDVR0j
BBgwFoAUOAgZyzRWTHjWQ6JaNodLA9HIWJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjBjMTRiOTktNGVlNy00MjJhLWIwNjQtZGNhMzIzNmQ2NzU2LzAvMzgwODE5Q0Iz
NDU2NEM3OEQ2NDNBMjVBMzY4NzRCMDNEMUM4NTg5QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zODA4MTlDQjM0NTY0Qzc4RDY0M0EyNUEzNjg3NEIwM0QxQzg1
ODlBLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwYzE0Yjk5LTRlZTctNDIyYS1i
MDY0LWRjYTMyMzZkNjc1Ni8wLzMxMzAzMzJlMzEzNjM3MmUzNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzczOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpwQwDQYJKoZIhvcN
AQELBQADggEBAGLPQHveBuyWmztJzKpidRl4cYh0trJWGW1NhVpsAYiVK+5/B1mE
jX1TRa7Nvba76nZVW2j1X/nA6zfIffYzN/m2rWe7eIdZ32e8kLr5JHppVOsFMdMz
ex8/C7ryeoWrM39+dXxhv1g2nvFXy9vvLgF2I/Iex1nJ69v6j3eQORm1POp4GG9R
8vLS6UQc9bO6CD0ZtJNYBHi79K6nCuZDkXxgM066pWy5Fi1m54jmjPwqhrryoeOA
j5Fwmvagp3tJzstylaSukN7F6cRYoMQwHSKYsU+QBQhDxXKl9UZ5Kua8cnsuOBvQ
rw/7tObPG2FP0VJ215zw+mDZ5u/wZ2AFp6g=
-----END CERTIFICATE-----
Generated at Fri May 8 06:34:45 2026 by rpki-client