Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa
File:                     3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa (raw, json)
Hash identifier:          7pTX7hEw/cPBB65WrymolMq0XfFtArVsQAjQ8kXobZY=
Subject key identifier:   A7:6E:A4:0A:97:95:7C:EE:11:85:FA:2F:1D:E3:96:8B:1C:1E:B6:27
Certificate issuer:       /CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265
Certificate serial:       7701F4FFDD8B036856C5393AAFCE0F87A8F3439B
Authority key identifier: CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa
Signing time:             Tue 20 Oct 2026 03:57:39 +0000
ROA not before:           Tue 20 Oct 2026 03:52:39 +0000
ROA not after:            Tue 19 Oct 2027 03:57:39 +0000
asID:                     55664
IP address blocks:        103.236.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl
                          rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 12:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:01:f4:ff:dd:8b:03:68:56:c5:39:3a:af:ce:0f:87:a8:f3:43:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265
        Validity
            Not Before: Oct 20 03:52:39 2026 GMT
            Not After : Oct 19 03:57:39 2027 GMT
        Subject: CN=A76EA40A97957CEE1185FA2F1DE3968B1C1EB627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:62:57:83:76:6c:8a:fd:2b:76:ce:6d:4f:
                    9d:94:87:dd:cf:97:f1:67:c9:55:2e:68:56:61:c8:
                    44:40:22:05:25:f8:5b:be:fa:64:73:f6:35:cf:ee:
                    e1:de:00:01:2b:d7:07:0d:4e:8d:90:d5:3b:2c:f6:
                    a1:d4:3f:40:b7:77:2d:1a:e8:fa:e7:23:cc:65:8c:
                    68:16:ee:ee:fd:72:ba:07:41:f4:1f:29:22:0d:1d:
                    d2:58:7a:5b:74:50:47:91:ab:c4:67:f6:ea:34:be:
                    5a:c5:9a:17:8c:70:89:65:33:1b:04:43:5d:2e:a4:
                    5d:7e:c1:b9:54:37:d2:25:2e:86:e5:ee:19:17:a1:
                    a7:48:03:8d:90:91:0d:bb:ec:7f:91:32:75:8f:a6:
                    74:11:12:d1:66:9c:06:35:2c:2a:7d:a3:e8:44:82:
                    b6:47:06:41:ca:88:d4:3a:af:82:fb:37:ae:ce:8a:
                    4d:7b:11:ad:a8:7f:c6:07:c4:d4:2f:e4:56:ef:90:
                    db:b1:30:c9:f3:c0:81:99:7d:56:fd:a8:44:9b:65:
                    88:01:11:1e:d2:38:f1:40:b4:51:23:6b:73:d4:fa:
                    04:45:91:89:80:dc:59:ac:35:b5:dd:9d:cd:60:f4:
                    c2:d5:19:b4:e7:46:d6:d6:73:12:37:79:68:c1:11:
                    c4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6E:A4:0A:97:95:7C:EE:11:85:FA:2F:1D:E3:96:8B:1C:1E:B6:27
            X509v3 Authority Key Identifier:
                keyid:CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:ec:46:80:69:c0:ce:14:14:00:cc:fb:89:b6:e0:9d:53:1e:
         52:d9:ce:07:89:7c:df:d3:77:e7:bb:ae:b4:5e:8d:12:10:88:
         6a:da:96:38:91:44:e1:90:ac:ba:66:e7:ba:64:7d:ce:4b:71:
         bc:52:78:48:6c:67:36:99:af:b3:08:7e:2f:c0:f1:90:87:95:
         f0:a4:42:5e:03:95:54:18:b7:a7:84:eb:11:7a:13:1a:cf:b2:
         d3:11:25:a4:de:2a:85:00:4c:0e:54:c8:1f:44:21:4c:6c:8b:
         10:db:18:09:65:cf:f5:0f:a6:25:49:39:f0:a7:85:80:47:f7:
         7c:64:f0:53:b0:43:33:e4:f8:60:b9:18:3b:3a:93:4c:06:d1:
         f8:2e:2a:36:45:94:26:fb:67:f7:d3:86:4b:4f:a4:be:31:ab:
         7a:1c:0e:2a:d7:5c:7d:dd:32:6f:94:ba:68:65:84:59:2a:58:
         88:2d:02:2a:a3:10:82:4c:ab:19:58:11:71:cc:6f:33:8a:8c:
         b5:a8:e7:4f:28:1b:79:81:e3:f3:62:83:87:f3:60:54:2a:77:
         1f:fa:25:98:7b:9a:78:9f:3f:13:11:41:d6:24:b4:ea:df:c1:
         77:83:2a:8b:af:9d:5d:f2:c2:7b:cf:ac:b0:a9:27:35:1e:0a:
         92:d7:62:4e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdwH0/92LA2hWxTk6r84Ph6jzQ5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZENDZGNTlCRkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZF
RjdFNjI2NTAeFw0yNjEwMjAwMzUyMzlaFw0yNzEwMTkwMzU3MzlaMDMxMTAvBgNV
BAMTKEE3NkVBNDBBOTc5NTdDRUUxMTg1RkEyRjFERTM5NjhCMUMxRUI2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPWJXg3Zsiv0rds5tT52Uh93P
l/FnyVUuaFZhyERAIgUl+Fu++mRz9jXP7uHeAAEr1wcNTo2Q1Tss9qHUP0C3dy0a
6PrnI8xljGgW7u79croHQfQfKSINHdJYelt0UEeRq8Rn9uo0vlrFmheMcIllMxsE
Q10upF1+wblUN9IlLobl7hkXoadIA42QkQ277H+RMnWPpnQREtFmnAY1LCp9o+hE
grZHBkHKiNQ6r4L7N67Oik17Ea2of8YHxNQv5FbvkNuxMMnzwIGZfVb9qESbZYgB
ER7SOPFAtFEja3PU+gRFkYmA3FmsNbXdnc1g9MLVGbTnRtbWcxI3eWjBEcTxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUp26kCpeVfO4RhfovHeOWixweticwHwYDVR0j
BBgwFoAUz9RvWb/OjgeZf/OI59PY1u9+YmUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmEzNzc5ODktNzE2Zi00OGE1LTkwOGUtMTk4NDAwMmYzMjNkLzAvQ0ZENDZGNTlC
RkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZFRjdFNjI2NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DRkQ0NkY1OUJGQ0U4RTA3OTk3RkYzODhFN0QzRDhENkVGN0U2
MjY1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZhMzc3OTg5LTcxNmYtNDhhNS05
MDhlLTE5ODQwMDJmMzIzZC8wLzMxMzAzMzJlMzIzMzM2MmUzMTM1MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+yWMA0GCSqG
SIb3DQEBCwUAA4IBAQDU7EaAacDOFBQAzPuJtuCdUx5S2c4HiXzf03fnu660Xo0S
EIhq2pY4kUThkKy6Zue6ZH3OS3G8UnhIbGc2ma+zCH4vwPGQh5XwpEJeA5VUGLen
hOsRehMaz7LTESWk3iqFAEwOVMgfRCFMbIsQ2xgJZc/1D6YlSTnwp4WAR/d8ZPBT
sEMz5PhguRg7OpNMBtH4Lio2RZQm+2f304ZLT6S+Mat6HA4q11x93TJvlLpoZYRZ
KliILQIqoxCCTKsZWBFxzG8zioy1qOdPKBt5gePzYoOH82BUKncf+iWYe5p4nz8T
EUHWJLTq38F3gyqLr51d8sJ7z6ywqSc1HgqS12JO
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:08:41 2026 by rpki-client