Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3130332e38352e3134382e302f32322d3234203d3e203137393935.roa
File:                     3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=
Subject key identifier:   98:C9:12:87:B1:E1:B4:DE:E4:C6:BB:C8:D7:AA:CD:F0:01:AE:CC:12
Certificate issuer:       /CN=6410D3838A65954BC1C301FEAAE74108F878E75C
Certificate serial:       6C1951F058CAA0EE58349C367F00E7A698A93BE6
Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3130332e38352e3134382e302f32322d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 02:55:05 +0000
ROA not before:           Sun 03 May 2026 02:50:05 +0000
ROA not after:            Sun 02 May 2027 02:55:05 +0000
asID:                     17995
IP address blocks:        103.85.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl
                          rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 19:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:19:51:f0:58:ca:a0:ee:58:34:9c:36:7f:00:e7:a6:98:a9:3b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C
        Validity
            Not Before: May  3 02:50:05 2026 GMT
            Not After : May  2 02:55:05 2027 GMT
        Subject: CN=98C91287B1E1B4DEE4C6BBC8D7AACDF001AECC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:6d:7a:c7:d0:31:90:2f:a1:34:cd:ea:81:
                    d2:2d:4e:0a:82:f2:73:0f:03:df:45:db:94:81:3b:
                    14:2c:b3:b4:ed:e8:74:c7:85:22:ad:35:fc:e6:c1:
                    80:cf:12:25:b3:d0:51:28:f6:2a:57:7e:7b:cd:0d:
                    e4:33:bb:04:34:01:3d:8c:9d:41:f6:0e:77:eb:ca:
                    fd:4d:7d:e6:10:2d:b0:b7:b1:38:e2:59:15:0a:59:
                    24:b6:fc:35:b5:a3:09:70:c7:c1:c0:23:b7:07:45:
                    c4:8d:3d:4e:35:0c:ac:2a:80:0f:55:da:37:af:67:
                    4d:be:d5:06:df:2c:b5:5c:a7:3a:1c:e1:27:3a:b0:
                    ed:d0:82:12:01:39:1f:d4:b2:38:89:db:8d:c1:13:
                    96:31:f4:d0:bc:ec:9a:1c:14:0d:f4:e3:72:19:84:
                    1f:6a:09:e6:73:17:49:82:2e:16:9f:41:7a:e8:e8:
                    a3:4a:31:03:26:b3:24:58:99:9a:9f:48:5c:9b:43:
                    ed:b1:7e:cf:62:14:36:4a:fe:64:fb:80:d6:eb:fc:
                    a3:06:be:3d:82:79:03:22:ac:d1:5f:6b:64:1f:86:
                    bd:9d:25:2d:ee:b7:45:e9:04:a4:5a:f9:50:ef:0d:
                    94:3c:2c:f2:5d:66:f6:4a:1d:6e:ec:1a:b8:30:85:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C9:12:87:B1:E1:B4:DE:E4:C6:BB:C8:D7:AA:CD:F0:01:AE:CC:12
            X509v3 Authority Key Identifier:
                keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3130332e38352e3134382e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:28:23:d9:1b:1a:d4:29:c8:1c:b3:fc:ac:a9:a3:76:9e:5e:
         6e:6b:d4:43:4d:6d:98:24:85:f2:ca:29:e0:c2:18:52:84:27:
         a0:04:ba:46:e4:b3:b7:ee:73:d0:2a:89:1c:d2:f8:9f:78:80:
         d8:d6:59:61:53:05:bd:ba:41:b8:22:af:f6:9b:8c:fa:74:b3:
         68:8b:f9:12:c6:b3:42:52:64:95:97:e9:23:e3:81:0d:78:e5:
         cd:93:89:4a:2d:1f:23:b1:de:4b:35:f9:31:ec:99:1a:4c:e4:
         0c:6a:18:c4:41:71:17:df:76:2d:fd:e1:66:e0:9e:de:8b:40:
         4d:06:e7:bd:3d:43:dc:1b:d5:53:d1:f2:3b:18:86:b5:3a:a3:
         07:5a:64:2b:9d:60:3a:7b:74:48:a7:4c:1b:af:30:98:e2:28:
         fe:3c:7a:64:04:70:1a:ed:f1:46:b6:ce:ed:fa:cd:f3:80:0b:
         8b:d9:54:1b:13:7b:cb:59:22:7e:62:4e:9c:a8:97:c2:2a:34:
         6f:5c:a3:c8:37:f0:31:27:d8:80:08:df:ac:3a:ed:68:89:b7:
         35:6e:dc:1f:b2:aa:e5:64:61:87:e1:e4:d5:fc:88:35:3c:93:
         d1:b3:0a:fb:6f:7a:8f:13:d6:8b:ec:e9:68:e3:da:51:7f:b3:
         49:4b:44:0d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbBlR8FjKoO5YNJw2fwDnppipO+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG
ODc4RTc1QzAeFw0yNjA1MDMwMjUwMDVaFw0yNzA1MDIwMjU1MDVaMDMxMTAvBgNV
BAMTKDk4QzkxMjg3QjFFMUI0REVFNEM2QkJDOEQ3QUFDREYwMDFBRUNDMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeJW16x9AxkC+hNM3qgdItTgqC
8nMPA99F25SBOxQss7Tt6HTHhSKtNfzmwYDPEiWz0FEo9ipXfnvNDeQzuwQ0AT2M
nUH2Dnfryv1NfeYQLbC3sTjiWRUKWSS2/DW1owlwx8HAI7cHRcSNPU41DKwqgA9V
2jevZ02+1QbfLLVcpzoc4Sc6sO3QghIBOR/UsjiJ243BE5Yx9NC87JocFA3043IZ
hB9qCeZzF0mCLhafQXro6KNKMQMmsyRYmZqfSFybQ+2xfs9iFDZK/mT7gNbr/KMG
vj2CeQMirNFfa2Qfhr2dJS3ut0XpBKRa+VDvDZQ8LPJdZvZKHW7sGrgwhf4jAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmMkSh7HhtN7kxrvI16rN8AGuzBIwHwYDVR0j
BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4
QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF
NzVDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzllZDk1NWM4LWU2ZDMtNDljMi1h
YmQ4LWUwZjkyYzA4MTI0Ny8wLzMxMzAzMzJlMzgzNTJlMzEzNDM4MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdVlDANBgkqhkiG
9w0BAQsFAAOCAQEAOSgj2Rsa1CnIHLP8rKmjdp5ebmvUQ01tmCSF8sop4MIYUoQn
oAS6RuSzt+5z0CqJHNL4n3iA2NZZYVMFvbpBuCKv9puM+nSzaIv5EsazQlJklZfp
I+OBDXjlzZOJSi0fI7HeSzX5MeyZGkzkDGoYxEFxF992Lf3hZuCe3otATQbnvT1D
3BvVU9HyOxiGtTqjB1pkK51gOnt0SKdMG68wmOIo/jx6ZARwGu3xRrbO7frN84AL
i9lUGxN7y1kifmJOnKiXwio0b1yjyDfwMSfYgAjfrDrtaIm3NW7cH7Kq5WRhh+Hk
1fyINTyT0bMK+296jxPWi+zpaOPaUX+zSUtEDQ==
-----END CERTIFICATE-----
Generated at Fri May 8 06:33:55 2026 by rpki-client