Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/3130332e36312e3131382e302f32342d3234203d3e203536323435.roa
File:                     3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (raw, json)
Hash identifier:          ZrQ8Isr8JoXQLo3blPKcf87aQRasBbosSmNqO/r9MRQ=
Subject key identifier:   87:68:20:DB:CE:9B:90:BB:C1:CD:B5:C2:E8:5A:59:54:43:3E:49:1E
Certificate issuer:       /CN=BE3DEE19A820316EB74DEA5A21779744CF1BE4D6
Certificate serial:       28CB41D3A7E5F0168CCA31279C5DE9DFCF61E5A5
Authority key identifier: BE:3D:EE:19:A8:20:31:6E:B7:4D:EA:5A:21:77:97:44:CF:1B:E4:D6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/3130332e36312e3131382e302f32342d3234203d3e203536323435.roa
Signing time:             Tue 13 Oct 2026 15:47:50 +0000
ROA not before:           Tue 13 Oct 2026 15:42:50 +0000
ROA not after:            Tue 12 Oct 2027 15:47:50 +0000
asID:                     56245
IP address blocks:        103.61.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.crl
                          rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cb:41:d3:a7:e5:f0:16:8c:ca:31:27:9c:5d:e9:df:cf:61:e5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DEE19A820316EB74DEA5A21779744CF1BE4D6
        Validity
            Not Before: Oct 13 15:42:50 2026 GMT
            Not After : Oct 12 15:47:50 2027 GMT
        Subject: CN=876820DBCE9B90BBC1CDB5C2E85A5954433E491E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:f3:25:d7:62:9b:7a:88:9e:b7:e8:57:f5:
                    5a:27:9e:34:cb:bf:b6:17:5c:15:cc:fb:b6:33:13:
                    ce:b6:1a:83:72:d0:1d:43:87:58:76:db:8d:b5:1a:
                    47:a3:52:13:d3:99:17:84:57:07:a9:b0:58:a7:e6:
                    46:37:fc:77:c6:db:2a:74:e5:4a:ed:a9:c3:93:52:
                    fa:8f:82:1c:52:a1:5f:0e:a3:aa:d3:15:42:28:ef:
                    66:c8:c5:c0:8b:ad:ff:bc:77:95:94:d5:d2:e1:09:
                    76:16:00:10:89:bd:78:24:07:96:0d:32:83:16:af:
                    bc:3b:25:09:e7:6b:d1:e3:3e:87:ea:0f:18:84:55:
                    eb:61:b9:22:76:df:ab:c0:2e:de:2d:2b:31:d2:4b:
                    f9:a3:7f:e3:e7:f8:de:9e:bf:37:cc:98:bc:ae:cf:
                    35:06:39:3c:23:f7:0f:1e:41:88:6a:4c:ec:03:f4:
                    f3:c5:db:9f:9a:5a:eb:ef:76:c4:3d:c9:f3:41:26:
                    f8:2d:fd:bd:e7:9b:89:6c:9c:29:a8:19:2e:41:cb:
                    53:73:c9:2a:e2:cd:2b:1e:87:06:a5:ff:b8:cd:88:
                    c1:6f:d2:83:f5:99:45:0c:d9:76:b4:e3:64:cf:6b:
                    b0:f7:f9:1d:a9:9f:3c:b3:1f:ac:ef:42:b4:1e:96:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:20:DB:CE:9B:90:BB:C1:CD:B5:C2:E8:5A:59:54:43:3E:49:1E
            X509v3 Authority Key Identifier:
                keyid:BE:3D:EE:19:A8:20:31:6E:B7:4D:EA:5A:21:77:97:44:CF:1B:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/3130332e36312e3131382e302f32342d3234203d3e203536323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:1a:6b:25:e6:97:f3:4b:3d:e4:13:14:1a:76:ce:d9:0a:b4:
         9e:f9:4b:b2:eb:91:3b:cd:35:ad:64:0e:72:ff:cb:e5:8e:af:
         4e:74:ab:54:6c:7f:bd:36:7b:22:c0:3d:f5:ef:38:36:76:a1:
         6e:06:5d:bb:05:32:b1:4d:2a:36:28:78:1a:8b:8b:87:35:f0:
         ec:bb:ea:80:82:bf:32:0d:21:fc:b5:ef:f9:0f:bb:d4:e6:7c:
         a9:58:23:34:41:a6:d0:47:0b:47:80:02:39:9d:d4:7e:a4:72:
         c9:dd:b6:ec:dd:16:fd:b3:1f:87:1b:18:00:d2:73:b4:70:fb:
         a8:8a:cc:97:00:05:fc:bc:c9:03:25:28:9f:11:1f:ab:a8:50:
         2e:b2:32:b1:37:e9:c7:b1:7e:34:c6:40:d5:98:01:4c:89:e9:
         dd:35:a1:97:e5:71:a3:cb:86:ef:42:b6:b7:f6:41:78:68:a6:
         f9:f0:14:82:29:fb:96:85:f3:87:24:fa:85:3a:86:9f:3d:8f:
         eb:06:6e:69:cc:36:7e:3c:a1:c2:f2:94:44:14:67:44:75:90:
         c3:85:a6:84:c6:33:13:61:7f:2f:40:89:a4:c0:54:ea:30:f1:
         7a:51:0b:60:be:82:e1:9c:80:52:89:af:ca:7c:f1:fc:8c:76:
         f6:2b:39:15
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKMtB06fl8BaMyjEnnF3p389h5aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzREVFMTlBODIwMzE2RUI3NERFQTVBMjE3Nzk3NDRD
RjFCRTRENjAeFw0yNjEwMTMxNTQyNTBaFw0yNzEwMTIxNTQ3NTBaMDMxMTAvBgNV
BAMTKDg3NjgyMERCQ0U5QjkwQkJDMUNEQjVDMkU4NUE1OTU0NDMzRTQ5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO5/Ml12Kbeoiet+hX9VonnjTL
v7YXXBXM+7YzE862GoNy0B1Dh1h22421GkejUhPTmReEVwepsFin5kY3/HfG2yp0
5UrtqcOTUvqPghxSoV8Oo6rTFUIo72bIxcCLrf+8d5WU1dLhCXYWABCJvXgkB5YN
MoMWr7w7JQnna9HjPofqDxiEVethuSJ236vALt4tKzHSS/mjf+Pn+N6evzfMmLyu
zzUGOTwj9w8eQYhqTOwD9PPF25+aWuvvdsQ9yfNBJvgt/b3nm4lsnCmoGS5By1Nz
ySrizSsehwal/7jNiMFv0oP1mUUM2Xa042TPa7D3+R2pnzyzH6zvQrQelo+zAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUh2gg286bkLvBzbXC6FpZVEM+SR4wHwYDVR0j
BBgwFoAUvj3uGaggMW63TepaIXeXRM8b5NYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQ1Njg1NTEtNzQ3MC00MjVhLTg0MjctOWM4MmEyYjQ2MTk2LzAvQkUzREVFMTlB
ODIwMzE2RUI3NERFQTVBMjE3Nzk3NDRDRjFCRTRENi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CRTNERUUxOUE4MjAzMTZFQjc0REVBNUEyMTc3OTc0NENGMUJF
NEQ2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FkNTY4NTUxLTc0NzAtNDI1YS04
NDI3LTljODJhMmI0NjE5Ni8wLzMxMzAzMzJlMzYzMTJlMzEzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc9djANBgkqhkiG
9w0BAQsFAAOCAQEAmRprJeaX80s95BMUGnbO2Qq0nvlLsuuRO801rWQOcv/L5Y6v
TnSrVGx/vTZ7IsA99e84NnahbgZduwUysU0qNih4GouLhzXw7LvqgIK/Mg0h/LXv
+Q+71OZ8qVgjNEGm0EcLR4ACOZ3UfqRyyd227N0W/bMfhxsYANJztHD7qIrMlwAF
/LzJAyUonxEfq6hQLrIysTfpx7F+NMZA1ZgBTInp3TWhl+Vxo8uG70K2t/ZBeGim
+fAUgin7loXzhyT6hTqGnz2P6wZuacw2fjyhwvKURBRnRHWQw4WmhMYzE2F/L0CJ
pMBU6jDxelELYL6C4ZyAUomvynzx/Ix29is5FQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:08:51 2026 by rpki-client