Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          TG9ZchK6MwAHkiaJ/8wY22oJErP/aDt3mOhVppYOUpA=
Subject key identifier:   00:4A:78:8E:CA:91:85:51:02:1E:0B:86:D8:BA:E4:31:C5:8C:2C:70
Certificate issuer:       /CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2
Certificate serial:       4FD5CA0559BC3CB62D91ADAC45E34203BC7E0553
Authority key identifier: 87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 02:58:59 +0000
ROA not before:           Sun 03 May 2026 02:53:59 +0000
ROA not after:            Sun 02 May 2027 02:58:59 +0000
asID:                     17995
IP address blocks:        103.164.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl
                          rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 15:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d5:ca:05:59:bc:3c:b6:2d:91:ad:ac:45:e3:42:03:bc:7e:05:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2
        Validity
            Not Before: May  3 02:53:59 2026 GMT
            Not After : May  2 02:58:59 2027 GMT
        Subject: CN=004A788ECA918551021E0B86D8BAE431C58C2C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:62:02:d3:b1:ce:14:8a:d9:77:6d:3b:71:
                    02:36:d4:fc:35:ab:d3:2f:c7:48:06:d2:d9:49:2d:
                    cf:58:6e:eb:0d:f8:fe:9f:b9:6f:e5:84:29:c1:4a:
                    d9:4f:e6:ad:16:74:4c:ab:8f:b6:d2:ab:75:c5:9e:
                    4d:fb:7c:2d:a9:fd:27:70:b4:38:f8:13:5e:6d:c7:
                    e8:8d:ee:35:c3:f8:c8:8f:38:c4:0d:25:83:e0:ec:
                    ac:8c:e0:fe:d7:69:58:50:7a:44:81:72:95:4c:0f:
                    d4:1b:55:6e:66:36:b5:17:47:69:4c:0e:40:54:29:
                    a3:b5:b1:f0:82:79:81:86:97:9a:ed:cc:a7:94:e8:
                    05:f6:91:b4:ab:8f:01:c7:16:10:3c:ec:2a:9f:2c:
                    2c:64:d7:0a:91:c2:cf:72:eb:4c:6c:91:1a:3d:50:
                    1e:62:ea:ee:3e:57:9e:ec:ad:c9:0a:88:2d:89:44:
                    11:8b:b1:e0:1c:24:b9:4d:5d:ea:7a:9f:ee:25:89:
                    04:aa:99:b8:4e:25:d6:fc:e7:39:96:17:19:c0:de:
                    d3:e2:73:50:d7:f5:49:88:94:b1:73:79:d7:22:48:
                    dd:24:11:1c:c1:39:81:26:2b:8d:a3:32:86:4d:9a:
                    19:dc:57:47:91:83:0d:d8:fe:2d:98:e0:be:7c:9e:
                    fa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4A:78:8E:CA:91:85:51:02:1E:0B:86:D8:BA:E4:31:C5:8C:2C:70
            X509v3 Authority Key Identifier:
                keyid:87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:93:87:09:75:3b:d2:ab:2b:04:fb:4b:dc:d0:39:ca:52:a0:
         42:9f:73:dd:17:9b:ad:d9:fe:b2:e9:23:ab:99:a8:3a:b9:c1:
         62:dc:93:fb:64:90:ae:77:76:a7:f8:6b:d7:b5:c8:bf:55:76:
         1f:f8:82:fb:1b:8a:e7:61:4c:01:10:74:fa:cd:d3:b2:53:5c:
         ef:d7:d9:51:f2:8d:c6:f7:9b:22:43:fb:ef:d0:7f:6f:19:be:
         b3:b9:a5:8a:c2:89:28:3d:3b:94:66:25:fa:0a:ba:07:c6:7b:
         9c:5d:e6:ad:8b:60:af:c3:8e:67:b9:a0:bf:78:46:a2:1f:84:
         8d:a9:bb:1a:a2:08:fd:93:55:1d:f3:a0:a8:ec:2b:63:dc:ca:
         d6:a3:ad:a8:35:e4:39:e9:63:4a:8d:5e:c9:f4:13:92:37:7b:
         2b:ae:76:62:03:cc:79:1b:4c:5c:52:fc:22:7a:9d:d8:d8:75:
         08:e4:a5:5a:2c:98:e8:64:8f:80:51:0d:c0:6e:d7:fc:c6:61:
         a3:0b:81:06:e3:fb:91:ee:e8:e2:32:47:22:0a:6a:22:01:3e:
         7b:0e:b9:65:16:26:c8:ff:6e:ae:a1:6e:a0:91:11:60:7c:8e:
         ab:4a:64:ad:31:cd:59:4a:b6:51:cb:e1:ac:7e:79:14:5f:54:
         b4:33:74:1e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUT9XKBVm8PLYtka2sReNCA7x+BVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4Njgy
OTkwQjRCMjAeFw0yNjA1MDMwMjUzNTlaFw0yNzA1MDIwMjU4NTlaMDMxMTAvBgNV
BAMTKDAwNEE3ODhFQ0E5MTg1NTEwMjFFMEI4NkQ4QkFFNDMxQzU4QzJDNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL22IC07HOFIrZd207cQI21Pw1
q9Mvx0gG0tlJLc9YbusN+P6fuW/lhCnBStlP5q0WdEyrj7bSq3XFnk37fC2p/Sdw
tDj4E15tx+iN7jXD+MiPOMQNJYPg7KyM4P7XaVhQekSBcpVMD9QbVW5mNrUXR2lM
DkBUKaO1sfCCeYGGl5rtzKeU6AX2kbSrjwHHFhA87CqfLCxk1wqRws9y60xskRo9
UB5i6u4+V57srckKiC2JRBGLseAcJLlNXep6n+4liQSqmbhOJdb85zmWFxnA3tPi
c1DX9UmIlLFzedciSN0kERzBOYEmK42jMoZNmhncV0eRgw3Y/i2Y4L58nvonAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUAEp4jsqRhVECHguG2LrkMcWMLHAwHwYDVR0j
BBgwFoAUhwO7bx68euL+gNy5KVvIaCmQtLIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQ4N2JlZWQtNjMzMC00ZjMzLTkxMDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYx
RUJDN0FFMkZFODBEQ0I5Mjk1QkM4NjgyOTkwQjRCMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NzAzQkI2RjFFQkM3QUUyRkU4MERDQjkyOTVCQzg2ODI5OTBC
NEIyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FkODdiZWVkLTYzMzAtNGYzMy05
MTA1LTg3NzIyY2RmMmRkMC8wLzMxMzAzMzJlMzEzNjM0MmUzMTM3MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6SqMA0GCSqG
SIb3DQEBCwUAA4IBAQCak4cJdTvSqysE+0vc0DnKUqBCn3PdF5ut2f6y6SOrmag6
ucFi3JP7ZJCud3an+GvXtci/VXYf+IL7G4rnYUwBEHT6zdOyU1zv19lR8o3G95si
Q/vv0H9vGb6zuaWKwokoPTuUZiX6CroHxnucXeati2Cvw45nuaC/eEaiH4SNqbsa
ogj9k1Ud86Co7Ctj3MrWo62oNeQ56WNKjV7J9BOSN3srrnZiA8x5G0xcUvwiep3Y
2HUI5KVaLJjoZI+AUQ3Abtf8xmGjC4EG4/uR7ujiMkciCmoiAT57DrllFibI/26u
oW6gkRFgfI6rSmStMc1ZSrZRy+GsfnkUX1S0M3Qe
-----END CERTIFICATE-----
Generated at Fri May 8 06:36:38 2026 by rpki-client