Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36302e302f32322d3232203d3e203338373538.roa
File:                     3130332e31302e36302e302f32322d3232203d3e203338373538.roa (raw, json)
Hash identifier:          /w04P6rBuyw3MdbZ7nzHPo3sQ0awbnKG2KmKUY3AjUc=
Subject key identifier:   4C:63:B5:03:1B:DB:8D:E5:E3:2F:DC:50:D8:DE:C3:F0:6B:60:41:84
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       358FCD8AC2AB2BE824678E3C2B549258C552B985
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36302e302f32322d3232203d3e203338373538.roa
Signing time:             Mon 05 Oct 2026 07:18:13 +0000
ROA not before:           Mon 05 Oct 2026 07:13:13 +0000
ROA not after:            Mon 04 Oct 2027 07:18:13 +0000
asID:                     38758
IP address blocks:        103.10.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8f:cd:8a:c2:ab:2b:e8:24:67:8e:3c:2b:54:92:58:c5:52:b9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: Oct  5 07:13:13 2026 GMT
            Not After : Oct  4 07:18:13 2027 GMT
        Subject: CN=4C63B5031BDB8DE5E32FDC50D8DEC3F06B604184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:e0:29:d6:5f:41:21:8f:b3:f2:6d:94:64:
                    6b:89:e8:44:86:05:6f:5a:75:f0:ff:88:bf:16:05:
                    50:51:48:b2:a1:8f:c5:24:96:79:86:8d:c5:7b:e1:
                    0c:a1:c9:33:df:6a:97:81:26:c0:c4:eb:71:d6:cc:
                    67:75:21:7f:59:9b:16:bd:a7:7f:1f:f2:fe:8d:38:
                    3b:56:e6:91:37:8f:f7:39:30:cb:04:00:ef:70:15:
                    ab:3f:5b:56:5c:1e:14:d7:c2:7a:bf:a6:f4:cb:ce:
                    6b:02:4f:68:7c:c0:ed:97:93:6d:79:d2:a5:e9:84:
                    ae:4e:67:25:51:7f:01:32:01:e2:0d:c0:a0:0f:46:
                    c8:e4:74:65:07:85:c7:5a:85:f2:16:29:4c:54:4d:
                    93:cb:ce:7a:2e:c5:55:80:eb:c3:0e:a9:18:90:5b:
                    48:b3:fb:a5:01:a3:13:ed:fc:8a:e3:f9:9f:e6:93:
                    dd:49:bd:6f:2e:18:cf:50:97:fd:ee:5a:92:30:9a:
                    d9:c5:5d:67:f6:d5:8f:69:42:13:d1:10:b5:77:66:
                    65:3c:68:f9:2c:14:54:1f:b4:cc:d0:83:0f:9d:48:
                    42:e3:1e:86:ff:79:c8:63:80:db:10:13:4c:cc:d8:
                    d6:90:af:9f:72:54:15:b3:5f:ab:5d:c8:1e:d6:7d:
                    4d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:63:B5:03:1B:DB:8D:E5:E3:2F:DC:50:D8:DE:C3:F0:6B:60:41:84
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36302e302f32322d3232203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:81:ff:6b:12:40:77:4c:3c:29:05:cb:c1:c7:84:f5:82:3d:
         0f:dd:01:a8:0d:95:b7:3e:aa:f9:b2:ca:31:6a:96:e5:d1:ce:
         bf:b8:83:4b:25:b5:7b:4d:fd:db:57:d3:2f:1f:40:86:85:aa:
         c9:a0:5e:4a:d7:b6:25:1e:d1:92:46:9f:7e:d0:73:e2:68:db:
         c1:b5:c1:6f:30:3e:a5:d3:20:df:f1:c3:08:41:62:34:b2:35:
         83:2d:01:32:7c:c6:af:27:16:79:f1:f4:7d:4b:10:80:ff:3a:
         ab:19:ef:61:19:25:02:f2:da:17:4d:3b:dc:1d:d5:9c:cc:3e:
         f5:65:6d:96:0e:43:8f:fe:a1:12:6e:48:27:b4:7d:b2:a0:3d:
         c6:8e:8f:61:4d:5a:48:34:45:75:34:2b:7a:da:5d:59:ce:f5:
         be:51:42:d6:d9:31:8a:ad:1b:9e:e2:59:9f:63:52:fe:53:be:
         41:e2:52:ce:48:b1:09:cb:20:df:c8:d8:0c:ec:6c:11:26:86:
         46:21:66:38:ab:c2:2b:96:65:e8:38:01:f1:93:42:ce:b6:cf:
         cc:bf:3b:15:64:ae:77:09:b2:0f:f9:30:34:dc:11:d1:b8:9e:
         21:d8:8e:d7:62:d2:7d:eb:60:b4:c3:69:50:27:8c:77:47:44:
         58:1c:20:6b
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUNY/NisKrK+gkZ448K1SSWMVSuYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5
MjFDQjBFNzAeFw0yNjEwMDUwNzEzMTNaFw0yNzEwMDQwNzE4MTNaMDMxMTAvBgNV
BAMTKDRDNjNCNTAzMUJEQjhERTVFMzJGREM1MEQ4REVDM0YwNkI2MDQxODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChjOAp1l9BIY+z8m2UZGuJ6ESG
BW9adfD/iL8WBVBRSLKhj8UklnmGjcV74QyhyTPfapeBJsDE63HWzGd1IX9Zmxa9
p38f8v6NODtW5pE3j/c5MMsEAO9wFas/W1ZcHhTXwnq/pvTLzmsCT2h8wO2Xk215
0qXphK5OZyVRfwEyAeINwKAPRsjkdGUHhcdahfIWKUxUTZPLznouxVWA68MOqRiQ
W0iz+6UBoxPt/Irj+Z/mk91JvW8uGM9Ql/3uWpIwmtnFXWf21Y9pQhPRELV3ZmU8
aPksFFQftMzQgw+dSELjHob/echjgNsQE0zM2NaQr59yVBWzX6tdyB7WfU05AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUTGO1AxvbjeXjL9xQ2N7D8GtgQYQwHwYDVR0j
BBgwFoAUuKGnhQ/kYGZFzbmTYT8DJpIcsOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWI0ZTE5NWUtMTJkZS00YzNjLTkzZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUw
RkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5MjFDQjBFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COEExQTc4NTBGRTQ2MDY2NDVDREI5OTM2MTNGMDMyNjkyMUNC
MEU3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05
M2U1LTUyMmVlNTQwMThkNi8wLzMxMzAzMzJlMzEzMDJlMzYzMDJlMzAyZjMyMzIy
ZDMyMzIyMDNkM2UyMDMzMzgzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnCjwwDQYJKoZIhvcN
AQELBQADggEBAIqB/2sSQHdMPCkFy8HHhPWCPQ/dAagNlbc+qvmyyjFqluXRzr+4
g0sltXtN/dtX0y8fQIaFqsmgXkrXtiUe0ZJGn37Qc+Jo28G1wW8wPqXTIN/xwwhB
YjSyNYMtATJ8xq8nFnnx9H1LEID/OqsZ72EZJQLy2hdNO9wd1ZzMPvVlbZYOQ4/+
oRJuSCe0fbKgPcaOj2FNWkg0RXU0K3raXVnO9b5RQtbZMYqtG57iWZ9jUv5TvkHi
Us5IsQnLIN/I2AzsbBEmhkYhZjirwiuWZeg4AfGTQs62z8y/OxVkrncJsg/5MDTc
EdG4niHYjtdi0n3rYLTDaVAnjHdHRFgcIGs=
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:37 2026 by rpki-client