Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa
File:                     3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (raw, json)
Hash identifier:          tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=
Subject key identifier:   DC:C4:DC:CC:9A:A4:5B:3F:0B:85:98:74:C9:77:93:ED:00:DE:48:E9
Certificate issuer:       /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD
Certificate serial:       AC7D985F10D8ADC327AA999834C9744CE4B0D9
Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa
Signing time:             Sun 03 May 2026 02:17:57 +0000
ROA not before:           Sun 03 May 2026 02:12:57 +0000
ROA not after:            Sun 02 May 2027 02:17:57 +0000
asID:                     149891
IP address blocks:        103.190.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl
                          rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 18:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ac:7d:98:5f:10:d8:ad:c3:27:aa:99:98:34:c9:74:4c:e4:b0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD
        Validity
            Not Before: May  3 02:12:57 2026 GMT
            Not After : May  2 02:17:57 2027 GMT
        Subject: CN=DCC4DCCC9AA45B3F0B859874C97793ED00DE48E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:3c:21:9d:24:de:c7:50:21:6c:e6:f3:20:
                    23:0e:5d:90:d1:9f:ca:a1:66:78:d8:ed:99:f0:4b:
                    65:d6:87:32:6c:1c:08:cb:fd:1c:1f:ad:7a:39:dd:
                    95:4f:67:9a:5b:b7:f3:3d:c6:ad:8e:9c:73:52:e4:
                    4d:1d:2d:b5:90:71:fe:33:57:27:80:68:64:f2:07:
                    08:a1:2b:bd:86:fb:3c:b6:66:f6:21:1e:cb:4f:ef:
                    6e:bb:fe:1f:a0:d3:a6:a3:d1:31:d4:9d:21:bb:b1:
                    f7:c9:ce:5d:bf:65:04:e1:48:a6:56:d8:79:ee:04:
                    96:c4:b4:53:8c:38:35:cd:9f:10:6d:1f:6d:2a:8a:
                    0a:f4:11:d6:c6:26:57:76:93:58:b8:3a:88:60:33:
                    19:d5:bf:5b:41:30:2c:04:d1:fe:39:00:da:6a:29:
                    6e:14:35:bd:57:fd:f2:1c:62:80:27:40:38:63:59:
                    88:75:f4:6f:b2:15:74:ad:1f:8f:34:7a:96:40:d3:
                    75:92:a5:e7:5a:16:01:dc:f8:1c:dd:f8:d5:e2:93:
                    32:d0:cb:b5:75:93:7e:dd:7c:57:3f:c6:7b:a1:e2:
                    20:e2:26:4b:b0:a0:fc:07:93:3c:a7:52:b8:d2:e4:
                    9c:aa:7a:cc:a3:33:44:18:76:48:8f:75:d4:be:bf:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:DC:CC:9A:A4:5B:3F:0B:85:98:74:C9:77:93:ED:00:DE:48:E9
            X509v3 Authority Key Identifier:
                keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:f1:af:8e:3c:b6:68:50:45:ab:0b:70:f5:c5:0f:71:8f:
         13:6c:e1:fb:5f:73:5e:2d:f2:5a:1c:4f:80:d7:10:4e:1d:d3:
         65:98:a5:65:f8:80:fe:20:6a:fc:1c:8e:3b:1a:74:c7:88:e0:
         4a:c3:e1:94:3c:2b:60:81:b5:91:e6:ce:13:1a:50:b7:e7:c7:
         9a:f3:b4:41:23:8a:2a:f3:04:33:6c:ef:b2:a6:ba:08:43:3b:
         18:9f:fb:b2:4b:16:46:d3:04:00:10:92:34:9b:bf:b3:0b:5e:
         1e:e6:c5:93:c9:43:a4:78:23:d8:9d:5c:55:7b:f5:23:27:09:
         5a:4f:84:29:f4:a1:fb:8c:0e:52:a8:08:75:39:72:71:e4:a2:
         3c:71:9e:0a:0b:52:e6:f8:b0:c1:e6:f3:0e:c8:32:c3:52:09:
         94:68:36:57:50:7a:75:7d:49:9e:1d:64:a1:32:e2:a1:44:e4:
         14:37:8a:f9:19:4f:2d:23:eb:86:18:c6:53:12:41:d6:7e:bf:
         43:34:43:b0:e1:3b:ed:7b:1e:e2:56:a0:94:d4:7a:b1:32:ea:
         66:c3:34:c8:96:bb:e2:7f:0e:a8:f7:7b:16:38:4d:2d:2b:3e:
         23:f0:b2:fd:77:40:78:ac:64:ab:e7:7c:91:ab:33:8b:43:2f:
         34:2d:fe:ba
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAKx9mF8Q2K3DJ6qZmDTJdEzksNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF
ODM1RURERDAeFw0yNjA1MDMwMjEyNTdaFw0yNzA1MDIwMjE3NTdaMDMxMTAvBgNV
BAMTKERDQzREQ0NDOUFBNDVCM0YwQjg1OTg3NEM5Nzc5M0VEMDBERTQ4RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPzwhnSTex1AhbObzICMOXZDR
n8qhZnjY7ZnwS2XWhzJsHAjL/RwfrXo53ZVPZ5pbt/M9xq2OnHNS5E0dLbWQcf4z
VyeAaGTyBwihK72G+zy2ZvYhHstP7267/h+g06aj0THUnSG7sffJzl2/ZQThSKZW
2HnuBJbEtFOMODXNnxBtH20qigr0EdbGJld2k1i4OohgMxnVv1tBMCwE0f45ANpq
KW4UNb1X/fIcYoAnQDhjWYh19G+yFXStH480epZA03WSpedaFgHc+Bzd+NXikzLQ
y7V1k37dfFc/xnuh4iDiJkuwoPwHkzynUrjS5JyqesyjM0QYdkiPddS+v3eTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3MTczJqkWz8LhZh0yXeT7QDeSOkwHwYDVR0j
BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3
RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF
RERELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWUxMjZmLTgxOTItNGQyOC1i
MjVlLWRlYWJkYjc5ZWIyMS8wLzMxMzAzMzJlMzEzOTMwMmUzMzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ74fMA0GCSqG
SIb3DQEBCwUAA4IBAQAEffGvjjy2aFBFqwtw9cUPcY8TbOH7X3NeLfJaHE+A1xBO
HdNlmKVl+ID+IGr8HI47GnTHiOBKw+GUPCtggbWR5s4TGlC358ea87RBI4oq8wQz
bO+yproIQzsYn/uySxZG0wQAEJI0m7+zC14e5sWTyUOkeCPYnVxVe/UjJwlaT4Qp
9KH7jA5SqAh1OXJx5KI8cZ4KC1Lm+LDB5vMOyDLDUgmUaDZXUHp1fUmeHWShMuKh
ROQUN4r5GU8tI+uGGMZTEkHWfr9DNEOw4Tvtex7iVqCU1HqxMupmwzTIlrvifw6o
93sWOE0tKz4j8LL9d0B4rGSr53yRqzOLQy80Lf66
-----END CERTIFICATE-----
Generated at Tue May 5 10:32:01 2026 by rpki-client