Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa
File:                     3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa (raw, json)
Hash identifier:          ghxBTEX+6jxYsJHob/rRu053sMMi/T0aLpNH4JSYM9E=
Subject key identifier:   5A:8B:E5:6A:DD:B2:0E:CF:E9:FC:EE:FE:8B:17:DF:63:BF:7E:13:7A
Certificate issuer:       /CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Certificate serial:       163FB4860D5464D40122F2A6A6988967B3245DC4
Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa
Signing time:             Fri 28 Aug 2026 08:55:16 +0000
ROA not before:           Fri 28 Aug 2026 08:50:16 +0000
ROA not after:            Fri 27 Aug 2027 08:55:16 +0000
asID:                     136885
IP address blocks:        103.105.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
                          rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3f:b4:86:0d:54:64:d4:01:22:f2:a6:a6:98:89:67:b3:24:5d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87
        Validity
            Not Before: Aug 28 08:50:16 2026 GMT
            Not After : Aug 27 08:55:16 2027 GMT
        Subject: CN=5A8BE56ADDB20ECFE9FCEEFE8B17DF63BF7E137A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:3c:74:ea:d0:93:2a:55:c6:da:ec:14:d5:
                    87:cf:bf:e3:c4:ea:55:86:51:49:d1:7d:ba:24:d4:
                    8e:a9:cc:d3:f2:94:32:25:71:33:d5:7f:50:c6:4b:
                    12:5f:c5:cd:9f:01:82:5e:0d:8f:de:e8:ed:ce:dd:
                    ed:11:96:f8:d5:47:33:6f:56:7c:6b:36:86:f1:5e:
                    0e:2b:7f:77:23:fe:1e:ff:84:18:e7:97:9e:b7:b7:
                    a4:4a:93:01:35:63:0b:6e:47:e2:99:b9:7a:fe:fb:
                    36:9a:9c:4c:5c:9b:13:e4:06:57:05:05:dc:6b:c2:
                    2b:a3:49:ce:1c:72:f8:07:94:5f:40:0c:ee:e4:2f:
                    a8:ae:a3:43:09:50:54:18:0a:1f:e1:46:1d:a2:ba:
                    33:de:9e:3c:2b:1e:fb:7e:47:9c:60:b6:94:cd:00:
                    3c:11:6b:7a:18:d7:90:b9:15:4c:3d:b5:61:8f:56:
                    5a:09:a6:50:7b:88:75:c6:06:11:23:d3:82:33:db:
                    06:a4:ea:6e:94:da:7f:a7:47:f4:47:86:58:9f:51:
                    e9:08:08:b7:e7:2e:18:95:a4:2b:b9:88:35:d9:72:
                    82:45:f3:a6:d5:66:c9:d7:f9:71:92:c4:41:e0:23:
                    c5:00:f8:4e:7a:3a:c7:c6:f0:3d:dc:e8:5f:32:55:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8B:E5:6A:DD:B2:0E:CF:E9:FC:EE:FE:8B:17:DF:63:BF:7E:13:7A
            X509v3 Authority Key Identifier:
                keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:c2:70:36:fe:75:46:f9:67:89:65:5d:6f:f5:e7:35:65:
         61:22:7f:89:d7:a4:16:ff:bd:b7:a1:8e:de:c5:1b:10:51:e5:
         93:78:8c:db:eb:36:78:ba:17:aa:f8:cc:8d:21:60:9e:fa:e0:
         96:22:9d:c3:e8:8a:93:11:dc:c8:85:d9:23:e6:89:41:25:91:
         ee:6e:ac:da:8d:ad:7b:3d:ff:31:05:fd:1d:f3:ad:49:b9:6b:
         e3:97:bf:ed:0d:c5:8a:35:5d:c6:e2:35:46:22:5e:82:1a:65:
         6f:fa:a6:f7:bd:0c:f8:c1:82:92:57:b6:34:dc:89:24:21:f5:
         b7:6a:1d:32:3f:c4:ae:54:b2:f1:02:19:07:50:41:d1:01:69:
         d0:1e:af:f9:d0:a3:09:ac:70:c5:19:c7:2c:06:41:81:35:1e:
         3c:2d:b5:5f:3e:0b:9b:31:41:00:e9:95:5f:59:82:ab:d8:5b:
         d7:c6:67:1a:3c:83:a5:08:5f:32:4b:6c:2e:d3:4f:04:30:de:
         12:4c:a1:b2:33:d8:29:70:e0:d8:a6:61:51:c1:ea:2f:65:7c:
         a5:f8:85:05:b3:e4:3c:7c:6a:22:08:c8:2c:02:e8:ce:b7:a6:
         00:ca:0e:ea:ac:aa:f8:fc:b1:2e:9a:52:e7:43:c0:47:fb:15:
         92:04:e4:85
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUFj+0hg1UZNQBIvKmppiJZ7MkXcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2RTA5Q0E0ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4
ODM0MkY4NzAeFw0yNjA4MjgwODUwMTZaFw0yNzA4MjcwODU1MTZaMDMxMTAvBgNV
BAMTKDVBOEJFNTZBRERCMjBFQ0ZFOUZDRUVGRThCMTdERjYzQkY3RTEzN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcCDx06tCTKlXG2uwU1YfPv+PE
6lWGUUnRfbok1I6pzNPylDIlcTPVf1DGSxJfxc2fAYJeDY/e6O3O3e0RlvjVRzNv
VnxrNobxXg4rf3cj/h7/hBjnl563t6RKkwE1YwtuR+KZuXr++zaanExcmxPkBlcF
BdxrwiujSc4ccvgHlF9ADO7kL6iuo0MJUFQYCh/hRh2iujPenjwrHvt+R5xgtpTN
ADwRa3oY15C5FUw9tWGPVloJplB7iHXGBhEj04Iz2wak6m6U2n+nR/RHhlifUekI
CLfnLhiVpCu5iDXZcoJF86bVZsnX+XGSxEHgI8UA+E56OsfG8D3c6F8yVSW/AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUWovlat2yDs/p/O7+ixffY79+E3owHwYDVR0j
BBgwFoAUVm4JykgwAkQo76syvUxcBYg0L4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzE2YWE1NGYtNzE1OC00M2FmLWIzMzYtYmU0NzE0ODE2ZmFkLzAvNTY2RTA5Q0E0
ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4ODM0MkY4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NjZFMDlDQTQ4MzAwMjQ0MjhFRkFCMzJCRDRDNUMwNTg4MzQy
Rjg3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxNmFhNTRmLTcxNTgtNDNhZi1i
MzM2LWJlNDcxNDgxNmZhZC8wLzMxMzAzMzJlMzEzMDM1MmUzMjM1MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM4MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnafwwDQYJ
KoZIhvcNAQELBQADggEBAABbwnA2/nVG+WeJZV1v9ec1ZWEif4nXpBb/vbehjt7F
GxBR5ZN4jNvrNni6F6r4zI0hYJ764JYincPoipMR3MiF2SPmiUElke5urNqNrXs9
/zEF/R3zrUm5a+OXv+0NxYo1XcbiNUYiXoIaZW/6pve9DPjBgpJXtjTciSQh9bdq
HTI/xK5UsvECGQdQQdEBadAer/nQowmscMUZxywGQYE1HjwttV8+C5sxQQDplV9Z
gqvYW9fGZxo8g6UIXzJLbC7TTwQw3hJMobIz2Clw4NimYVHB6i9lfKX4hQWz5Dx8
aiIIyCwC6M63pgDKDuqsqvj8sS6aUudDwEf7FZIE5IU=
-----END CERTIFICATE-----
Generated at Thu Sep 17 08:17:12 2026 by rpki-client