Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa
File:                     3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          Y3QjCeZ1GQuw+Af/4ElzHz4uj30AWOknv+PuSj10pQI=
Subject key identifier:   9F:29:0A:06:0E:AE:9D:C4:EA:DC:42:E7:4F:B8:51:6A:3F:D0:17:32
Certificate issuer:       /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5
Certificate serial:       4AA975620FC34D9090B4C538DED8203C43090F7F
Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:30:28 +0000
ROA not before:           Sun 03 May 2026 02:25:28 +0000
ROA not after:            Sun 02 May 2027 02:30:28 +0000
asID:                     9341
IP address blocks:        103.17.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl
                          rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a9:75:62:0f:c3:4d:90:90:b4:c5:38:de:d8:20:3c:43:09:0f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5
        Validity
            Not Before: May  3 02:25:28 2026 GMT
            Not After : May  2 02:30:28 2027 GMT
        Subject: CN=9F290A060EAE9DC4EADC42E74FB8516A3FD01732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:70:c5:7c:09:92:3f:de:8f:f0:5b:f8:a8:
                    7d:a4:7c:bc:03:55:db:cb:9c:eb:3f:81:18:d6:f3:
                    2a:fd:5b:b0:06:c1:bb:f9:32:89:1c:fa:88:53:d6:
                    df:71:1a:a5:01:fd:df:ee:3f:3d:9e:11:30:18:ff:
                    50:78:43:df:5c:3a:a4:09:14:52:5d:f1:03:bf:e4:
                    75:6e:d7:c6:54:8b:e4:d2:99:9b:7b:e9:50:fd:71:
                    5f:b1:83:82:19:65:9d:e3:a7:ff:cc:f6:45:97:ea:
                    96:7f:19:94:4c:3c:0c:5c:be:fb:0a:7c:5c:44:cf:
                    0a:0c:a0:96:77:1a:f8:f9:86:10:6a:8e:38:a5:fd:
                    04:1d:53:32:54:8f:67:a6:4c:55:c4:a2:c6:f0:59:
                    e9:14:a9:05:f7:6b:ff:58:57:6c:ab:44:66:c6:76:
                    1e:eb:c1:2e:2a:fa:f5:d1:61:81:80:75:4c:06:03:
                    9d:62:71:6c:af:62:84:80:55:3a:dd:dc:63:b6:2d:
                    e5:a6:55:4d:c9:f3:69:7d:f4:42:fc:dd:0c:df:f5:
                    fa:90:73:7f:d0:e0:b7:19:8f:10:3a:fd:7a:33:95:
                    14:b5:f0:ab:97:41:fe:ef:af:de:aa:e1:33:0c:d6:
                    d9:f1:db:19:7c:72:3d:63:68:46:08:91:66:72:0d:
                    37:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:29:0A:06:0E:AE:9D:C4:EA:DC:42:E7:4F:B8:51:6A:3F:D0:17:32
            X509v3 Authority Key Identifier:
                keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:93:58:c9:11:2f:ac:23:9b:fd:62:ba:57:a4:31:f6:d5:
         19:c2:fd:97:9f:84:ec:00:85:3f:d2:10:91:87:b5:6a:06:85:
         3e:40:14:e8:f9:8d:49:c4:af:17:74:84:87:ff:06:4e:8d:ac:
         1b:01:4d:a9:4d:b1:e1:b1:c2:ac:8b:01:8c:47:af:6e:47:94:
         b1:71:eb:e6:4c:81:de:d2:79:52:ca:3d:fd:db:73:46:4c:ed:
         84:f2:6c:b5:1f:0e:68:62:61:34:b5:cc:76:32:7d:20:23:9c:
         09:80:98:38:e2:46:52:72:73:93:b3:6d:4a:10:3a:79:07:33:
         24:5b:a3:22:16:63:a4:4c:90:16:02:e2:89:b1:67:a1:30:4c:
         5c:91:75:04:ce:48:81:96:3f:26:93:22:7a:44:92:72:81:45:
         da:28:d1:0b:03:5f:37:c1:22:76:ae:b6:25:26:d2:12:cf:23:
         36:f0:d7:40:a5:90:6b:0d:29:e0:e4:53:9a:35:64:93:5c:a3:
         f7:98:15:0f:57:db:15:3b:b4:f7:c9:0f:39:82:9b:4e:28:2c:
         23:37:9f:d0:46:b9:9b:23:f0:1d:ea:cc:f0:93:bb:41:d0:31:
         28:4a:81:08:b4:f2:5f:3d:29:34:ee:ce:09:6e:d4:90:88:79:
         5c:a8:1f:c0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSql1Yg/DTZCQtMU43tggPEMJD38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI1MEZEQkYwMzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0
RjRFRTBENTAeFw0yNjA1MDMwMjI1MjhaFw0yNzA1MDIwMjMwMjhaMDMxMTAvBgNV
BAMTKDlGMjkwQTA2MEVBRTlEQzRFQURDNDJFNzRGQjg1MTZBM0ZEMDE3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZY3DFfAmSP96P8Fv4qH2kfLwD
VdvLnOs/gRjW8yr9W7AGwbv5Mokc+ohT1t9xGqUB/d/uPz2eETAY/1B4Q99cOqQJ
FFJd8QO/5HVu18ZUi+TSmZt76VD9cV+xg4IZZZ3jp//M9kWX6pZ/GZRMPAxcvvsK
fFxEzwoMoJZ3Gvj5hhBqjjil/QQdUzJUj2emTFXEosbwWekUqQX3a/9YV2yrRGbG
dh7rwS4q+vXRYYGAdUwGA51icWyvYoSAVTrd3GO2LeWmVU3J82l99EL83Qzf9fqQ
c3/Q4LcZjxA6/XozlRS18KuXQf7vr96q4TMM1tnx2xl8cj1jaEYIkWZyDTcxAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUnykKBg6uncTq3ELnT7hRaj/QFzIwHwYDVR0j
BBgwFoAUq1D9vwOEbjPS+MUYfeqfXk9O4NUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDc1OTQ3NmUtNmFkYi00ZjJlLWJlNzUtODQ2NzI1OWUxMjhmLzAvQUI1MEZEQkYw
Mzg0NkUzM0QyRjhDNTE4N0RFQTlGNUU0RjRFRTBENS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQjUwRkRCRjAzODQ2RTMzRDJGOEM1MTg3REVBOUY1RTRGNEVF
MEQ1LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3NTk0NzZlLTZhZGItNGYyZS1i
ZTc1LTg0NjcyNTllMTI4Zi8wLzMxMzAzMzJlMzEzNzJlMzEzNDMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnEY4wDQYJKoZIhvcN
AQELBQADggEBADTFk1jJES+sI5v9YrpXpDH21RnC/ZefhOwAhT/SEJGHtWoGhT5A
FOj5jUnErxd0hIf/Bk6NrBsBTalNseGxwqyLAYxHr25HlLFx6+ZMgd7SeVLKPf3b
c0ZM7YTybLUfDmhiYTS1zHYyfSAjnAmAmDjiRlJyc5OzbUoQOnkHMyRboyIWY6RM
kBYC4omxZ6EwTFyRdQTOSIGWPyaTInpEknKBRdoo0QsDXzfBInautiUm0hLPIzbw
10ClkGsNKeDkU5o1ZJNco/eYFQ9X2xU7tPfJDzmCm04oLCM3n9BGuZsj8B3qzPCT
u0HQMShKgQi08l89KTTuzglu1JCIeVyoH8A=
-----END CERTIFICATE-----
Generated at Tue May 5 13:26:52 2026 by rpki-client