Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa
File:                     3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (raw, json)
Hash identifier:          KHtVXWtlCbbhxsDHGtD1PEIjpcpKfmg4Svhc1ZAfVdk=
Subject key identifier:   46:1F:5C:1D:4C:52:81:62:D5:61:CC:EC:13:88:E9:7B:57:08:12:F2
Certificate issuer:       /CN=B28E2055919DC6491CBE15480ABD67D66E672F45
Certificate serial:       1B99DDCDFDBA86644ED78DB137793624D31AEC77
Authority key identifier: B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa
Signing time:             Tue 06 Oct 2026 08:05:23 +0000
ROA not before:           Tue 06 Oct 2026 08:00:23 +0000
ROA not after:            Tue 05 Oct 2027 08:05:23 +0000
asID:                     151600
IP address blocks:        103.203.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl
                          rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:99:dd:cd:fd:ba:86:64:4e:d7:8d:b1:37:79:36:24:d3:1a:ec:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28E2055919DC6491CBE15480ABD67D66E672F45
        Validity
            Not Before: Oct  6 08:00:23 2026 GMT
            Not After : Oct  5 08:05:23 2027 GMT
        Subject: CN=461F5C1D4C528162D561CCEC1388E97B570812F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:c7:b5:c1:c1:a5:50:a7:8e:48:2e:58:1a:
                    5f:1a:2a:dd:d6:ed:2a:b8:4a:b3:09:aa:e6:2f:4c:
                    fd:7d:d7:49:3d:da:d3:d6:0b:59:17:de:f5:a1:99:
                    32:d4:59:c9:05:41:98:24:98:90:d3:0a:bc:c0:54:
                    a4:6e:89:53:6d:69:c9:6c:88:88:c4:b2:f6:ea:28:
                    0e:d9:30:e9:19:44:b1:ca:4f:c6:6c:0c:5b:4e:9e:
                    ae:46:97:16:dd:9a:9a:87:2e:e4:87:fa:b7:f0:8c:
                    85:a7:eb:82:64:26:75:37:48:03:49:eb:2d:58:48:
                    3c:1f:1c:89:98:6b:c0:7a:46:ce:c9:4a:40:75:6c:
                    cc:54:c0:3b:32:5c:f5:66:d5:8b:76:92:67:b0:88:
                    dd:85:69:4b:a4:83:72:1f:10:68:26:0d:59:84:28:
                    dc:b1:5d:dd:8d:43:6c:4f:1d:e1:28:70:0a:2c:ef:
                    87:2c:7f:c7:58:03:39:77:86:fa:0a:f9:75:4b:9b:
                    99:7e:43:ba:b1:18:93:53:fe:ed:0c:97:d8:80:ae:
                    79:44:2f:f1:e6:08:0c:23:cc:91:c4:d8:8e:c9:bc:
                    50:87:39:bb:31:e8:80:a0:1c:d6:a7:a4:52:46:6a:
                    d7:ce:9d:dc:9c:09:06:89:ab:2c:9f:e0:75:e4:e4:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:5C:1D:4C:52:81:62:D5:61:CC:EC:13:88:E9:7B:57:08:12:F2
            X509v3 Authority Key Identifier:
                keyid:B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:0c:91:dd:86:55:9e:6e:7a:14:8d:b0:24:02:3f:b5:6e:cb:
         62:bf:1b:57:1e:7a:35:0e:c0:90:b9:47:6a:bc:e9:7b:f6:d8:
         a8:d2:54:80:39:58:63:4e:ee:0d:5b:80:68:d5:ce:6c:b5:1a:
         de:3e:99:c8:05:42:c5:45:e9:a0:78:51:9b:50:67:bf:d9:2b:
         99:27:28:86:2d:17:cf:61:37:32:0e:81:00:9a:3e:9c:33:ab:
         0e:d3:0f:0e:ee:bc:70:9a:1e:f9:fb:91:96:1c:9f:93:e6:0a:
         03:85:d6:d9:56:52:91:62:d9:b8:f4:e6:df:6c:a4:ec:72:b9:
         ff:d0:77:a4:07:aa:23:4e:1d:6a:29:90:20:b1:82:b9:b8:78:
         f6:38:69:cc:3a:f7:08:26:b1:83:be:12:90:1e:b9:45:45:69:
         93:21:ed:6a:7e:f5:de:a3:d1:a2:a9:aa:c2:5e:bd:bd:35:84:
         74:70:1a:e1:d1:e4:85:f8:b4:0e:77:aa:e6:cc:82:f5:7b:82:
         22:01:55:99:16:10:30:dd:e1:ba:c6:fd:2f:7f:2b:cb:2c:d5:
         2c:d6:44:e5:f3:1e:bf:2a:38:cd:af:b4:5c:f8:6c:ba:9e:69:
         73:a7:a4:33:36:87:6b:dd:07:e4:85:32:92:8c:38:38:73:be:
         d1:3e:b3:e2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUG5ndzf26hmRO142xN3k2JNMa7HcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4RTIwNTU5MTlEQzY0OTFDQkUxNTQ4MEFCRDY3RDY2
RTY3MkY0NTAeFw0yNjEwMDYwODAwMjNaFw0yNzEwMDUwODA1MjNaMDMxMTAvBgNV
BAMTKDQ2MUY1QzFENEM1MjgxNjJENTYxQ0NFQzEzODhFOTdCNTcwODEyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpE8e1wcGlUKeOSC5YGl8aKt3W
7Sq4SrMJquYvTP1910k92tPWC1kX3vWhmTLUWckFQZgkmJDTCrzAVKRuiVNtacls
iIjEsvbqKA7ZMOkZRLHKT8ZsDFtOnq5GlxbdmpqHLuSH+rfwjIWn64JkJnU3SANJ
6y1YSDwfHImYa8B6Rs7JSkB1bMxUwDsyXPVm1Yt2kmewiN2FaUukg3IfEGgmDVmE
KNyxXd2NQ2xPHeEocAos74csf8dYAzl3hvoK+XVLm5l+Q7qxGJNT/u0Ml9iArnlE
L/HmCAwjzJHE2I7JvFCHObsx6ICgHNanpFJGatfOndycCQaJqyyf4HXk5NnFAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURh9cHUxSgWLVYczsE4jpe1cIEvIwHwYDVR0j
BBgwFoAUso4gVZGdxkkcvhVICr1n1m5nL0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTFkZjI1NjktZTFmNC00YzY4LTg2MTUtZTM5ZGNlNTJhYmI0LzAvQjI4RTIwNTU5
MTlEQzY0OTFDQkUxNTQ4MEFCRDY3RDY2RTY3MkY0NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMjhFMjA1NTkxOURDNjQ5MUNCRTE1NDgwQUJENjdENjZFNjcy
RjQ1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUxZGYyNTY5LWUxZjQtNGM2OC04
NjE1LWUzOWRjZTUyYWJiNC8wLzMxMzAzMzJlMzIzMDMzMmUzMjMzMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNjMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABny+kwDQYJ
KoZIhvcNAQELBQADggEBAKgMkd2GVZ5uehSNsCQCP7Vuy2K/G1ceejUOwJC5R2q8
6Xv22KjSVIA5WGNO7g1bgGjVzmy1Gt4+mcgFQsVF6aB4UZtQZ7/ZK5knKIYtF89h
NzIOgQCaPpwzqw7TDw7uvHCaHvn7kZYcn5PmCgOF1tlWUpFi2bj05t9spOxyuf/Q
d6QHqiNOHWopkCCxgrm4ePY4acw69wgmsYO+EpAeuUVFaZMh7Wp+9d6j0aKpqsJe
vb01hHRwGuHR5IX4tA53qubMgvV7giIBVZkWEDDd4brG/S9/K8ss1SzWROXzHr8q
OM2vtFz4bLqeaXOnpDM2h2vdB+SFMpKMODhzvtE+s+I=
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:57:57 2026 by rpki-client