Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa
File:                     3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (raw, json)
Hash identifier:          n4IkgoMW2u0zkFgXDHL0eZSUTKgr/z1ZRj5PZ9Dfmxk=
Subject key identifier:   B6:E1:E5:F0:0B:30:F8:AD:54:3C:82:19:47:63:59:A7:03:3F:E5:40
Certificate issuer:       /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial:       047696E512663AC7C552EA8EAAE4189FE1686CD9
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa
Signing time:             Sun 03 May 2026 02:43:27 +0000
ROA not before:           Sun 03 May 2026 02:38:27 +0000
ROA not after:            Sun 02 May 2027 02:43:27 +0000
asID:                     150936
IP address blocks:        103.110.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
                          rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:76:96:e5:12:66:3a:c7:c5:52:ea:8e:aa:e4:18:9f:e1:68:6c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
        Validity
            Not Before: May  3 02:38:27 2026 GMT
            Not After : May  2 02:43:27 2027 GMT
        Subject: CN=B6E1E5F00B30F8AD543C8219476359A7033FE540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:d7:f6:1f:bf:04:1b:08:53:2b:43:c7:49:
                    1b:9c:d3:07:e4:4f:62:7a:dc:53:ff:d7:42:be:c2:
                    5e:08:da:bb:cd:82:f1:c9:a0:29:18:a3:c6:9e:05:
                    9e:b0:cb:67:43:7e:20:39:e9:33:f8:a4:d7:2f:1e:
                    cf:2a:01:bb:db:66:24:c0:0e:82:0e:20:2b:03:d0:
                    25:16:e6:72:58:83:8f:72:d2:07:de:70:63:19:af:
                    07:37:e3:cd:46:30:c1:31:0a:41:71:fa:d0:e6:fe:
                    d5:b4:88:85:85:8d:42:cf:20:46:f4:55:3c:a9:4a:
                    84:72:53:25:45:03:6d:2a:f7:c1:96:cb:70:d0:a0:
                    f8:43:38:35:74:1a:6f:57:3f:a0:5f:bc:83:ab:dc:
                    c0:45:c7:10:fa:75:d4:7a:a2:fe:12:9e:db:6a:e9:
                    47:8f:b4:9e:89:08:35:e8:dd:8b:4b:cf:da:1e:64:
                    53:fa:28:26:92:52:26:56:60:ce:10:49:6c:7f:30:
                    e7:7e:e2:6e:a2:db:e3:5b:e5:f9:c7:fb:f6:a2:ac:
                    77:58:97:03:14:7c:02:52:cf:88:94:fa:1a:5e:39:
                    76:57:ec:88:20:93:51:a7:c4:5c:d3:69:31:33:46:
                    ba:4e:b7:70:75:0b:e8:10:70:ff:51:06:2e:5c:58:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E1:E5:F0:0B:30:F8:AD:54:3C:82:19:47:63:59:A7:03:3F:E5:40
            X509v3 Authority Key Identifier:
                keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f5:07:76:ad:72:05:58:45:45:84:f0:c1:f7:74:0c:31:20:
         73:47:df:f9:1b:58:2c:24:a0:ed:d5:e7:04:3f:3c:7e:91:91:
         5f:65:de:21:89:78:92:bc:39:90:21:ee:a8:df:32:19:69:66:
         63:cb:a0:45:7c:93:0f:20:61:ec:77:8b:b1:17:37:a5:83:7a:
         85:51:1f:28:2a:7f:ac:37:d7:fe:39:4f:7b:ce:a4:2d:92:03:
         e4:9e:ab:42:4e:c3:a8:ec:4b:3c:c2:72:63:ce:35:53:09:6e:
         27:bc:e9:ef:db:0e:ff:76:7d:dc:59:64:27:44:e2:1e:df:a2:
         6d:e3:35:ce:a3:74:1c:49:db:21:26:69:6d:47:6f:1d:53:1e:
         13:f4:65:c3:c2:07:67:f6:45:d6:e1:a0:72:62:86:9f:de:15:
         eb:aa:9e:13:c3:2d:d3:70:4f:c4:ff:f2:62:8a:2c:ad:ac:1a:
         b7:fb:7e:3e:cd:e5:f3:0d:16:c9:f9:73:b0:09:25:80:bf:7c:
         39:f9:0d:c1:ac:4c:ef:f1:a3:59:cb:be:18:fb:a3:71:e5:1f:
         fe:aa:73:70:87:28:0c:08:b8:b3:15:0d:43:46:70:d4:bd:ce:
         59:0f:1f:7c:99:d6:fb:21:3e:a6:a6:65:7b:9a:a1:9d:d5:be:
         44:84:7e:4d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBHaW5RJmOsfFUuqOquQYn+FobNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQxNzRDMDE1MEQ2MzUyNUY1REIyMEYwOTkyRURFRUNE
NzAzODBFNTAeFw0yNjA1MDMwMjM4MjdaFw0yNzA1MDIwMjQzMjdaMDMxMTAvBgNV
BAMTKEI2RTFFNUYwMEIzMEY4QUQ1NDNDODIxOTQ3NjM1OUE3MDMzRkU1NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktdf2H78EGwhTK0PHSRuc0wfk
T2J63FP/10K+wl4I2rvNgvHJoCkYo8aeBZ6wy2dDfiA56TP4pNcvHs8qAbvbZiTA
DoIOICsD0CUW5nJYg49y0gfecGMZrwc3481GMMExCkFx+tDm/tW0iIWFjULPIEb0
VTypSoRyUyVFA20q98GWy3DQoPhDODV0Gm9XP6BfvIOr3MBFxxD6ddR6ov4Snttq
6UePtJ6JCDXo3YtLz9oeZFP6KCaSUiZWYM4QSWx/MOd+4m6i2+Nb5fnH+/airHdY
lwMUfAJSz4iU+hpeOXZX7Iggk1GnxFzTaTEzRrpOt3B1C+gQcP9RBi5cWLwzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUtuHl8Asw+K1UPIIZR2NZpwM/5UAwHwYDVR0j
BBgwFoAU7RdMAVDWNSX12yDwmS7e7NcDgOUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzRiZjA3Y2YtNTBhOS00MjhhLTkwZDItZDQ0ZDZiNzYyYjU1LzAvRUQxNzRDMDE1
MEQ2MzUyNUY1REIyMEYwOTkyRURFRUNENzAzODBFNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRDE3NEMwMTUwRDYzNTI1RjVEQjIwRjA5OTJFREVFQ0Q3MDM4
MEU1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc0YmYwN2NmLTUwYTktNDI4YS05
MGQyLWQ0NGQ2Yjc2MmI1NS8wLzMxMzAzMzJlMzEzMTMwMmUzMzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ24jMA0GCSqG
SIb3DQEBCwUAA4IBAQB39Qd2rXIFWEVFhPDB93QMMSBzR9/5G1gsJKDt1ecEPzx+
kZFfZd4hiXiSvDmQIe6o3zIZaWZjy6BFfJMPIGHsd4uxFzelg3qFUR8oKn+sN9f+
OU97zqQtkgPknqtCTsOo7Es8wnJjzjVTCW4nvOnv2w7/dn3cWWQnROIe36Jt4zXO
o3QcSdshJmltR28dUx4T9GXDwgdn9kXW4aByYoaf3hXrqp4Twy3TcE/E//Jiiiyt
rBq3+34+zeXzDRbJ+XOwCSWAv3w5+Q3BrEzv8aNZy74Y+6Nx5R/+qnNwhygMCLiz
FQ1DRnDUvc5ZDx98mdb7IT6mpmV7mqGd1b5EhH5N
-----END CERTIFICATE-----
Generated at Tue May 5 18:56:33 2026 by rpki-client