Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
File:                     3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (raw, json)
Hash identifier:          +2lXgv7qT46jamYAhQHOD/peUAc/KCPSkZn0WfZ6XNU=
Subject key identifier:   1D:A3:3D:8D:EA:54:9F:1C:C7:FD:E8:F7:EF:80:25:0A:5C:69:61:ED
Certificate issuer:       /CN=8557597ED1797691974B01C1D7D410DE0468CB64
Certificate serial:       0DF8BABF830C77BA16F2C5EE31646AA159F4B658
Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
Signing time:             Sun 03 May 2026 02:46:50 +0000
ROA not before:           Sun 03 May 2026 02:41:50 +0000
ROA not after:            Sun 02 May 2027 02:46:50 +0000
asID:                     24312
IP address blocks:        103.195.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
                          rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 22:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f8:ba:bf:83:0c:77:ba:16:f2:c5:ee:31:64:6a:a1:59:f4:b6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64
        Validity
            Not Before: May  3 02:41:50 2026 GMT
            Not After : May  2 02:46:50 2027 GMT
        Subject: CN=1DA33D8DEA549F1CC7FDE8F7EF80250A5C6961ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:84:81:13:c5:bf:d6:29:b3:e1:7f:e6:9e:
                    fa:f1:7d:a6:0b:c7:c4:d6:88:31:4c:b4:0d:52:78:
                    bd:1e:62:d1:ac:58:55:f8:b7:11:46:25:f9:21:31:
                    3f:e4:75:63:6a:f6:64:4b:39:64:ad:7e:d3:e6:4c:
                    6b:28:59:83:e2:54:d6:98:84:ee:69:23:6d:b0:f6:
                    f9:fb:22:a2:74:dd:dd:b4:07:d4:c0:8b:97:db:56:
                    a4:94:b1:82:aa:7f:d2:a9:ef:8c:12:1c:99:0c:5f:
                    93:d5:42:e4:f3:f7:14:be:79:33:29:dc:26:86:48:
                    9b:3b:e8:5a:07:51:85:af:dc:09:31:79:11:d5:a0:
                    34:15:63:cd:f3:79:8a:28:d9:68:51:80:f7:77:b5:
                    95:5f:90:96:0c:1e:2c:af:bf:95:f7:b3:f6:01:7b:
                    0c:d5:9e:8d:24:48:d5:f3:fa:80:3c:66:f0:3c:4c:
                    19:f9:04:cc:1a:9c:33:2a:07:41:9e:33:70:35:16:
                    c8:2d:ba:12:ba:af:df:19:26:52:26:91:77:e5:ad:
                    d0:dc:86:6f:8f:5b:48:4d:f2:32:99:c6:15:8b:97:
                    ed:78:b0:cb:48:2a:c2:ac:38:95:79:da:5b:be:38:
                    2b:02:ac:94:1c:bb:38:cd:38:5b:e3:cb:21:ed:0b:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A3:3D:8D:EA:54:9F:1C:C7:FD:E8:F7:EF:80:25:0A:5C:69:61:ED
            X509v3 Authority Key Identifier:
                keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:24:11:48:47:15:b5:c6:55:42:b0:f8:f9:ec:61:b9:7a:
         9a:3d:14:2e:c4:fa:d8:1e:48:33:84:63:67:2d:82:8c:6e:ea:
         b7:4e:bb:04:56:46:7a:8f:0d:ce:3a:b5:d1:6d:f3:3c:4c:ec:
         50:ab:96:7a:d9:72:1b:b5:3d:2d:fe:e7:40:6e:d1:1e:60:97:
         10:ae:39:5f:c1:22:2c:72:a9:ed:0c:e0:52:5e:b4:21:7f:ad:
         19:c5:e1:5f:40:f5:75:29:ed:6d:9b:33:bb:ce:a8:a8:46:4c:
         b2:23:22:3b:ed:56:c8:6b:a4:72:d0:23:d7:32:95:6e:31:1e:
         c9:55:52:36:db:68:0d:ec:ba:14:0d:19:e2:40:c9:8f:89:ff:
         38:16:96:0a:2a:87:ac:6a:d4:24:78:f1:83:86:df:5f:fe:4a:
         bc:2d:c3:d0:44:98:b1:58:75:1e:76:d4:d4:3f:64:fe:c9:41:
         27:0e:00:10:e3:8a:81:87:52:c8:8d:57:b6:81:14:83:c5:dd:
         1a:2c:ae:c6:47:9f:95:0e:b5:36:05:ab:9b:a4:7a:b6:74:a1:
         d5:50:3b:ce:d8:3d:87:fb:e1:11:7e:5f:24:aa:a0:df:76:1d:
         17:05:e7:e8:be:1d:c9:4a:fa:f2:a0:94:2c:7b:06:94:3a:de:
         00:f1:05:ae
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDfi6v4MMd7oW8sXuMWRqoVn0tlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NzU5N0VEMTc5NzY5MTk3NEIwMUMxRDdENDEwREUw
NDY4Q0I2NDAeFw0yNjA1MDMwMjQxNTBaFw0yNzA1MDIwMjQ2NTBaMDMxMTAvBgNV
BAMTKDFEQTMzRDhERUE1NDlGMUNDN0ZERThGN0VGODAyNTBBNUM2OTYxRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZN4SBE8W/1imz4X/mnvrxfaYL
x8TWiDFMtA1SeL0eYtGsWFX4txFGJfkhMT/kdWNq9mRLOWStftPmTGsoWYPiVNaY
hO5pI22w9vn7IqJ03d20B9TAi5fbVqSUsYKqf9Kp74wSHJkMX5PVQuTz9xS+eTMp
3CaGSJs76FoHUYWv3AkxeRHVoDQVY83zeYoo2WhRgPd3tZVfkJYMHiyvv5X3s/YB
ewzVno0kSNXz+oA8ZvA8TBn5BMwanDMqB0GeM3A1FsgtuhK6r98ZJlImkXflrdDc
hm+PW0hN8jKZxhWLl+14sMtIKsKsOJV52lu+OCsCrJQcuzjNOFvjyyHtC+UVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHaM9jepUnxzH/ej374AlClxpYe0wHwYDVR0j
BBgwFoAUhVdZftF5dpGXSwHB19QQ3gRoy2QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODBjZTQ3OTYtNDlkZS00M2IxLWExNTItYjE4ZDExYWRhNTI5LzAvODU1NzU5N0VE
MTc5NzY5MTk3NEIwMUMxRDdENDEwREUwNDY4Q0I2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NTU3NTk3RUQxNzk3NjkxOTc0QjAxQzFEN0Q0MTBERTA0NjhD
QjY0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgwY2U0Nzk2LTQ5ZGUtNDNiMS1h
MTUyLWIxOGQxMWFkYTUyOS8wLzMxMzAzMzJlMzEzOTM1MmUzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfDQTANBgkqhkiG
9w0BAQsFAAOCAQEADnwkEUhHFbXGVUKw+PnsYbl6mj0ULsT62B5IM4RjZy2CjG7q
t067BFZGeo8Nzjq10W3zPEzsUKuWetlyG7U9Lf7nQG7RHmCXEK45X8EiLHKp7Qzg
Ul60IX+tGcXhX0D1dSntbZszu86oqEZMsiMiO+1WyGukctAj1zKVbjEeyVVSNtto
Dey6FA0Z4kDJj4n/OBaWCiqHrGrUJHjxg4bfX/5KvC3D0ESYsVh1HnbU1D9k/slB
Jw4AEOOKgYdSyI1XtoEUg8XdGiyuxkeflQ61NgWrm6R6tnSh1VA7ztg9h/vhEX5f
JKqg33YdFwXn6L4dyUr68qCULHsGlDreAPEFrg==
-----END CERTIFICATE-----
Generated at Thu May 7 04:13:53 2026 by rpki-client