Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203530313034.roa
File:                     3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          TL3itnqoh4qV4HBGxDux8BTRX5lkC3J82Sib/ZT6wuU=
Subject key identifier:   21:AD:B9:4A:18:D6:6A:4D:1E:92:D4:6C:4B:CA:55:48:71:64:C7:26
Certificate issuer:       /CN=8557597ED1797691974B01C1D7D410DE0468CB64
Certificate serial:       0434655753EAA043B5DB248984F5EF9ECF6BC39D
Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203530313034.roa
Signing time:             Sun 03 May 2026 02:46:48 +0000
ROA not before:           Sun 03 May 2026 02:41:48 +0000
ROA not after:            Sun 02 May 2027 02:46:48 +0000
asID:                     50104
IP address blocks:        103.195.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
                          rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 22:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:34:65:57:53:ea:a0:43:b5:db:24:89:84:f5:ef:9e:cf:6b:c3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64
        Validity
            Not Before: May  3 02:41:48 2026 GMT
            Not After : May  2 02:46:48 2027 GMT
        Subject: CN=21ADB94A18D66A4D1E92D46C4BCA55487164C726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:12:8a:86:cf:62:7d:db:27:07:a8:37:7b:
                    4f:69:4b:61:35:1a:f4:3f:2a:f9:f9:6d:1b:79:96:
                    e2:6c:e0:2f:7d:f3:5d:70:3d:d2:fb:62:f3:97:5e:
                    ad:2e:ac:c6:3e:ed:12:06:02:41:2d:ba:d1:84:65:
                    5e:a1:aa:d8:01:08:ab:ff:21:7d:9e:be:00:ff:35:
                    b7:eb:1e:ec:de:26:56:5f:1f:82:36:cb:28:b5:7b:
                    0b:aa:d8:e9:49:94:89:79:b6:1b:c3:b1:35:a1:ac:
                    c1:f0:08:4e:d1:4a:b4:56:7a:b8:55:c1:cf:6e:82:
                    81:a8:88:b3:95:90:39:f9:50:9b:ca:7f:67:5d:34:
                    af:e4:00:95:c5:0f:91:0c:b6:40:46:82:1c:88:8f:
                    9a:c7:96:6c:c1:fd:05:2d:69:3c:2b:5f:a7:17:08:
                    1e:c9:d1:60:c7:05:9e:33:a6:98:4b:bf:84:7d:99:
                    39:e4:9c:65:74:0c:8a:7f:31:83:4a:6f:a4:70:bc:
                    0c:21:fb:cd:e6:49:5a:2e:5a:29:ad:d4:7d:71:da:
                    b7:cb:23:bb:e9:12:bb:ae:56:cb:eb:5c:ff:80:e3:
                    de:94:04:be:77:79:49:d9:85:33:66:f5:7a:ef:69:
                    43:2b:e8:88:02:8d:cc:48:8a:98:63:6e:bf:a0:cf:
                    9f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AD:B9:4A:18:D6:6A:4D:1E:92:D4:6C:4B:CA:55:48:71:64:C7:26
            X509v3 Authority Key Identifier:
                keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:8a:83:b9:f5:9f:35:0a:19:0b:76:df:cc:a0:e2:77:45:ed:
         4a:0d:41:19:69:19:b6:5c:2f:c3:7f:e1:56:72:b6:0e:81:1a:
         9e:3b:8b:ca:83:37:be:d9:82:42:fb:e1:21:2b:ef:d1:cf:db:
         59:aa:fa:e2:c9:23:01:cc:85:85:a2:42:3f:49:e3:02:3b:30:
         37:6a:3c:86:43:51:f7:d8:ed:31:82:34:2c:08:b1:61:31:21:
         0a:bb:94:49:5f:5a:7b:28:18:46:cf:c5:99:37:27:04:bc:9e:
         63:48:a5:13:00:29:00:06:df:75:2e:10:82:b0:7b:f8:48:e7:
         60:01:5b:13:f5:0d:9f:25:32:33:bc:49:a6:fe:7b:b2:eb:fa:
         d0:53:db:60:82:37:35:4c:7e:35:c0:b2:3b:28:92:34:44:04:
         2b:a9:50:f8:99:ff:5c:6c:40:d0:a8:e9:92:23:c6:f6:1d:41:
         c9:5a:9c:e0:30:af:3b:b1:09:75:01:a7:05:58:26:20:dd:94:
         58:a4:4a:de:99:69:c3:b2:b3:ee:8b:d0:03:16:34:45:3b:22:
         38:a9:98:e0:7d:87:cf:92:3b:22:fd:c3:ec:22:99:51:19:a7:
         e8:ba:de:5d:3e:0b:c2:d3:9c:4f:c6:08:bb:d1:55:fa:a2:84:
         4f:c7:3a:70
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBDRlV1PqoEO12ySJhPXvns9rw50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NzU5N0VEMTc5NzY5MTk3NEIwMUMxRDdENDEwREUw
NDY4Q0I2NDAeFw0yNjA1MDMwMjQxNDhaFw0yNzA1MDIwMjQ2NDhaMDMxMTAvBgNV
BAMTKDIxQURCOTRBMThENjZBNEQxRTkyRDQ2QzRCQ0E1NTQ4NzE2NEM3MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrhKKhs9ifdsnB6g3e09pS2E1
GvQ/Kvn5bRt5luJs4C99811wPdL7YvOXXq0urMY+7RIGAkEtutGEZV6hqtgBCKv/
IX2evgD/NbfrHuzeJlZfH4I2yyi1ewuq2OlJlIl5thvDsTWhrMHwCE7RSrRWerhV
wc9ugoGoiLOVkDn5UJvKf2ddNK/kAJXFD5EMtkBGghyIj5rHlmzB/QUtaTwrX6cX
CB7J0WDHBZ4zpphLv4R9mTnknGV0DIp/MYNKb6RwvAwh+83mSVouWimt1H1x2rfL
I7vpEruuVsvrXP+A496UBL53eUnZhTNm9XrvaUMr6IgCjcxIiphjbr+gz59zAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUIa25ShjWak0ektRsS8pVSHFkxyYwHwYDVR0j
BBgwFoAUhVdZftF5dpGXSwHB19QQ3gRoy2QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODBjZTQ3OTYtNDlkZS00M2IxLWExNTItYjE4ZDExYWRhNTI5LzAvODU1NzU5N0VE
MTc5NzY5MTk3NEIwMUMxRDdENDEwREUwNDY4Q0I2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NTU3NTk3RUQxNzk3NjkxOTc0QjAxQzFEN0Q0MTBERTA0NjhD
QjY0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgwY2U0Nzk2LTQ5ZGUtNDNiMS1h
MTUyLWIxOGQxMWFkYTUyOS8wLzMxMzAzMzJlMzEzOTM1MmUzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzMDMxMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfDQTANBgkqhkiG
9w0BAQsFAAOCAQEATIqDufWfNQoZC3bfzKDid0XtSg1BGWkZtlwvw3/hVnK2DoEa
njuLyoM3vtmCQvvhISvv0c/bWar64skjAcyFhaJCP0njAjswN2o8hkNR99jtMYI0
LAixYTEhCruUSV9aeygYRs/FmTcnBLyeY0ilEwApAAbfdS4QgrB7+EjnYAFbE/UN
nyUyM7xJpv57suv60FPbYII3NUx+NcCyOyiSNEQEK6lQ+Jn/XGxA0KjpkiPG9h1B
yVqc4DCvO7EJdQGnBVgmIN2UWKRK3plpw7Kz7ovQAxY0RTsiOKmY4H2Hz5I7Iv3D
7CKZURmn6LreXT4LwtOcT8YIu9FV+qKET8c6cA==
-----END CERTIFICATE-----
Generated at Thu May 7 05:38:06 2026 by rpki-client