Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa
File:                     3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=
Subject key identifier:   5E:19:C0:86:CA:DE:FD:F9:98:12:53:F9:3E:FA:69:25:8A:69:86:0C
Certificate issuer:       /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
Certificate serial:       14E7BA3B35FEB12A36CAC442944BBB2EA3535FF4
Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa
Signing time:             Sun 03 May 2026 02:47:01 +0000
ROA not before:           Sun 03 May 2026 02:42:01 +0000
ROA not after:            Sun 02 May 2027 02:47:01 +0000
asID:                     59282
IP address blocks:        103.161.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl
                          rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 08:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e7:ba:3b:35:fe:b1:2a:36:ca:c4:42:94:4b:bb:2e:a3:53:5f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
        Validity
            Not Before: May  3 02:42:01 2026 GMT
            Not After : May  2 02:47:01 2027 GMT
        Subject: CN=5E19C086CADEFDF9981253F93EFA69258A69860C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:bf:bf:0e:89:4b:1a:69:e4:40:58:fc:08:
                    76:85:3c:4a:45:d6:bd:7a:fd:85:42:90:a1:d7:55:
                    86:ea:eb:ae:0d:08:64:c4:be:87:ea:46:5e:eb:da:
                    83:5d:38:79:d5:31:4b:3a:f6:21:50:03:6d:78:80:
                    83:38:6c:e4:96:f1:65:25:f6:90:a0:86:16:f0:5d:
                    3b:c8:01:ea:ff:4c:c1:d6:02:69:36:6f:43:09:d5:
                    43:4d:de:4a:3c:8c:5f:8a:86:f2:60:5a:0a:98:22:
                    7a:6b:49:f7:b7:e1:af:90:4f:3c:32:c2:a3:1d:1a:
                    da:bf:4a:14:ab:36:e7:00:4e:76:a1:c4:54:c9:34:
                    da:b2:5f:47:bc:f3:6b:a8:c8:c9:48:0f:ce:78:ea:
                    00:70:72:52:1d:10:cd:db:b8:cb:4a:64:ec:fb:5e:
                    8d:7f:58:d5:11:e6:69:58:67:a0:59:ff:b1:ae:a7:
                    96:c9:64:43:27:a5:de:c9:89:36:fb:e1:ed:c6:47:
                    fa:a5:9f:e1:23:7e:66:70:e6:f8:8b:26:21:f6:5b:
                    9f:96:7a:c3:40:8f:d1:e5:0b:0c:6c:d1:68:7c:33:
                    00:1b:ea:73:32:49:20:64:bc:93:25:78:02:8d:27:
                    a0:93:ac:ac:6d:a2:8c:4d:19:41:89:5e:b1:fd:36:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:19:C0:86:CA:DE:FD:F9:98:12:53:F9:3E:FA:69:25:8A:69:86:0C
            X509v3 Authority Key Identifier:
                keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:d1:d7:a0:1f:7a:79:31:df:b4:1c:37:52:df:75:e5:15:
         4e:84:c5:23:0c:34:8e:ac:83:97:28:c6:70:08:5a:3f:e2:5d:
         f6:2e:6d:20:c1:f8:ef:58:b9:5a:ae:35:ac:28:58:be:c8:f2:
         35:11:ef:96:81:d9:58:23:a6:22:0b:ff:81:21:d9:01:ad:48:
         a2:d9:80:a1:cf:24:28:da:d2:16:29:25:bb:eb:97:10:21:21:
         b2:15:94:98:0b:4d:f5:24:3c:c6:5f:02:00:1c:6c:4a:3c:81:
         c2:9c:94:75:0b:c1:4d:c0:3f:bb:7e:11:20:27:6d:49:35:3b:
         cf:37:4c:31:c7:b9:4b:ab:70:c2:b7:6f:f0:54:01:a6:1f:d4:
         b8:3d:8d:90:85:4b:a0:97:cc:95:42:bb:23:3a:af:31:b9:e6:
         10:ae:98:62:fb:8b:90:18:d9:17:dc:1c:98:a9:cb:df:ca:9f:
         34:03:16:41:b8:a4:8e:a6:58:24:44:1e:3b:af:96:5b:9c:86:
         49:a1:37:c2:19:02:9a:79:b4:0f:5d:b2:c8:fe:fa:f0:11:b6:
         79:39:44:c8:4b:60:6e:48:91:4a:1a:34:7a:61:51:c7:df:57:
         c9:d7:c8:51:81:20:9e:63:47:71:f8:f7:62:5d:f1:16:37:7b:
         9b:6d:37:c2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFOe6OzX+sSo2ysRClEu7LqNTX/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5
NzlFRTdDRjAeFw0yNjA1MDMwMjQyMDFaFw0yNzA1MDIwMjQ3MDFaMDMxMTAvBgNV
BAMTKDVFMTlDMDg2Q0FERUZERjk5ODEyNTNGOTNFRkE2OTI1OEE2OTg2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5b+/DolLGmnkQFj8CHaFPEpF
1r16/YVCkKHXVYbq664NCGTEvofqRl7r2oNdOHnVMUs69iFQA214gIM4bOSW8WUl
9pCghhbwXTvIAer/TMHWAmk2b0MJ1UNN3ko8jF+KhvJgWgqYInprSfe34a+QTzwy
wqMdGtq/ShSrNucATnahxFTJNNqyX0e882uoyMlID8546gBwclIdEM3buMtKZOz7
Xo1/WNUR5mlYZ6BZ/7Gup5bJZEMnpd7JiTb74e3GR/qln+EjfmZw5viLJiH2W5+W
esNAj9HlCwxs0Wh8MwAb6nMySSBkvJMleAKNJ6CTrKxtooxNGUGJXrH9NpXrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUXhnAhsre/fmYElP5PvppJYpphgwwHwYDVR0j
BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx
MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF
N0NGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgxNTY4MDFmLWE2N2ItNDNkZC04
ZjYyLWI3YjBkNjAzMTdhZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6GHMA0GCSqG
SIb3DQEBCwUAA4IBAQAUL9HXoB96eTHftBw3Ut915RVOhMUjDDSOrIOXKMZwCFo/
4l32Lm0gwfjvWLlarjWsKFi+yPI1Ee+WgdlYI6YiC/+BIdkBrUii2YChzyQo2tIW
KSW765cQISGyFZSYC031JDzGXwIAHGxKPIHCnJR1C8FNwD+7fhEgJ21JNTvPN0wx
x7lLq3DCt2/wVAGmH9S4PY2QhUugl8yVQrsjOq8xueYQrphi+4uQGNkX3ByYqcvf
yp80AxZBuKSOplgkRB47r5ZbnIZJoTfCGQKaebQPXbLI/vrwEbZ5OUTIS2BuSJFK
GjR6YVHH31fJ18hRgSCeY0dx+PdiXfEWN3ubbTfC
-----END CERTIFICATE-----
Generated at Tue May 5 18:56:32 2026 by rpki-client