Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa
File:                     3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (raw, json)
Hash identifier:          v3ZYWa8XXb+DFvl8j2lAq20FkxITb0PL+31yaFuYI5A=
Subject key identifier:   06:A1:4D:B7:C1:EB:09:38:EC:FE:45:95:07:73:73:BF:37:47:6F:6F
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       1595F0AE5CD53B37A729E386FBD770F31F6EDD9A
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa
Signing time:             Sun 03 May 2026 02:57:49 +0000
ROA not before:           Sun 03 May 2026 02:52:49 +0000
ROA not after:            Sun 02 May 2027 02:57:49 +0000
asID:                     59282
IP address blocks:        103.228.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:95:f0:ae:5c:d5:3b:37:a7:29:e3:86:fb:d7:70:f3:1f:6e:dd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: May  3 02:52:49 2026 GMT
            Not After : May  2 02:57:49 2027 GMT
        Subject: CN=06A14DB7C1EB0938ECFE4595077373BF37476F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:5a:d4:e3:cf:0a:84:e7:e4:88:68:dd:b9:
                    6e:d9:a3:08:fb:61:e0:41:c4:e5:d7:c0:0d:18:1c:
                    cb:29:58:b3:19:ca:7d:de:82:8b:fc:23:90:bb:87:
                    aa:21:c0:a5:fd:9e:07:8b:2c:d2:4c:61:06:b1:21:
                    bd:78:4d:cf:5a:25:c0:35:d1:67:5a:4e:39:59:8f:
                    33:70:d4:9a:41:e4:55:02:64:9c:b5:e1:53:b5:e2:
                    63:df:68:6d:65:8e:69:76:33:54:d8:2a:77:f4:fe:
                    44:27:1d:f7:a1:bb:8e:2e:06:11:0e:d5:03:bc:7d:
                    98:0d:0d:41:e0:cb:7b:7a:37:cc:fd:7f:0f:84:ce:
                    0c:6e:c8:a2:ed:a4:fe:e7:70:43:ef:96:1c:82:64:
                    0a:96:a2:e8:c6:8f:d2:99:6c:8c:1e:90:ad:a2:39:
                    7b:b8:2f:1b:ee:2a:b2:fe:5e:43:45:7c:ba:2e:8c:
                    58:fb:82:d6:16:ea:ec:93:f3:c6:e9:e2:60:78:f6:
                    a7:88:03:6d:6d:02:1d:d8:5f:4c:d7:70:5a:e4:61:
                    65:b0:8a:f6:a2:56:6a:90:ba:b9:31:ba:9a:1c:24:
                    4b:5b:22:69:d0:33:4d:84:24:9d:41:64:45:d4:96:
                    44:de:57:69:b3:73:5b:14:a8:4f:18:a2:59:82:0c:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:4D:B7:C1:EB:09:38:EC:FE:45:95:07:73:73:BF:37:47:6F:6F
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:c1:5f:f9:6b:9b:6b:16:4f:e2:dd:46:f9:0c:e0:8c:ba:
         b4:b4:92:55:18:47:48:c7:bf:a3:56:0b:b6:80:2d:c9:a2:09:
         4a:48:e1:44:d2:98:9d:ef:e5:90:e9:6e:af:64:96:5a:c3:b9:
         01:6d:ed:eb:ea:0a:81:af:ab:be:c3:24:06:bd:18:d2:91:14:
         41:bd:b0:13:38:76:82:03:c4:c4:e8:38:5e:1a:48:d0:69:e1:
         ae:d9:2e:53:74:e4:c7:be:84:6e:18:4f:96:eb:19:10:4d:db:
         86:59:3f:17:0d:44:3e:6f:da:c4:95:cb:4d:a8:44:fa:03:2a:
         b1:f2:15:08:c5:cc:eb:b3:80:f7:9a:25:c7:09:fe:d6:a0:ec:
         3e:4f:95:e9:a4:21:bc:7c:2e:a1:e1:1a:62:78:d8:0c:32:33:
         43:9a:f0:96:b1:83:bb:8a:eb:1f:6e:f3:4a:15:e4:2e:84:a6:
         3c:31:b5:11:66:21:57:62:02:25:32:ad:77:17:31:0d:1a:6b:
         62:04:70:28:1e:c2:b5:2a:1d:cb:f2:f0:14:80:00:26:85:a4:
         eb:f2:3e:73:83:3b:26:09:8f:8f:99:73:c5:7e:48:8c:13:3e:
         87:fd:7d:86:72:ca:38:a7:53:e3:b5:ae:72:26:1a:67:0f:52:
         51:ed:fe:90
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFZXwrlzVOzenKeOG+9dw8x9u3ZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk5NTVGQzczRjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4
OUI2QjI1RDAeFw0yNjA1MDMwMjUyNDlaFw0yNzA1MDIwMjU3NDlaMDMxMTAvBgNV
BAMTKDA2QTE0REI3QzFFQjA5MzhFQ0ZFNDU5NTA3NzM3M0JGMzc0NzZGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKFrU488KhOfkiGjduW7Zowj7
YeBBxOXXwA0YHMspWLMZyn3egov8I5C7h6ohwKX9ngeLLNJMYQaxIb14Tc9aJcA1
0WdaTjlZjzNw1JpB5FUCZJy14VO14mPfaG1ljml2M1TYKnf0/kQnHfehu44uBhEO
1QO8fZgNDUHgy3t6N8z9fw+EzgxuyKLtpP7ncEPvlhyCZAqWoujGj9KZbIwekK2i
OXu4LxvuKrL+XkNFfLoujFj7gtYW6uyT88bp4mB49qeIA21tAh3YX0zXcFrkYWWw
ivaiVmqQurkxupocJEtbImnQM02EJJ1BZEXUlkTeV2mzc1sUqE8YolmCDLbDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUBqFNt8HrCTjs/kWVB3NzvzdHb28wHwYDVR0j
BBgwFoAUaZVfxz8SiAJOfK8MHYJeg4m2sl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTg0NjRhNWItMmZjZS00N2RhLTgwNDctNjhkMmJkNjNjOWMzLzAvNjk5NTVGQzcz
RjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4OUI2QjI1RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OTk1NUZDNzNGMTI4ODAyNEU3Q0FGMEMxRDgyNUU4Mzg5QjZC
MjVELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMxMzAzMzJlMzIzMjM4MmUzMjM0MzQyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+T0MA0GCSqG
SIb3DQEBCwUAA4IBAQAKdMFf+WubaxZP4t1G+QzgjLq0tJJVGEdIx7+jVgu2gC3J
oglKSOFE0pid7+WQ6W6vZJZaw7kBbe3r6gqBr6u+wyQGvRjSkRRBvbATOHaCA8TE
6DheGkjQaeGu2S5TdOTHvoRuGE+W6xkQTduGWT8XDUQ+b9rElctNqET6Ayqx8hUI
xczrs4D3miXHCf7WoOw+T5XppCG8fC6h4RpieNgMMjNDmvCWsYO7iusfbvNKFeQu
hKY8MbURZiFXYgIlMq13FzENGmtiBHAoHsK1Kh3L8vAUgAAmhaTr8j5zgzsmCY+P
mXPFfkiMEz6H/X2Gcso4p1Pjta5yJhpnD1JR7f6Q
-----END CERTIFICATE-----
Generated at Tue May 5 21:07:22 2026 by rpki-client