Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa
File:                     3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (raw, json)
Hash identifier:          C/DT7XHL3SGEbqpViWF85bXoznD5c80gdYcaatqLy54=
Subject key identifier:   5C:A1:BC:BD:9D:E2:53:62:BF:BE:CC:5E:FA:CA:3E:F0:71:BA:06:0F
Certificate issuer:       /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB
Certificate serial:       7A2779885AE02F84273744803B24F0423D72A9D6
Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa
Signing time:             Sun 03 May 2026 03:05:37 +0000
ROA not before:           Sun 03 May 2026 03:00:37 +0000
ROA not after:            Sun 02 May 2027 03:05:37 +0000
asID:                     141665
IP address blocks:        103.162.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl
                          rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:27:79:88:5a:e0:2f:84:27:37:44:80:3b:24:f0:42:3d:72:a9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB
        Validity
            Not Before: May  3 03:00:37 2026 GMT
            Not After : May  2 03:05:37 2027 GMT
        Subject: CN=5CA1BCBD9DE25362BFBECC5EFACA3EF071BA060F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:e8:3e:40:7f:9a:68:94:8b:38:09:bd:35:
                    f0:ff:52:c6:f1:03:be:ed:ba:49:4d:bd:91:c1:35:
                    17:18:4c:50:8a:ed:1a:b1:7e:cc:4d:40:4b:3c:d2:
                    bf:b8:49:26:37:43:c5:51:0a:f6:99:97:a8:8f:f1:
                    97:15:dc:54:f6:bb:ff:a6:8a:99:42:37:a9:18:14:
                    05:8c:7e:df:de:8b:85:69:c0:81:19:91:6e:60:3c:
                    3f:fd:a9:cb:09:33:fd:2e:16:f2:63:20:6c:e2:e2:
                    a8:e1:c4:3b:fd:c8:11:41:1c:70:a2:ad:cf:32:79:
                    a4:98:97:e2:b6:a2:b3:58:2b:68:81:03:3f:76:11:
                    bb:6c:5f:72:c8:1d:82:f1:5b:92:2c:52:ad:e4:2f:
                    98:36:89:fa:78:36:4f:cb:62:21:fa:f3:67:ed:9b:
                    d0:9a:b9:57:80:1e:f5:5a:db:3c:ab:1c:88:46:ef:
                    13:1d:42:dd:fe:36:e8:a3:38:80:5f:86:7b:85:f7:
                    84:87:32:6c:af:57:70:16:fc:53:92:21:ce:80:64:
                    7d:d7:11:aa:77:3f:e2:ff:0b:8f:67:4f:4e:4d:2b:
                    5e:64:7e:8b:22:35:6f:49:7e:c8:af:57:de:54:0f:
                    4f:b8:9c:07:8b:5f:22:2c:67:80:ca:97:65:6e:8b:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A1:BC:BD:9D:E2:53:62:BF:BE:CC:5E:FA:CA:3E:F0:71:BA:06:0F
            X509v3 Authority Key Identifier:
                keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:5b:92:33:90:0b:d6:00:10:f6:d5:9d:4c:d5:07:6c:4f:56:
         4b:d2:4f:08:df:0d:59:70:64:75:b2:a6:ec:03:7e:60:1d:41:
         61:ad:12:4d:94:d0:98:9e:db:d3:3a:61:dd:fb:ea:01:a9:d0:
         61:d0:0d:c0:7d:f6:6f:92:97:b6:8f:dd:16:c3:98:53:3f:b6:
         7e:77:00:79:6c:c8:e6:48:8b:43:62:46:1f:fa:98:45:93:0b:
         36:50:01:e4:9c:76:d0:27:1a:b0:80:a1:2c:b2:d8:0b:ec:30:
         56:d3:d5:0e:f0:77:e7:a7:ec:27:4c:6c:91:d0:db:1e:6c:15:
         fa:0c:bb:08:1f:2c:aa:fd:c8:89:b0:16:93:fe:04:d6:8f:02:
         55:ab:34:43:1d:55:0a:6c:72:53:6a:5f:c5:47:85:72:5a:d2:
         ec:0e:07:21:99:69:6c:3b:7e:3e:64:db:89:02:e2:d2:a6:f0:
         ff:d4:d9:37:26:5d:1a:d5:26:58:af:84:b8:52:22:88:32:4a:
         6e:ad:6a:ca:20:29:d7:32:d0:dd:48:c5:01:ec:f8:75:76:fe:
         7a:e7:59:11:b7:23:e0:81:e4:3c:fc:1d:a2:db:f2:c4:90:7d:
         69:ed:28:2f:49:24:3b:b5:68:d3:da:af:fd:41:9e:4b:87:2a:
         e9:c3:04:44
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeid5iFrgL4QnN0SAOyTwQj1yqdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0Ex
QzYzMDJEQjAeFw0yNjA1MDMwMzAwMzdaFw0yNzA1MDIwMzA1MzdaMDMxMTAvBgNV
BAMTKDVDQTFCQ0JEOURFMjUzNjJCRkJFQ0M1RUZBQ0EzRUYwNzFCQTA2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8K+g+QH+aaJSLOAm9NfD/Usbx
A77tuklNvZHBNRcYTFCK7RqxfsxNQEs80r+4SSY3Q8VRCvaZl6iP8ZcV3FT2u/+m
iplCN6kYFAWMft/ei4VpwIEZkW5gPD/9qcsJM/0uFvJjIGzi4qjhxDv9yBFBHHCi
rc8yeaSYl+K2orNYK2iBAz92EbtsX3LIHYLxW5IsUq3kL5g2ifp4Nk/LYiH682ft
m9CauVeAHvVa2zyrHIhG7xMdQt3+NuijOIBfhnuF94SHMmyvV3AW/FOSIc6AZH3X
Eap3P+L/C49nT05NK15kfosiNW9JfsivV95UD0+4nAeLXyIsZ4DKl2Vui9nlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUXKG8vZ3iU2K/vsxe+so+8HG6Bg8wHwYDVR0j
BBgwFoAUpz1p7ewYAxv5F1p8p07WOhxjAtswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzY0ZjBmZmEtZTAzMS00ZWUxLWJmMGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURF
QzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0ExQzYzMDJEQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNzNENjlFREVDMTgwMzFCRjkxNzVBN0NBNzRFRDYzQTFDNjMw
MkRCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2NGYwZmZhLWUwMzEtNGVlMS1i
ZjBmLTY0YmFjZmNmMjk0Mi8wLzMxMzAzMzJlMzEzNjMyMmUzMjMyMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnot8wDQYJ
KoZIhvcNAQELBQADggEBAJ5bkjOQC9YAEPbVnUzVB2xPVkvSTwjfDVlwZHWypuwD
fmAdQWGtEk2U0Jie29M6Yd376gGp0GHQDcB99m+Sl7aP3RbDmFM/tn53AHlsyOZI
i0NiRh/6mEWTCzZQAeScdtAnGrCAoSyy2AvsMFbT1Q7wd+en7CdMbJHQ2x5sFfoM
uwgfLKr9yImwFpP+BNaPAlWrNEMdVQpsclNqX8VHhXJa0uwOByGZaWw7fj5k24kC
4tKm8P/U2TcmXRrVJlivhLhSIogySm6tasogKdcy0N1IxQHs+HV2/nrnWRG3I+CB
5Dz8HaLb8sSQfWntKC9JJDu1aNPar/1BnkuHKunDBEQ=
-----END CERTIFICATE-----
Generated at Tue May 5 18:55:44 2026 by rpki-client