Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          DwAPimZJbs1WQtoDvmv2aTJgkFvbbEdXOIPeLqLhsYM=
Subject key identifier:   84:F3:88:F0:95:FE:6D:6A:10:B1:45:2C:F5:64:62:0C:1D:14:1E:6C
Certificate issuer:       /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB
Certificate serial:       1C95593EB477C233FD43613BAE376E1B8135B08B
Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 03 May 2026 03:05:37 +0000
ROA not before:           Sun 03 May 2026 03:00:37 +0000
ROA not after:            Sun 02 May 2027 03:05:37 +0000
asID:                     48465
IP address blocks:        103.162.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl
                          rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:95:59:3e:b4:77:c2:33:fd:43:61:3b:ae:37:6e:1b:81:35:b0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB
        Validity
            Not Before: May  3 03:00:37 2026 GMT
            Not After : May  2 03:05:37 2027 GMT
        Subject: CN=84F388F095FE6D6A10B1452CF564620C1D141E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:46:18:4c:10:41:42:8a:c7:62:e3:1c:d1:
                    3e:72:a2:43:e9:62:5c:53:0a:53:88:e3:f5:ea:74:
                    54:61:14:d7:01:01:c2:b6:2b:08:03:7e:77:4f:17:
                    68:81:d8:cd:ae:db:3b:14:2e:ef:bd:43:b8:a6:cc:
                    8b:55:20:16:e2:8a:71:e6:92:0e:e3:7a:6e:17:6e:
                    6a:40:12:bc:07:99:8f:66:e2:a9:6b:65:f7:61:97:
                    7f:88:7e:4d:8f:0a:9f:61:7d:c4:81:2f:b1:1c:2e:
                    dc:cc:2d:82:25:7d:98:9d:2b:30:e3:bc:7a:7d:5e:
                    c1:38:c1:52:44:6a:e4:73:94:93:b5:fb:a2:1c:52:
                    7f:25:70:aa:0b:e9:ce:7d:2f:e8:27:ad:2c:08:d7:
                    05:a3:97:4d:24:72:e0:7e:f8:62:15:fb:3a:94:80:
                    9a:30:b5:db:dc:cf:20:19:f7:5b:2e:a6:ce:c6:a6:
                    b7:d9:35:9a:07:86:c9:55:7d:b6:47:f4:06:ae:a4:
                    de:69:a1:f5:9c:e6:ad:70:af:3e:78:66:e3:d9:1a:
                    b6:ce:ce:ad:ce:06:c8:87:67:5c:4d:4d:0d:a0:80:
                    ab:0c:e8:02:22:87:57:a8:15:6e:4d:9d:a8:7c:60:
                    be:66:a0:7b:30:36:55:71:a0:d3:f4:7c:12:3d:20:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F3:88:F0:95:FE:6D:6A:10:B1:45:2C:F5:64:62:0C:1D:14:1E:6C
            X509v3 Authority Key Identifier:
                keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:3c:a9:9a:52:28:1c:ce:fe:55:3a:93:03:61:86:3a:d9:
         3e:f8:82:f9:30:a7:a4:c6:24:e2:bb:f6:10:7d:30:c9:b6:8c:
         35:f1:ff:21:b2:3e:33:6c:cb:ba:ff:cb:ba:18:c1:bc:97:34:
         43:78:fd:49:5e:b3:b4:2c:cb:f9:f4:e8:c6:c9:5b:62:de:77:
         2c:d8:29:05:75:9a:ca:f7:c6:fe:99:44:f5:b6:58:e8:38:3b:
         ff:38:ad:04:d6:71:c3:89:57:e2:dd:68:59:af:29:28:92:18:
         c6:7d:b0:2d:4c:ad:6c:5e:73:3b:5d:09:59:58:5c:7a:62:3f:
         76:cc:97:92:21:12:5a:a8:a9:04:16:f3:1c:8d:a5:87:33:d1:
         c0:33:96:92:48:98:16:d5:c9:6e:c7:fc:56:c7:7f:5d:2a:cf:
         e5:fd:23:03:af:18:1f:b6:5c:f3:88:26:c2:fa:8e:c1:77:75:
         8a:2b:ae:0b:07:88:fe:cc:fe:a7:31:36:40:17:d2:95:c1:ba:
         58:cf:1b:11:61:19:61:8d:90:37:c9:06:81:ea:1e:a1:6b:dc:
         0f:6d:de:22:b0:e3:8f:9b:4c:c3:ca:fe:f7:12:56:d8:c2:c2:
         68:6e:2d:61:5d:c6:9b:9c:a0:a0:7f:5b:3c:3b:d1:15:49:b3:
         11:20:66:2e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHJVZPrR3wjP9Q2E7rjduG4E1sIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0Ex
QzYzMDJEQjAeFw0yNjA1MDMwMzAwMzdaFw0yNzA1MDIwMzA1MzdaMDMxMTAvBgNV
BAMTKDg0RjM4OEYwOTVGRTZENkExMEIxNDUyQ0Y1NjQ2MjBDMUQxNDFFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBUYYTBBBQorHYuMc0T5yokPp
YlxTClOI4/XqdFRhFNcBAcK2KwgDfndPF2iB2M2u2zsULu+9Q7imzItVIBbiinHm
kg7jem4XbmpAErwHmY9m4qlrZfdhl3+Ifk2PCp9hfcSBL7EcLtzMLYIlfZidKzDj
vHp9XsE4wVJEauRzlJO1+6IcUn8lcKoL6c59L+gnrSwI1wWjl00kcuB++GIV+zqU
gJowtdvczyAZ91sups7GprfZNZoHhslVfbZH9AaupN5pofWc5q1wrz54ZuPZGrbO
zq3OBsiHZ1xNTQ2ggKsM6AIih1eoFW5Nnah8YL5moHswNlVxoNP0fBI9IFnjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUhPOI8JX+bWoQsUUs9WRiDB0UHmwwHwYDVR0j
BBgwFoAUpz1p7ewYAxv5F1p8p07WOhxjAtswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzY0ZjBmZmEtZTAzMS00ZWUxLWJmMGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURF
QzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0ExQzYzMDJEQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNzNENjlFREVDMTgwMzFCRjkxNzVBN0NBNzRFRDYzQTFDNjMw
MkRCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2NGYwZmZhLWUwMzEtNGVlMS1i
ZjBmLTY0YmFjZmNmMjk0Mi8wLzMxMzAzMzJlMzEzNjMyMmUzMjMyMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6LfMA0GCSqG
SIb3DQEBCwUAA4IBAQAaZDypmlIoHM7+VTqTA2GGOtk++IL5MKekxiTiu/YQfTDJ
tow18f8hsj4zbMu6/8u6GMG8lzRDeP1JXrO0LMv59OjGyVti3ncs2CkFdZrK98b+
mUT1tljoODv/OK0E1nHDiVfi3WhZrykokhjGfbAtTK1sXnM7XQlZWFx6Yj92zJeS
IRJaqKkEFvMcjaWHM9HAM5aSSJgW1clux/xWx39dKs/l/SMDrxgftlzziCbC+o7B
d3WKK64LB4j+zP6nMTZAF9KVwbpYzxsRYRlhjZA3yQaB6h6ha9wPbd4isOOPm0zD
yv73ElbYwsJobi1hXcabnKCgf1s8O9EVSbMRIGYu
-----END CERTIFICATE-----
Generated at Tue May 5 16:54:29 2026 by rpki-client