Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Sxg6YyOUpBblg3g3D4oNcKxKaQWWwQAvP3gO95G7uko=
Subject key identifier:   A2:DF:84:EF:EE:9D:59:5B:54:48:53:F7:FC:25:EF:BE:EB:E6:D6:52
Certificate issuer:       /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
Certificate serial:       21EBA69CF96778A05B73E7F0E9A324EA57131A04
Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 03:06:30 +0000
ROA not before:           Sun 03 May 2026 03:01:30 +0000
ROA not after:            Sun 02 May 2027 03:06:30 +0000
asID:                     9341
IP address blocks:        103.117.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl
                          rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:eb:a6:9c:f9:67:78:a0:5b:73:e7:f0:e9:a3:24:ea:57:13:1a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
        Validity
            Not Before: May  3 03:01:30 2026 GMT
            Not After : May  2 03:06:30 2027 GMT
        Subject: CN=A2DF84EFEE9D595B544853F7FC25EFBEEBE6D652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:4a:bf:12:4a:c5:e4:5f:c3:87:61:1e:4d:
                    fb:f6:aa:b7:ed:3c:01:73:e2:71:91:25:a4:53:69:
                    5b:b0:71:b0:21:c5:0e:04:a1:d5:2e:23:ab:b2:df:
                    71:ea:40:c0:d4:ca:a0:16:5c:21:06:94:7f:b6:f1:
                    99:42:b7:3c:cd:04:46:e0:14:40:85:d1:ef:f9:56:
                    e9:31:d6:b3:55:a7:2d:ec:58:b8:17:53:0f:91:c8:
                    9d:c5:42:01:69:31:61:e7:87:93:d5:01:02:ba:3d:
                    41:66:4f:e0:41:05:83:13:65:59:a3:0c:1e:50:8d:
                    1d:ed:f8:5e:e0:01:0d:e5:91:bc:ca:be:33:47:0e:
                    b6:56:90:c0:36:36:43:ca:cc:98:1b:c6:4b:e5:2d:
                    4a:81:9b:4e:4e:d8:90:b8:53:96:47:45:9c:10:51:
                    b4:30:04:7b:7e:21:e4:3d:7c:97:04:32:35:26:1c:
                    91:f6:23:b3:25:e1:6a:d9:dd:1f:38:55:58:c1:47:
                    31:1e:aa:f9:5c:4e:9c:9c:ff:4e:0c:89:13:95:da:
                    ae:39:21:f5:0f:f9:56:3f:fa:ff:ff:fe:83:c1:40:
                    56:34:04:8d:0a:fc:0e:9d:99:bb:a2:81:3b:df:f9:
                    7d:a2:07:23:83:49:04:cf:81:86:8d:92:a1:a5:2b:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DF:84:EF:EE:9D:59:5B:54:48:53:F7:FC:25:EF:BE:EB:E6:D6:52
            X509v3 Authority Key Identifier:
                keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f9:fd:62:09:84:ff:08:01:dd:d3:a2:21:d3:09:11:da:59:
         5b:07:7a:04:03:f8:99:c1:96:b0:a5:ae:57:02:dd:a5:21:cd:
         fe:53:29:c0:80:a4:80:7a:06:e7:16:d2:12:ce:fb:17:5c:5b:
         f5:49:5e:4e:7c:0c:dd:67:8f:82:73:43:49:04:77:a3:05:65:
         fb:51:7f:5d:f8:e7:73:c0:76:4c:29:fd:bd:e0:b6:7b:7a:0f:
         13:cd:6e:64:6c:08:e5:a6:0e:de:0d:c1:27:d2:3c:41:a4:45:
         9a:cd:bd:5d:6b:79:37:4b:22:48:c8:1f:31:d2:ac:03:39:41:
         78:57:a5:7d:5b:68:86:09:9c:ac:20:f8:c1:82:e4:1c:dd:46:
         af:ef:7f:37:cb:57:a8:51:b9:8b:12:53:6d:5a:2a:eb:21:66:
         12:a0:94:0e:e3:3f:f2:8f:4d:c4:e6:c5:5e:bb:ad:6b:bd:8b:
         75:be:bd:f7:7f:cc:01:6f:b7:ca:61:d6:81:4d:a2:f9:33:37:
         6f:04:65:cb:89:1a:27:83:0f:c8:8a:a2:3f:1e:af:bc:b1:ec:
         eb:00:8c:da:40:d8:f8:6b:30:d5:f8:fe:37:74:b1:a7:83:5f:
         6a:ff:7f:7f:8e:a8:b7:24:9c:fd:cd:bb:90:fb:5e:3c:44:bd:
         8b:f1:3c:9d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUIeumnPlneKBbc+fw6aMk6lcTGgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2MDBC
NTYzRTY0NDAeFw0yNjA1MDMwMzAxMzBaFw0yNzA1MDIwMzA2MzBaMDMxMTAvBgNV
BAMTKEEyREY4NEVGRUU5RDU5NUI1NDQ4NTNGN0ZDMjVFRkJFRUJFNkQ2NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxkq/EkrF5F/Dh2EeTfv2qrft
PAFz4nGRJaRTaVuwcbAhxQ4EodUuI6uy33HqQMDUyqAWXCEGlH+28ZlCtzzNBEbg
FECF0e/5Vukx1rNVpy3sWLgXUw+RyJ3FQgFpMWHnh5PVAQK6PUFmT+BBBYMTZVmj
DB5QjR3t+F7gAQ3lkbzKvjNHDrZWkMA2NkPKzJgbxkvlLUqBm05O2JC4U5ZHRZwQ
UbQwBHt+IeQ9fJcEMjUmHJH2I7Ml4WrZ3R84VVjBRzEeqvlcTpyc/04MiROV2q45
IfUP+VY/+v///oPBQFY0BI0K/A6dmbuigTvf+X2iByODSQTPgYaNkqGlK6LBAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUot+E7+6dWVtUSFP3/CXvvuvm1lIwHwYDVR0j
BBgwFoAUUQnsCzuihzHp4mHztZ82ALVj5kQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzliM2JiMzQtMTVlMi00NDg3LWI1MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIz
QkEyODczMUU5RTI2MUYzQjU5RjM2MDBCNTYzRTY0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MTA5RUMwQjNCQTI4NzMxRTlFMjYxRjNCNTlGMzYwMEI1NjNF
NjQ0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M5YjNiYjM0LTE1ZTItNDQ4Ny1i
NTI3LTZlNzUxMjg2Y2U3ZC8wLzMxMzAzMzJlMzEzMTM3MmUzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABndR4wDQYJKoZIhvcN
AQELBQADggEBAB35/WIJhP8IAd3ToiHTCRHaWVsHegQD+JnBlrClrlcC3aUhzf5T
KcCApIB6BucW0hLO+xdcW/VJXk58DN1nj4JzQ0kEd6MFZftRf13453PAdkwp/b3g
tnt6DxPNbmRsCOWmDt4NwSfSPEGkRZrNvV1reTdLIkjIHzHSrAM5QXhXpX1baIYJ
nKwg+MGC5BzdRq/vfzfLV6hRuYsSU21aKushZhKglA7jP/KPTcTmxV67rWu9i3W+
vfd/zAFvt8ph1oFNovkzN28EZcuJGieDD8iKoj8er7yx7OsAjNpA2PhrMNX4/jd0
saeDX2r/f3+OqLcknP3Nu5D7XjxEvYvxPJ0=
-----END CERTIFICATE-----
Generated at Tue May 5 13:29:31 2026 by rpki-client