Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa
File:                     3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa (raw, json)
Hash identifier:          2VbPo4vEhssPad/XyaXCmEzNRw6Ur5x+oPKa9w/NCXY=
Subject key identifier:   12:59:27:30:97:74:6D:65:EE:46:5A:0E:EA:4F:83:75:6B:27:35:36
Certificate issuer:       /CN=62DE2AF277EBF89C97513655B43DEF762311A799
Certificate serial:       604A057BE4ECB0650015F0E98F929D63231D047A
Authority key identifier: 62:DE:2A:F2:77:EB:F8:9C:97:51:36:55:B4:3D:EF:76:23:11:A7:99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa
Signing time:             Sun 03 May 2026 03:09:55 +0000
ROA not before:           Sun 03 May 2026 03:04:55 +0000
ROA not after:            Sun 02 May 2027 03:09:55 +0000
asID:                     58495
IP address blocks:        103.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.crl
                          rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 10:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4a:05:7b:e4:ec:b0:65:00:15:f0:e9:8f:92:9d:63:23:1d:04:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DE2AF277EBF89C97513655B43DEF762311A799
        Validity
            Not Before: May  3 03:04:55 2026 GMT
            Not After : May  2 03:09:55 2027 GMT
        Subject: CN=1259273097746D65EE465A0EEA4F83756B273536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:6d:00:0b:58:9d:d8:aa:b0:18:02:5b:30:
                    21:2d:dd:d1:9c:77:5a:92:e5:f2:cd:3f:44:ff:91:
                    00:c2:f6:c0:72:3c:99:8a:4e:9f:ea:14:7e:49:72:
                    32:a7:c8:4c:a5:35:be:84:9b:25:81:1e:0f:06:52:
                    ca:eb:b8:09:5b:b0:9a:42:f2:df:23:36:62:b6:82:
                    d2:4b:21:a6:61:e1:19:3a:c7:81:2c:26:df:49:e8:
                    c6:39:76:6d:05:c7:36:78:10:e4:f1:c2:97:7b:8b:
                    b0:55:85:64:85:b1:d5:8c:8e:9d:4d:3f:58:e6:f4:
                    93:d3:33:1f:5f:0b:d0:8b:cb:49:ab:c0:87:d2:ec:
                    c2:b2:8e:d9:f1:62:f5:5d:d8:ad:c4:92:ec:7c:84:
                    e1:ea:ce:19:b6:75:7a:fc:20:aa:e0:02:77:82:d4:
                    ca:ac:cd:e5:c7:9a:1d:17:56:f9:52:5d:8c:e8:d4:
                    f0:e4:61:0e:75:af:48:08:74:00:ad:f9:1c:6b:4a:
                    55:7d:94:ed:e3:18:41:26:74:bc:07:90:50:0b:34:
                    e2:53:fd:f8:ea:bf:08:af:52:26:1c:43:ae:20:0c:
                    3b:e0:e2:f3:4c:ec:fb:25:b4:47:80:b7:70:3a:62:
                    80:18:09:4b:64:11:ed:b8:ba:eb:aa:19:d9:35:1c:
                    f1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:59:27:30:97:74:6D:65:EE:46:5A:0E:EA:4F:83:75:6B:27:35:36
            X509v3 Authority Key Identifier:
                keyid:62:DE:2A:F2:77:EB:F8:9C:97:51:36:55:B4:3D:EF:76:23:11:A7:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:6c:1b:80:fd:07:01:95:b8:7a:81:d4:95:7d:01:13:4d:a1:
         21:6f:61:2c:b9:ca:3e:d9:04:bd:64:80:0e:32:b6:6d:98:1e:
         b5:e4:d9:c5:8b:5c:23:35:2b:ea:d0:64:66:fd:43:c1:c5:a9:
         5d:ab:35:d3:f0:f9:46:55:29:27:fd:b9:c7:7f:a5:74:e4:b0:
         e7:12:8c:51:0f:9a:f6:58:60:e3:80:f4:4f:d9:68:ff:b2:4a:
         99:a1:e9:3d:dd:87:f3:30:87:e4:bc:05:4f:73:be:5a:8d:d7:
         e8:cb:3b:be:44:28:8f:61:26:21:62:0d:d9:f7:20:cc:4c:b6:
         1b:44:70:cf:53:58:f8:e3:54:12:96:b9:c7:50:83:6e:97:d5:
         b7:ff:bc:65:6c:d3:96:00:79:37:a1:ce:c9:15:0a:e6:da:08:
         3c:39:64:56:4b:51:63:bf:b8:ee:89:d9:18:f7:31:bd:98:15:
         80:19:95:7e:0d:76:95:56:4a:a6:1e:6f:b4:43:36:13:db:59:
         61:fa:89:12:8d:e2:34:cb:b5:51:19:f2:07:7b:00:73:25:a9:
         1b:f3:60:20:1d:fb:f2:da:59:e5:4b:26:15:78:4d:62:2f:a5:
         f4:06:c3:29:ee:65:8f:a5:17:a9:f0:13:46:4b:f7:73:d5:1a:
         10:cb:4e:ff
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYEoFe+TssGUAFfDpj5KdYyMdBHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJERTJBRjI3N0VCRjg5Qzk3NTEzNjU1QjQzREVGNzYy
MzExQTc5OTAeFw0yNjA1MDMwMzA0NTVaFw0yNzA1MDIwMzA5NTVaMDMxMTAvBgNV
BAMTKDEyNTkyNzMwOTc3NDZENjVFRTQ2NUEwRUVBNEY4Mzc1NkIyNzM1MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT7G0AC1id2KqwGAJbMCEt3dGc
d1qS5fLNP0T/kQDC9sByPJmKTp/qFH5JcjKnyEylNb6EmyWBHg8GUsrruAlbsJpC
8t8jNmK2gtJLIaZh4Rk6x4EsJt9J6MY5dm0FxzZ4EOTxwpd7i7BVhWSFsdWMjp1N
P1jm9JPTMx9fC9CLy0mrwIfS7MKyjtnxYvVd2K3Ekux8hOHqzhm2dXr8IKrgAneC
1MqszeXHmh0XVvlSXYzo1PDkYQ51r0gIdACt+RxrSlV9lO3jGEEmdLwHkFALNOJT
/fjqvwivUiYcQ64gDDvg4vNM7PsltEeAt3A6YoAYCUtkEe24uuuqGdk1HPG5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUElknMJd0bWXuRloO6k+DdWsnNTYwHwYDVR0j
BBgwFoAUYt4q8nfr+JyXUTZVtD3vdiMRp5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDY5MTc3N2UtY2RiNC00ODk3LWIyODctZTU4ZTQyNGMxOTlkLzAvNjJERTJBRjI3
N0VCRjg5Qzk3NTEzNjU1QjQzREVGNzYyMzExQTc5OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MkRFMkFGMjc3RUJGODlDOTc1MTM2NTVCNDNERUY3NjIzMTFB
Nzk5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q2OTE3NzdlLWNkYjQtNDg5Ny1i
Mjg3LWU1OGU0MjRjMTk5ZC8wLzMxMzAzMzJlMzIzNDM3MmUzMjMxMzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM4MzQzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/fYMA0GCSqG
SIb3DQEBCwUAA4IBAQAtbBuA/QcBlbh6gdSVfQETTaEhb2Esuco+2QS9ZIAOMrZt
mB615NnFi1wjNSvq0GRm/UPBxaldqzXT8PlGVSkn/bnHf6V05LDnEoxRD5r2WGDj
gPRP2Wj/skqZoek93YfzMIfkvAVPc75ajdfoyzu+RCiPYSYhYg3Z9yDMTLYbRHDP
U1j441QSlrnHUINul9W3/7xlbNOWAHk3oc7JFQrm2gg8OWRWS1Fjv7juidkY9zG9
mBWAGZV+DXaVVkqmHm+0QzYT21lh+okSjeI0y7VRGfIHewBzJakb82AgHfvy2lnl
SyYVeE1iL6X0BsMp7mWPpRep8BNGS/dz1RoQy07/
-----END CERTIFICATE-----
Generated at Thu May 7 03:12:24 2026 by rpki-client