Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=
Subject key identifier:   08:BC:E5:76:6D:D7:5F:1B:9C:C7:4F:7A:6B:F6:0B:33:00:E6:8B:D3
Certificate issuer:       /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF
Certificate serial:       4FA79B05F38F1483C0DF653F0E189B7AF9E171E0
Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 03:12:10 +0000
ROA not before:           Sun 03 May 2026 03:07:10 +0000
ROA not after:            Sun 02 May 2027 03:12:10 +0000
asID:                     9341
IP address blocks:        103.181.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl
                          rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a7:9b:05:f3:8f:14:83:c0:df:65:3f:0e:18:9b:7a:f9:e1:71:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF
        Validity
            Not Before: May  3 03:07:10 2026 GMT
            Not After : May  2 03:12:10 2027 GMT
        Subject: CN=08BCE5766DD75F1B9CC74F7A6BF60B3300E68BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:c3:e2:76:95:f1:cc:a1:6e:57:aa:6e:84:
                    6a:c3:88:e6:e2:5a:e9:34:b1:32:cb:ca:f5:76:09:
                    3d:f4:84:32:c8:d5:1c:86:0c:cb:35:71:c2:c6:62:
                    51:6c:3f:cb:48:32:4b:84:f0:58:57:bf:30:85:53:
                    40:13:c0:3c:95:98:f4:85:43:36:c6:d3:a5:e0:4e:
                    13:d5:08:ab:82:3b:c2:83:ff:4f:a6:f2:9d:4c:33:
                    fb:7f:d6:de:7d:2d:09:ed:1a:88:09:2d:38:e3:5f:
                    61:21:09:b0:95:c1:a6:00:17:0b:63:54:55:77:ee:
                    70:98:aa:3b:88:b5:f0:44:d2:b4:77:51:3e:e1:79:
                    17:28:b5:28:3b:25:d6:d0:19:86:0f:77:bb:e0:62:
                    7f:58:b3:fc:3a:f3:94:61:fb:15:7a:f5:48:68:da:
                    4a:b7:47:2b:2c:1b:53:26:5f:41:57:81:a5:db:a6:
                    53:ee:1f:26:fe:76:48:fa:6a:2e:cc:b5:43:63:37:
                    85:01:1c:1e:b3:14:1e:a0:12:23:7d:b3:61:c5:5c:
                    aa:10:90:6a:6c:8f:bd:93:7e:33:f6:f5:38:eb:fc:
                    99:67:57:2f:57:6a:21:77:9c:ad:7b:76:69:1d:52:
                    c7:07:a6:b7:3a:45:de:8b:3e:9d:6e:13:aa:ef:00:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BC:E5:76:6D:D7:5F:1B:9C:C7:4F:7A:6B:F6:0B:33:00:E6:8B:D3
            X509v3 Authority Key Identifier:
                keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:32:1a:41:02:d3:f5:ee:37:d0:58:d0:11:3c:f7:58:5e:
         90:dc:76:82:63:39:9d:89:a4:d3:63:e7:e0:f4:03:5b:58:80:
         ff:93:7c:1d:46:e2:50:b6:8a:05:fb:6f:bf:dc:0d:67:d1:60:
         25:6f:23:53:b3:97:13:c6:f8:12:e6:f7:92:9a:94:2b:b6:48:
         76:b3:8a:9e:6c:fe:0b:f3:65:51:96:d4:9a:d1:83:c9:16:80:
         70:9c:51:0c:57:32:87:18:4a:01:50:40:a7:73:1f:1a:05:3c:
         bd:2f:f0:ca:45:98:ce:b5:24:dd:a6:a2:51:6b:41:b1:3c:2d:
         f8:8d:da:8e:04:aa:b1:bc:5c:9e:df:34:6e:7f:ab:ed:7a:cb:
         f4:6c:bd:72:2d:2c:04:19:12:0c:bf:a4:75:86:cd:c7:f5:29:
         20:9f:59:b1:6c:ec:19:02:2a:18:2a:8a:9b:24:68:5c:91:93:
         8d:76:75:fd:a8:2e:41:fa:f0:d5:20:eb:07:d3:49:d3:c4:23:
         8d:98:53:f3:86:e6:c1:ae:64:c3:41:b7:30:84:76:48:96:9c:
         45:34:32:a4:0a:86:f6:77:4b:a7:c2:13:8b:e8:2e:32:f9:84:
         08:57:34:2a:13:63:28:b5:8c:bb:b7:65:2b:5b:ff:66:24:8b:
         d3:ac:73:f0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUT6ebBfOPFIPA32U/DhibevnhceAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC
NjM2QzlBRjAeFw0yNjA1MDMwMzA3MTBaFw0yNzA1MDIwMzEyMTBaMDMxMTAvBgNV
BAMTKDA4QkNFNTc2NkRENzVGMUI5Q0M3NEY3QTZCRjYwQjMzMDBFNjhCRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0cPidpXxzKFuV6puhGrDiObi
Wuk0sTLLyvV2CT30hDLI1RyGDMs1ccLGYlFsP8tIMkuE8FhXvzCFU0ATwDyVmPSF
QzbG06XgThPVCKuCO8KD/0+m8p1MM/t/1t59LQntGogJLTjjX2EhCbCVwaYAFwtj
VFV37nCYqjuItfBE0rR3UT7heRcotSg7JdbQGYYPd7vgYn9Ys/w685Rh+xV69Uho
2kq3RyssG1MmX0FXgaXbplPuHyb+dkj6ai7MtUNjN4UBHB6zFB6gEiN9s2HFXKoQ
kGpsj72TfjP29Tjr/JlnVy9XaiF3nK17dmkdUscHprc6Rd6LPp1uE6rvAIOvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUCLzldm3XXxucx096a/YLMwDmi9MwHwYDVR0j
BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1
Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD
OUFGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmYTU4OWVmLTlmM2QtNDNiYy1i
YTMwLWZhMzI2YjcxZjc4Ny8wLzMxMzAzMzJlMzEzODMxMmUzMjM1MzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe1+jANBgkqhkiG
9w0BAQsFAAOCAQEAI/cyGkEC0/XuN9BY0BE891hekNx2gmM5nYmk02Pn4PQDW1iA
/5N8HUbiULaKBftvv9wNZ9FgJW8jU7OXE8b4Eub3kpqUK7ZIdrOKnmz+C/NlUZbU
mtGDyRaAcJxRDFcyhxhKAVBAp3MfGgU8vS/wykWYzrUk3aaiUWtBsTwt+I3ajgSq
sbxcnt80bn+r7XrL9Gy9ci0sBBkSDL+kdYbNx/UpIJ9ZsWzsGQIqGCqKmyRoXJGT
jXZ1/aguQfrw1SDrB9NJ08QjjZhT84bmwa5kw0G3MIR2SJacRTQypAqG9ndLp8IT
i+guMvmECFc0KhNjKLWMu7dlK1v/ZiSL06xz8A==
-----END CERTIFICATE-----
Generated at Tue May 5 13:27:37 2026 by rpki-client