Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          dzAufJOseFap4DRjmnUOc2LvueVNrB6swsyJUi6b4Xw=
Subject key identifier:   A2:B8:6F:37:50:94:9A:DD:8A:90:6B:A0:75:D0:CD:D1:65:AA:D8:5B
Certificate issuer:       /CN=823E59BE50593557F29378EC4CAC8BDE16BF5074
Certificate serial:       41A5CDB6088F59A18EFCBB8C4FF29EC37F10EFCB
Authority key identifier: 82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 03:17:51 +0000
ROA not before:           Sun 03 May 2026 03:12:51 +0000
ROA not after:            Sun 02 May 2027 03:17:51 +0000
asID:                     9341
IP address blocks:        103.190.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl
                          rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 09:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a5:cd:b6:08:8f:59:a1:8e:fc:bb:8c:4f:f2:9e:c3:7f:10:ef:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823E59BE50593557F29378EC4CAC8BDE16BF5074
        Validity
            Not Before: May  3 03:12:51 2026 GMT
            Not After : May  2 03:17:51 2027 GMT
        Subject: CN=A2B86F3750949ADD8A906BA075D0CDD165AAD85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:2f:b0:27:d6:38:5d:ff:25:d6:77:dd:75:
                    a3:0c:79:c6:27:3f:c4:35:2c:fe:46:17:ce:cd:7f:
                    cd:45:a0:ef:03:6c:c8:c4:48:31:f0:ed:56:9b:b2:
                    2c:af:4e:fa:61:a2:1b:f1:1b:d6:ff:8e:0d:66:f2:
                    f9:c4:a7:94:57:93:a7:65:49:0f:bc:74:70:8c:50:
                    9f:d6:07:8b:ac:44:8e:2a:04:bc:37:ec:c6:fc:12:
                    ff:7d:19:c8:1e:b1:4a:d5:35:5a:d3:95:67:52:90:
                    45:a1:ae:2a:42:9e:50:26:4d:5b:b9:a5:1a:ba:7a:
                    5d:33:1b:aa:5a:0e:e4:17:ca:05:fa:6e:37:95:ba:
                    bb:84:d4:d7:55:01:41:ed:d7:f3:ae:ff:33:75:f4:
                    40:ed:c1:74:d0:7b:5f:8e:20:9f:b7:7a:fc:47:c8:
                    b8:91:84:69:35:5b:c2:ce:03:3c:5a:12:8d:b1:20:
                    6d:11:68:c8:78:6d:2a:cc:e8:58:90:6c:10:61:56:
                    23:17:e4:88:26:df:2f:61:a8:da:02:26:20:e8:4b:
                    ea:e8:b6:d9:96:7f:f0:05:e3:e4:f6:fd:8d:ca:61:
                    ba:91:12:c4:ff:b5:c9:88:6c:16:22:d3:54:3c:1c:
                    6e:78:3a:dc:4c:2f:bf:6e:e3:ff:0d:e0:fd:63:a0:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B8:6F:37:50:94:9A:DD:8A:90:6B:A0:75:D0:CD:D1:65:AA:D8:5B
            X509v3 Authority Key Identifier:
                keyid:82:3E:59:BE:50:59:35:57:F2:93:78:EC:4C:AC:8B:DE:16:BF:50:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/823E59BE50593557F29378EC4CAC8BDE16BF5074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/823E59BE50593557F29378EC4CAC8BDE16BF5074.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:92:77:93:da:f5:64:3e:25:e5:f4:96:aa:74:bc:60:1d:1f:
         7a:76:ff:21:3d:85:e0:79:5b:a2:24:ea:d3:26:a0:3a:33:52:
         b4:55:72:2b:26:1b:07:53:9b:a5:42:79:1b:d9:67:45:3a:c1:
         fa:dd:a7:ee:a8:35:9a:97:86:5b:55:67:16:49:f5:82:8d:ef:
         08:7c:d2:71:c6:0c:7b:cc:2d:e7:fb:f6:08:de:5b:14:5b:9a:
         02:9c:af:e7:45:9f:69:4e:07:f1:79:ca:9d:d1:45:a4:4c:a1:
         2b:ea:c9:a5:fb:15:cb:d6:6c:b0:1b:74:54:b5:60:aa:58:b4:
         88:f1:bf:79:50:46:cd:86:86:0d:bb:90:53:72:b1:35:45:51:
         95:82:c5:93:25:10:b6:bd:ee:b6:43:2b:4a:23:39:90:fc:74:
         72:a5:3a:c6:5d:32:22:b8:09:ae:1f:36:45:00:41:0b:c0:7e:
         ef:8d:9c:17:2b:e7:fe:54:f0:ad:37:e7:cd:4d:6d:6d:4a:3d:
         f5:22:54:ed:d9:d6:99:92:c7:fa:4a:d2:a7:9b:44:63:4b:a5:
         85:71:47:88:9a:8d:4f:11:08:ed:91:db:db:58:36:c5:6f:5d:
         54:2f:95:91:5a:69:be:ed:06:fe:d2:37:76:db:08:0f:2e:26:
         36:fe:4b:15
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQaXNtgiPWaGO/LuMT/Kew38Q78swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIzRTU5QkU1MDU5MzU1N0YyOTM3OEVDNENBQzhCREUx
NkJGNTA3NDAeFw0yNjA1MDMwMzEyNTFaFw0yNzA1MDIwMzE3NTFaMDMxMTAvBgNV
BAMTKEEyQjg2RjM3NTA5NDlBREQ4QTkwNkJBMDc1RDBDREQxNjVBQUQ4NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXS+wJ9Y4Xf8l1nfddaMMecYn
P8Q1LP5GF87Nf81FoO8DbMjESDHw7VabsiyvTvphohvxG9b/jg1m8vnEp5RXk6dl
SQ+8dHCMUJ/WB4usRI4qBLw37Mb8Ev99GcgesUrVNVrTlWdSkEWhripCnlAmTVu5
pRq6el0zG6paDuQXygX6bjeVuruE1NdVAUHt1/Ou/zN19EDtwXTQe1+OIJ+3evxH
yLiRhGk1W8LOAzxaEo2xIG0RaMh4bSrM6FiQbBBhViMX5Igm3y9hqNoCJiDoS+ro
ttmWf/AF4+T2/Y3KYbqREsT/tcmIbBYi01Q8HG54OtxML79u4/8N4P1joHaNAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUorhvN1CUmt2KkGugddDN0WWq2FswHwYDVR0j
BBgwFoAUgj5ZvlBZNVfyk3jsTKyL3ha/UHQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjU4MzgzZTItMjA2Yy00Yjc0LWJhNGEtY2Q4YTRkN2NkODYxLzAvODIzRTU5QkU1
MDU5MzU1N0YyOTM3OEVDNENBQzhCREUxNkJGNTA3NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MjNFNTlCRTUwNTkzNTU3RjI5Mzc4RUM0Q0FDOEJERTE2QkY1
MDc0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y1ODM4M2UyLTIwNmMtNGI3NC1i
YTRhLWNkOGE0ZDdjZDg2MS8wLzMxMzAzMzJlMzEzOTMwMmUzNTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvjIwDQYJKoZIhvcN
AQELBQADggEBALWSd5Pa9WQ+JeX0lqp0vGAdH3p2/yE9heB5W6Ik6tMmoDozUrRV
cismGwdTm6VCeRvZZ0U6wfrdp+6oNZqXhltVZxZJ9YKN7wh80nHGDHvMLef79gje
WxRbmgKcr+dFn2lOB/F5yp3RRaRMoSvqyaX7FcvWbLAbdFS1YKpYtIjxv3lQRs2G
hg27kFNysTVFUZWCxZMlELa97rZDK0ojOZD8dHKlOsZdMiK4Ca4fNkUAQQvAfu+N
nBcr5/5U8K03581NbW1KPfUiVO3Z1pmSx/pK0qebRGNLpYVxR4iajU8RCO2R29tY
NsVvXVQvlZFaab7tBv7SN3bbCA8uJjb+SxU=
-----END CERTIFICATE-----
Generated at Tue May 5 13:27:32 2026 by rpki-client