Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa
File:                     3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (raw, json)
Hash identifier:          f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=
Subject key identifier:   B9:F8:5C:A5:D9:5A:AD:6F:21:F1:DA:56:35:90:AA:E0:61:A7:A6:77
Certificate issuer:       /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7
Certificate serial:       18483AC2FA64B9E6C2011FEABE09DB6D2226E2F0
Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa
Signing time:             Sun 03 May 2026 02:13:12 +0000
ROA not before:           Sun 03 May 2026 02:08:12 +0000
ROA not after:            Sun 02 May 2027 02:13:12 +0000
asID:                     149398
IP address blocks:        103.182.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl
                          rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:48:3a:c2:fa:64:b9:e6:c2:01:1f:ea:be:09:db:6d:22:26:e2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7
        Validity
            Not Before: May  3 02:08:12 2026 GMT
            Not After : May  2 02:13:12 2027 GMT
        Subject: CN=B9F85CA5D95AAD6F21F1DA563590AAE061A7A677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:e9:b1:b2:72:58:8a:b2:21:3e:ca:3e:e3:
                    19:0e:e0:34:2c:c6:aa:87:89:f9:6c:ff:53:5b:6d:
                    15:34:41:ae:4a:31:4d:d0:34:f8:21:00:4c:7d:d4:
                    e8:f6:51:52:b1:bd:45:d2:1b:2d:bd:bb:a0:04:4b:
                    19:d8:7e:f2:13:3b:71:7f:04:02:c4:84:a5:c1:87:
                    a7:e6:ae:98:91:b2:36:10:d4:1f:44:85:57:73:c4:
                    03:87:fd:05:e7:cc:3d:0c:84:5d:59:7f:c3:dd:ea:
                    f8:ec:fe:6e:9f:b7:cc:ee:d9:a9:de:14:32:e4:dd:
                    f2:e6:85:6d:77:4e:20:dc:4f:e8:a4:83:41:d4:5e:
                    cd:c6:d9:39:b8:26:50:75:07:41:f3:48:3b:29:53:
                    83:f5:d9:cc:34:da:90:6a:b9:1e:df:b7:c1:4c:9c:
                    ee:34:5e:09:1a:d3:86:74:bb:a6:32:e4:5c:4a:c3:
                    ff:fe:27:fc:81:e2:fb:be:35:be:36:de:8e:d6:29:
                    d9:13:93:dd:ca:67:62:52:33:ee:e2:f1:19:24:47:
                    0a:51:c8:c4:35:99:8c:82:c3:68:8f:38:71:ed:aa:
                    55:83:82:c4:16:98:d1:0f:a8:98:8b:7c:c2:4e:5d:
                    60:b7:02:86:71:fd:99:43:72:16:f7:1f:88:32:d6:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F8:5C:A5:D9:5A:AD:6F:21:F1:DA:56:35:90:AA:E0:61:A7:A6:77
            X509v3 Authority Key Identifier:
                keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:99:ae:3f:83:d3:a4:0e:5e:e3:08:d1:70:c9:df:1f:21:3e:
         26:53:3c:f6:50:18:f8:8e:87:63:0e:42:b2:3c:e4:f8:51:53:
         62:19:79:f7:6c:ff:82:1d:bc:2d:b4:e9:8b:ad:4e:d1:42:32:
         3a:58:36:78:74:a7:dd:c4:74:e0:f7:9a:92:49:80:2c:68:f7:
         94:b6:95:36:b5:09:d4:2b:e5:2f:b7:06:89:81:b1:d5:b3:5b:
         57:89:5e:e1:aa:64:82:b2:d4:ab:7a:64:31:f2:d4:94:63:6f:
         bf:46:5f:75:7b:0f:b4:77:b6:4b:1f:6a:af:cf:94:49:28:86:
         1e:73:c8:33:6c:8a:6c:01:18:8d:3d:f6:c0:c1:46:93:cd:38:
         02:42:0b:97:23:ad:a8:2c:f5:15:66:84:18:4e:b2:e3:b6:db:
         be:f7:87:78:35:78:4f:e8:56:ef:9b:4d:8f:58:38:57:ea:6c:
         85:54:ca:2b:9d:ea:5c:4b:83:da:b8:f0:ba:41:14:34:2a:21:
         07:44:f4:c4:03:d8:8c:92:8e:1a:6d:2f:5c:4a:04:43:5b:d7:
         b6:35:d7:61:fd:c8:82:e1:a3:44:11:92:11:6f:0d:6e:96:9c:
         23:78:f1:c2:6a:30:00:76:65:c5:66:5e:76:b5:75:e3:f3:fc:
         0a:44:1a:e5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGEg6wvpkuebCAR/qvgnbbSIm4vAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5
RDhFNjJDNzAeFw0yNjA1MDMwMjA4MTJaFw0yNzA1MDIwMjEzMTJaMDMxMTAvBgNV
BAMTKEI5Rjg1Q0E1RDk1QUFENkYyMUYxREE1NjM1OTBBQUUwNjFBN0E2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCra+mxsnJYirIhPso+4xkO4DQs
xqqHifls/1NbbRU0Qa5KMU3QNPghAEx91Oj2UVKxvUXSGy29u6AESxnYfvITO3F/
BALEhKXBh6fmrpiRsjYQ1B9EhVdzxAOH/QXnzD0MhF1Zf8Pd6vjs/m6ft8zu2ane
FDLk3fLmhW13TiDcT+ikg0HUXs3G2Tm4JlB1B0HzSDspU4P12cw02pBquR7ft8FM
nO40Xgka04Z0u6Yy5FxKw//+J/yB4vu+Nb423o7WKdkTk93KZ2JSM+7i8RkkRwpR
yMQ1mYyCw2iPOHHtqlWDgsQWmNEPqJiLfMJOXWC3AoZx/ZlDchb3H4gy1jKNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUufhcpdlarW8h8dpWNZCq4GGnpncwHwYDVR0j
BBgwFoAUkLC/wY65BJbAMjOD3NySHZ2OYscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGQ0ZGNkZTMtNzU3Zi00M2Q0LWFkZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4
RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5RDhFNjJDNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MEIwQkZDMThFQjkwNDk2QzAzMjMzODNEQ0RDOTIxRDlEOEU2
MkM3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBkNGRjZGUzLTc1N2YtNDNkNC1h
ZGUyLWZmMDg4N2NjMjQ4Ny8wLzMxMzAzMzJlMzEzODMyMmUzNzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7ZNMA0GCSqG
SIb3DQEBCwUAA4IBAQBima4/g9OkDl7jCNFwyd8fIT4mUzz2UBj4jodjDkKyPOT4
UVNiGXn3bP+CHbwttOmLrU7RQjI6WDZ4dKfdxHTg95qSSYAsaPeUtpU2tQnUK+Uv
twaJgbHVs1tXiV7hqmSCstSremQx8tSUY2+/Rl91ew+0d7ZLH2qvz5RJKIYec8gz
bIpsARiNPfbAwUaTzTgCQguXI62oLPUVZoQYTrLjttu+94d4NXhP6Fbvm02PWDhX
6myFVMornepcS4PauPC6QRQ0KiEHRPTEA9iMko4abS9cSgRDW9e2Nddh/ciC4aNE
EZIRbw1ulpwjePHCajAAdmXFZl52tXXj8/wKRBrl
-----END CERTIFICATE-----
Generated at Wed May 13 03:47:54 2026 by rpki-client