Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
File:                     3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (raw, json)
Hash identifier:          B0g8+pDAE4Q/0GBSFMta6Y5XLkcrXAH8CA4qOj5PkCE=
Subject key identifier:   F7:80:D5:77:21:DA:32:CC:4C:1B:14:2A:CA:47:D4:26:8C:50:26:27
Certificate issuer:       /CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Certificate serial:       1015DC5E02367AA7059C15EE4AFB19523E475651
Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
Signing time:             Sun 03 May 2026 02:13:20 +0000
ROA not before:           Sun 03 May 2026 02:08:20 +0000
ROA not after:            Sun 02 May 2027 02:13:20 +0000
asID:                     132649
IP address blocks:        103.24.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
                          rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:15:dc:5e:02:36:7a:a7:05:9c:15:ee:4a:fb:19:52:3e:47:56:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040
        Validity
            Not Before: May  3 02:08:20 2026 GMT
            Not After : May  2 02:13:20 2027 GMT
        Subject: CN=F780D57721DA32CC4C1B142ACA47D4268C502627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:94:cd:ac:c9:3d:95:bd:eb:5d:98:a0:aa:
                    f6:f0:8b:b4:02:3b:41:64:0c:58:43:86:7a:10:92:
                    e7:01:54:62:bc:b0:79:fb:31:21:7c:96:fc:a5:82:
                    f8:6c:7e:86:c5:57:4d:56:40:8c:49:16:a0:8e:34:
                    45:dc:0d:b3:01:0c:dd:92:ac:42:b8:46:1c:70:e2:
                    4b:0f:8e:35:1e:18:5a:5a:04:61:29:72:6f:21:2b:
                    67:85:0e:1e:39:6f:cc:25:ea:23:6d:cb:fb:f7:4c:
                    00:c6:e5:74:cc:75:cc:dc:d5:d1:90:83:0b:28:84:
                    85:0a:2f:45:93:24:97:2b:3d:8e:48:a4:bf:19:e0:
                    70:36:a2:2b:e8:e6:8a:01:c1:32:79:66:f0:aa:a5:
                    32:4e:ea:a1:82:d2:20:63:a5:c2:f4:11:fd:90:9e:
                    c4:63:bb:83:7e:52:c4:41:d2:52:5f:ed:6f:3c:f8:
                    71:e4:4b:58:81:b4:67:cd:f8:6c:19:b8:11:32:dd:
                    ba:7d:ef:a8:15:0f:ba:30:36:15:44:ce:bf:66:c8:
                    1e:6c:e6:eb:6d:a5:7d:c0:ef:13:8e:72:17:36:e8:
                    65:42:0b:7a:36:17:94:07:2e:7e:af:0d:be:87:f1:
                    4e:ee:53:81:59:8d:a8:ef:f4:f8:82:78:38:ca:d6:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:D5:77:21:DA:32:CC:4C:1B:14:2A:CA:47:D4:26:8C:50:26:27
            X509v3 Authority Key Identifier:
                keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:d8:74:97:6e:1c:70:24:83:df:d6:2e:93:72:e6:0f:9a:
         e7:38:3d:3e:a4:7b:73:ef:1b:b1:f5:ee:c3:72:52:36:ce:78:
         7b:dd:16:64:21:ad:25:ff:44:01:76:35:95:27:aa:35:95:36:
         a3:5b:1c:2d:e6:66:6c:42:9e:ca:83:fe:78:70:70:c2:0b:01:
         16:19:f3:55:a4:95:f3:5f:1b:db:45:9b:4b:c4:a8:79:10:c0:
         af:2e:f0:c8:4b:48:cc:81:d6:5a:2c:5a:74:2a:68:6f:6f:b9:
         a7:2f:7a:c8:de:98:d8:18:d4:12:7c:b4:f4:d7:68:d2:cf:9f:
         29:b5:bc:4a:72:ba:9b:d8:08:bd:56:85:2b:b4:7a:91:a4:f0:
         57:49:c2:a2:68:bf:87:d3:3b:ad:95:00:a8:f7:75:7b:59:7e:
         6c:9e:82:db:4f:ea:6c:78:66:f4:36:83:d7:82:bc:f7:74:9c:
         5d:7e:7c:01:41:32:0d:b1:1e:c2:48:c9:81:a3:0d:d2:44:b5:
         f8:8a:0e:73:8a:09:7c:7b:37:df:a6:ab:cd:7a:73:0e:b3:51:
         8e:64:42:05:6d:6e:14:55:e6:d8:8d:04:ee:c6:ed:e7:fc:2d:
         f4:d4:95:10:7d:0f:32:36:91:b3:7b:6e:51:17:2c:4b:97:1f:
         5c:0f:d4:33
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEBXcXgI2eqcFnBXuSvsZUj5HVlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNB
NzEwRTA0MDAeFw0yNjA1MDMwMjA4MjBaFw0yNzA1MDIwMjEzMjBaMDMxMTAvBgNV
BAMTKEY3ODBENTc3MjFEQTMyQ0M0QzFCMTQyQUNBNDdENDI2OEM1MDI2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeCZTNrMk9lb3rXZigqvbwi7QC
O0FkDFhDhnoQkucBVGK8sHn7MSF8lvylgvhsfobFV01WQIxJFqCONEXcDbMBDN2S
rEK4Rhxw4ksPjjUeGFpaBGEpcm8hK2eFDh45b8wl6iNty/v3TADG5XTMdczc1dGQ
gwsohIUKL0WTJJcrPY5IpL8Z4HA2oivo5ooBwTJ5ZvCqpTJO6qGC0iBjpcL0Ef2Q
nsRju4N+UsRB0lJf7W88+HHkS1iBtGfN+GwZuBEy3bp976gVD7owNhVEzr9myB5s
5uttpX3A7xOOchc26GVCC3o2F5QHLn6vDb6H8U7uU4FZjajv9PiCeDjK1ghBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU94DVdyHaMsxMGxQqykfUJoxQJicwHwYDVR0j
BBgwFoAUqrRnHZc1Bmlk8AjJ3fxSw6cQ4EAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGU0NmEzMDUtZGY3Ny00NTg3LTg3MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5
NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNBNzEwRTA0MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQUI0NjcxRDk3MzUwNjY5NjRGMDA4QzlEREZDNTJDM0E3MTBF
MDQwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBlNDZhMzA1LWRmNzctNDU4Ny04
NzAzLWE5MDVjNTM3NzlhYy8wLzMxMzAzMzJlMzIzNDJlMzIzMTMyMmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzEzMzMyMzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxjUMA0GCSqG
SIb3DQEBCwUAA4IBAQAn0th0l24ccCSD39Yuk3LmD5rnOD0+pHtz7xux9e7DclI2
znh73RZkIa0l/0QBdjWVJ6o1lTajWxwt5mZsQp7Kg/54cHDCCwEWGfNVpJXzXxvb
RZtLxKh5EMCvLvDIS0jMgdZaLFp0Kmhvb7mnL3rI3pjYGNQSfLT012jSz58ptbxK
crqb2Ai9VoUrtHqRpPBXScKiaL+H0zutlQCo93V7WX5snoLbT+pseGb0NoPXgrz3
dJxdfnwBQTINsR7CSMmBow3SRLX4ig5zigl8ezffpqvNenMOs1GOZEIFbW4UVebY
jQTuxu3n/C301JUQfQ8yNpGze25RFyxLlx9cD9Qz
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:27 2026 by rpki-client