Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa
File:                     3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (raw, json)
Hash identifier:          tN8hqXs0tuky+FNs6o0CbbGWnhVx3yins5GjXsftwqY=
Subject key identifier:   8D:C3:0D:32:8E:2A:A8:24:96:21:6D:6C:CD:9B:B2:F2:7F:9D:57:2D
Certificate issuer:       /CN=6918A05044E6DDA8F7ED9081D4CAF15429459236
Certificate serial:       14B254009DDB3FA48340DDF4174F0161CC2F6AF5
Authority key identifier: 69:18:A0:50:44:E6:DD:A8:F7:ED:90:81:D4:CA:F1:54:29:45:92:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6918A05044E6DDA8F7ED9081D4CAF15429459236.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa
Signing time:             Sun 03 May 2026 02:14:31 +0000
ROA not before:           Sun 03 May 2026 02:09:31 +0000
ROA not after:            Sun 02 May 2027 02:14:31 +0000
asID:                     149758
IP address blocks:        103.189.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/6918A05044E6DDA8F7ED9081D4CAF15429459236.crl
                          rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/6918A05044E6DDA8F7ED9081D4CAF15429459236.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6918A05044E6DDA8F7ED9081D4CAF15429459236.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b2:54:00:9d:db:3f:a4:83:40:dd:f4:17:4f:01:61:cc:2f:6a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918A05044E6DDA8F7ED9081D4CAF15429459236
        Validity
            Not Before: May  3 02:09:31 2026 GMT
            Not After : May  2 02:14:31 2027 GMT
        Subject: CN=8DC30D328E2AA82496216D6CCD9BB2F27F9D572D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:d9:5e:f0:2b:d0:f8:8a:05:8e:63:fd:fd:
                    7d:39:e5:09:62:a2:34:89:56:14:0a:e4:a5:33:48:
                    c3:c5:1b:7e:9e:1d:8b:fb:b5:3d:54:26:43:64:15:
                    20:39:6a:5b:5a:6f:82:b7:8e:3f:f9:28:b4:39:14:
                    2c:68:54:36:c0:26:c8:17:fe:f8:40:a4:f5:0e:81:
                    56:4b:8b:3a:d6:a0:32:76:35:0d:38:09:6b:65:c0:
                    de:0d:6f:29:4b:5e:24:8d:bd:69:1f:f0:e2:e5:aa:
                    99:b6:e9:cb:96:33:7a:ba:83:78:e3:52:f4:22:63:
                    19:56:ba:8a:01:33:e0:23:0d:ef:a0:06:f8:70:4c:
                    21:c1:26:83:e8:a8:e1:28:c2:26:2f:26:7a:f4:22:
                    2d:a2:d4:1e:d0:22:96:87:f4:84:c5:23:b0:0a:f6:
                    de:3a:47:ef:4d:63:d1:c5:a0:3e:98:42:96:af:80:
                    bb:e5:55:26:11:a7:da:e1:05:31:0a:c7:79:83:64:
                    e7:7f:4a:89:ec:20:48:5d:70:86:27:4b:b0:60:1e:
                    a8:61:e1:ea:fa:c9:bf:c0:c2:f1:3e:19:54:0e:36:
                    ed:e2:7a:25:98:e0:cc:a0:01:09:3c:8a:1a:0a:a8:
                    ec:be:10:7f:d8:24:54:e5:da:64:08:7c:80:69:88:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:0D:32:8E:2A:A8:24:96:21:6D:6C:CD:9B:B2:F2:7F:9D:57:2D
            X509v3 Authority Key Identifier:
                keyid:69:18:A0:50:44:E6:DD:A8:F7:ED:90:81:D4:CA:F1:54:29:45:92:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/6918A05044E6DDA8F7ED9081D4CAF15429459236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6918A05044E6DDA8F7ED9081D4CAF15429459236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:02:de:39:7d:85:cc:23:de:a8:a5:1e:6d:59:bd:e0:bc:
         b1:3d:32:01:62:6a:37:e9:c8:c9:ea:e9:2b:d1:2a:57:f9:74:
         d0:41:98:6b:60:c6:c7:1f:35:24:ed:db:5e:a4:c6:29:33:06:
         ff:da:08:36:71:ea:4f:c7:99:3a:7b:92:3b:c4:5b:35:48:b7:
         d3:4e:48:52:e9:68:0e:06:20:94:30:23:f0:a1:69:cb:98:82:
         65:ae:23:f9:92:7b:ea:26:f0:c8:e2:8a:6d:9d:ba:14:62:1b:
         43:12:e6:dc:ac:ac:4b:c1:3c:5c:7a:98:e2:89:26:f5:fc:ab:
         bc:54:54:a4:bd:bc:54:ea:4e:d9:c5:73:11:20:a0:4f:8b:18:
         f5:d1:59:65:95:c7:c6:6b:ac:e6:ce:5e:aa:8e:05:6d:6b:2f:
         bb:6b:75:5d:e7:ad:78:ce:d9:e1:47:24:2f:de:38:71:de:c5:
         f5:fd:d9:07:83:20:f0:6f:24:ca:71:d2:b3:02:55:e3:70:11:
         fe:8d:3f:09:e4:f8:07:3e:f2:65:e5:65:b5:f3:ef:32:08:6e:
         8f:97:cb:2e:85:ee:47:5a:c3:46:01:9a:87:6f:87:4d:9e:5b:
         0b:a0:a4:5a:b1:ca:72:ec:fb:3d:88:20:f3:41:1b:f1:30:66:
         aa:b9:87:60
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFLJUAJ3bP6SDQN30F08BYcwvavUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkxOEEwNTA0NEU2RERBOEY3RUQ5MDgxRDRDQUYxNTQy
OTQ1OTIzNjAeFw0yNjA1MDMwMjA5MzFaFw0yNzA1MDIwMjE0MzFaMDMxMTAvBgNV
BAMTKDhEQzMwRDMyOEUyQUE4MjQ5NjIxNkQ2Q0NEOUJCMkYyN0Y5RDU3MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVAdle8CvQ+IoFjmP9/X055Qli
ojSJVhQK5KUzSMPFG36eHYv7tT1UJkNkFSA5altab4K3jj/5KLQ5FCxoVDbAJsgX
/vhApPUOgVZLizrWoDJ2NQ04CWtlwN4NbylLXiSNvWkf8OLlqpm26cuWM3q6g3jj
UvQiYxlWuooBM+AjDe+gBvhwTCHBJoPoqOEowiYvJnr0Ii2i1B7QIpaH9ITFI7AK
9t46R+9NY9HFoD6YQpavgLvlVSYRp9rhBTEKx3mDZOd/SonsIEhdcIYnS7BgHqhh
4er6yb/AwvE+GVQONu3ieiWY4MygAQk8ihoKqOy+EH/YJFTl2mQIfIBpiP2pAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUjcMNMo4qqCSWIW1szZuy8n+dVy0wHwYDVR0j
BBgwFoAUaRigUETm3aj37ZCB1MrxVClFkjYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTM3ZGZiODgtZmI1MC00OGQxLWI5MGQtZTUyNTEwMmY0ZjVlLzAvNjkxOEEwNTA0
NEU2RERBOEY3RUQ5MDgxRDRDQUYxNTQyOTQ1OTIzNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OTE4QTA1MDQ0RTZEREE4RjdFRDkwODFENENBRjE1NDI5NDU5
MjM2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzEzN2RmYjg4LWZiNTAtNDhkMS1i
OTBkLWU1MjUxMDJmNGY1ZS8wLzMxMzAzMzJlMzEzODM5MmUzNTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ706MA0GCSqG
SIb3DQEBCwUAA4IBAQCDqQLeOX2FzCPeqKUebVm94LyxPTIBYmo36cjJ6ukr0SpX
+XTQQZhrYMbHHzUk7dtepMYpMwb/2gg2cepPx5k6e5I7xFs1SLfTTkhS6WgOBiCU
MCPwoWnLmIJlriP5knvqJvDI4optnboUYhtDEubcrKxLwTxcepjiiSb1/Ku8VFSk
vbxU6k7ZxXMRIKBPixj10VlllcfGa6zmzl6qjgVtay+7a3Vd5614ztnhRyQv3jhx
3sX1/dkHgyDwbyTKcdKzAlXjcBH+jT8J5PgHPvJl5WW18+8yCG6Pl8suhe5HWsNG
AZqHb4dNnlsLoKRascpy7Ps9iCDzQRvxMGaquYdg
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:21 2026 by rpki-client