Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa
File:                     3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (raw, json)
Hash identifier:          7ewRXVv5rl+QG1YNIYilvzKzYUQ3mx2Wk/pMwVKtEKI=
Subject key identifier:   CA:6C:44:01:D7:A6:B2:68:F2:D2:85:B3:54:27:4A:99:F2:CE:F1:AE
Certificate issuer:       /CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF
Certificate serial:       467AFC5F7DF8C6578BC79E12A97A229C238E1095
Authority key identifier: B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa
Signing time:             Sun 03 May 2026 02:14:47 +0000
ROA not before:           Sun 03 May 2026 02:09:47 +0000
ROA not after:            Sun 02 May 2027 02:14:47 +0000
asID:                     149745
IP address blocks:        103.188.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl
                          rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7a:fc:5f:7d:f8:c6:57:8b:c7:9e:12:a9:7a:22:9c:23:8e:10:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF
        Validity
            Not Before: May  3 02:09:47 2026 GMT
            Not After : May  2 02:14:47 2027 GMT
        Subject: CN=CA6C4401D7A6B268F2D285B354274A99F2CEF1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:e9:33:98:a2:7c:ec:21:09:b7:5e:7b:29:
                    29:a9:d3:af:b1:88:ed:99:7b:9a:27:87:51:c3:ef:
                    bf:63:5b:4c:29:af:f0:3e:15:d8:21:a1:13:b4:61:
                    d1:a6:27:ba:1a:3c:ba:3a:95:49:8d:38:67:e2:4c:
                    17:e1:07:a7:ea:59:65:76:6d:53:44:50:72:b5:96:
                    a0:60:45:2c:ed:46:64:df:96:61:80:8e:37:a8:0a:
                    cc:9d:fa:7a:81:a4:8a:ed:02:b6:fd:aa:89:bd:0d:
                    44:25:61:a7:41:7b:a9:52:e2:ec:06:63:f4:f1:b2:
                    9b:44:6f:f0:c8:29:44:80:f6:9b:94:2a:9f:46:28:
                    f1:69:6d:84:99:d9:4d:1f:c6:e9:90:d8:60:52:f6:
                    7f:cf:d9:18:8a:27:cb:58:18:c6:f5:f6:6a:90:5d:
                    6f:c5:d9:2f:c5:cf:d2:9f:20:f1:ae:0e:4c:21:8b:
                    da:e3:65:d0:4e:1c:bd:92:63:de:ac:7f:7a:be:82:
                    2e:32:1e:25:81:bd:7d:25:8a:2e:80:83:eb:93:b6:
                    eb:cf:89:b4:3f:10:60:20:f1:b6:d3:81:76:e6:e2:
                    24:44:9c:c2:2c:f0:43:a7:37:ac:3b:0f:27:73:a7:
                    8f:d5:83:2e:3f:5e:7f:af:e7:9f:06:7e:23:2c:b6:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6C:44:01:D7:A6:B2:68:F2:D2:85:B3:54:27:4A:99:F2:CE:F1:AE
            X509v3 Authority Key Identifier:
                keyid:B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:b1:05:8d:69:29:8f:23:8f:f3:9d:9d:2d:ea:c7:a1:23:
         22:78:10:3f:70:b0:76:75:6e:81:d9:ce:d8:b9:e7:88:f8:ba:
         88:63:b4:e0:ac:37:2b:06:b9:6e:c1:4d:75:78:68:d9:4d:c0:
         44:eb:2d:99:96:0a:96:a5:ba:8f:c1:d9:56:9f:c4:46:cd:01:
         9c:e4:e6:d4:37:8d:6c:23:6b:2b:70:25:11:5c:96:22:76:ae:
         5a:fb:fd:69:f9:2c:91:e6:8e:9e:5c:5b:4f:76:b8:c8:c8:f2:
         e9:52:c2:19:0d:80:38:b9:db:32:7e:c8:d3:1d:bd:99:10:52:
         ec:4e:7f:7d:34:27:7f:59:0a:d2:53:12:c6:ea:ab:b8:e1:a4:
         de:ff:6e:21:e6:96:60:26:75:87:27:28:60:ae:27:79:70:b3:
         80:aa:a8:b3:e0:69:f4:a6:03:99:ae:24:5e:f4:fa:01:e2:a0:
         ed:d9:43:5f:3a:1b:57:20:42:d0:91:d1:92:49:b1:3c:81:14:
         a5:7e:25:70:f5:08:bb:a3:95:a8:2a:c0:71:b8:ed:f2:31:55:
         cd:0d:04:36:9e:0a:3f:d6:2b:c2:36:04:dd:88:b1:43:0d:ce:
         10:53:36:06:e1:0f:5f:27:02:ac:c7:7b:e9:01:9c:b6:52:39:
         84:21:55:1b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURnr8X334xleLx54SqXoinCOOEJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5MzND
MjQ1MUNBRjAeFw0yNjA1MDMwMjA5NDdaFw0yNzA1MDIwMjE0NDdaMDMxMTAvBgNV
BAMTKENBNkM0NDAxRDdBNkIyNjhGMkQyODVCMzU0Mjc0QTk5RjJDRUYxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7t+kzmKJ87CEJt157KSmp06+x
iO2Ze5onh1HD779jW0wpr/A+FdghoRO0YdGmJ7oaPLo6lUmNOGfiTBfhB6fqWWV2
bVNEUHK1lqBgRSztRmTflmGAjjeoCsyd+nqBpIrtArb9qom9DUQlYadBe6lS4uwG
Y/TxsptEb/DIKUSA9puUKp9GKPFpbYSZ2U0fxumQ2GBS9n/P2RiKJ8tYGMb19mqQ
XW/F2S/Fz9KfIPGuDkwhi9rjZdBOHL2SY96sf3q+gi4yHiWBvX0lii6Ag+uTtuvP
ibQ/EGAg8bbTgXbm4iREnMIs8EOnN6w7Dydzp4/Vgy4/Xn+v558GfiMstnODAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUymxEAdemsmjy0oWzVCdKmfLO8a4wHwYDVR0j
BBgwFoAUtBEfwNGDalTP81Ca/6g5M8JFHK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTQ3NThlOGUtNDljOC00OGI4LWJkY2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBE
MTgzNkE1NENGRjM1MDlBRkZBODM5MzNDMjQ1MUNBRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNDExMUZDMEQxODM2QTU0Q0ZGMzUwOUFGRkE4MzkzM0MyNDUx
Q0FGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0NzU4ZThlLTQ5YzgtNDhiOC1i
ZGNiLTM1MzM5ZTJhZTYwMS8wLzMxMzAzMzJlMzEzODM4MmUzMTMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvHcwDQYJ
KoZIhvcNAQELBQADggEBAAYMsQWNaSmPI4/znZ0t6sehIyJ4ED9wsHZ1boHZzti5
54j4uohjtOCsNysGuW7BTXV4aNlNwETrLZmWCpaluo/B2VafxEbNAZzk5tQ3jWwj
aytwJRFcliJ2rlr7/Wn5LJHmjp5cW092uMjI8ulSwhkNgDi52zJ+yNMdvZkQUuxO
f300J39ZCtJTEsbqq7jhpN7/biHmlmAmdYcnKGCuJ3lws4CqqLPgafSmA5muJF70
+gHioO3ZQ186G1cgQtCR0ZJJsTyBFKV+JXD1CLujlagqwHG47fIxVc0NBDaeCj/W
K8I2BN2IsUMNzhBTNgbhD18nAqzHe+kBnLZSOYQhVRs=
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:37 2026 by rpki-client