Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa
File:                     3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (raw, json)
Hash identifier:          DA2FUhM7Kcld/ZOZCHHz4OC3AwFVi9D3hLd64lN6BR0=
Subject key identifier:   95:A5:63:84:62:E5:BC:E5:85:75:DE:33:2D:08:85:81:63:DA:03:AA
Certificate issuer:       /CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
Certificate serial:       7E3BC1D26DD0E1A930EA66369A4377AB538545B4
Authority key identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa
Signing time:             Sun 03 May 2026 02:15:01 +0000
ROA not before:           Sun 03 May 2026 02:10:01 +0000
ROA not after:            Sun 02 May 2027 02:15:01 +0000
asID:                     149903
IP address blocks:        103.190.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl
                          rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3b:c1:d2:6d:d0:e1:a9:30:ea:66:36:9a:43:77:ab:53:85:45:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
        Validity
            Not Before: May  3 02:10:01 2026 GMT
            Not After : May  2 02:15:01 2027 GMT
        Subject: CN=95A5638462E5BCE58575DE332D08858163DA03AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:51:67:a6:59:e0:22:be:7b:2b:3f:04:51:
                    56:ff:08:d7:79:1b:45:93:63:07:9b:84:32:b9:1c:
                    49:9b:7b:44:b4:48:6f:25:df:04:26:05:43:e6:e1:
                    53:b9:79:a1:32:9c:fb:26:e7:13:b6:61:66:b8:cc:
                    9d:80:88:3e:46:80:0d:c9:b2:b9:1d:91:d8:c6:dd:
                    30:86:3f:a1:d4:01:12:61:c9:26:e3:f7:2f:0b:51:
                    53:fb:2e:c9:b6:de:51:6c:d7:c1:9f:96:47:57:16:
                    26:36:04:cd:54:9e:d4:56:69:42:0a:7b:ab:ab:b0:
                    76:60:df:31:28:e7:11:f7:ea:c8:57:60:d7:6f:97:
                    bf:8b:f4:2b:d9:e1:76:c6:f4:3f:68:14:38:b2:9f:
                    64:01:5f:7f:b0:02:03:6f:df:77:3a:9e:f1:5d:c1:
                    73:dc:6d:d6:f9:56:73:09:48:82:16:d9:c4:6f:4d:
                    0b:27:f2:56:48:15:6d:39:9d:5a:0d:06:2c:75:b1:
                    55:67:bf:f1:ce:a7:64:bf:69:e2:d2:0e:e0:b4:18:
                    8d:10:c9:2d:e9:6f:0e:a7:fe:41:ab:66:05:77:03:
                    35:d4:4a:b9:7c:ab:4c:bf:cb:2f:65:27:fa:70:33:
                    a4:76:bd:4d:a5:2d:24:e6:90:bd:b3:ab:75:71:91:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A5:63:84:62:E5:BC:E5:85:75:DE:33:2D:08:85:81:63:DA:03:AA
            X509v3 Authority Key Identifier:
                keyid:F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3a:1e:7e:5b:96:7c:13:e7:99:bf:e9:82:7f:ff:54:d3:1f:
         66:00:83:cf:48:5c:ad:24:1a:5f:32:46:a4:2d:4c:40:b1:c3:
         6d:0c:59:d3:e7:48:2f:c8:6e:13:09:f6:ed:5d:5a:46:2f:12:
         7a:37:28:14:b5:52:f3:37:28:54:37:29:f6:8e:bb:2a:1d:88:
         38:9f:7a:cc:17:85:fb:b3:05:22:0c:80:19:29:5b:02:f3:cf:
         7a:03:55:74:2b:36:48:fc:8b:bc:d6:70:93:94:14:20:ec:da:
         65:0f:90:79:25:6c:b8:34:db:44:ab:21:4e:57:76:90:1d:77:
         c3:26:db:ff:21:ef:9a:53:78:12:e4:46:3e:d7:5d:34:86:04:
         20:32:72:4f:a5:af:16:56:f3:b2:15:d9:c1:c9:7a:9a:47:10:
         cc:13:86:ef:6e:2a:41:65:fc:22:fd:7b:32:0c:a1:61:45:66:
         9b:2d:bc:ea:be:ec:50:34:4c:b6:aa:c4:43:63:af:33:e6:3f:
         65:3a:fc:af:2e:18:34:47:59:3d:cc:93:a6:27:61:e2:b0:d6:
         c7:19:33:4e:c6:7c:a4:7b:70:8b:81:d1:56:92:05:cd:e7:28:
         57:6c:66:b6:67:08:11:f0:ec:95:e9:f6:fb:a8:ac:6b:2c:7c:
         cd:80:da:ad
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUfjvB0m3Q4akw6mY2mkN3q1OFRbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg5MzM5MjZBRTgzOURFRDcyOUFGQTJFMEU0RENCRkIw
NzQ5REYxQjAeFw0yNjA1MDMwMjEwMDFaFw0yNzA1MDIwMjE1MDFaMDMxMTAvBgNV
BAMTKDk1QTU2Mzg0NjJFNUJDRTU4NTc1REUzMzJEMDg4NTgxNjNEQTAzQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgVFnplngIr57Kz8EUVb/CNd5
G0WTYwebhDK5HEmbe0S0SG8l3wQmBUPm4VO5eaEynPsm5xO2YWa4zJ2AiD5GgA3J
srkdkdjG3TCGP6HUARJhySbj9y8LUVP7Lsm23lFs18GflkdXFiY2BM1UntRWaUIK
e6ursHZg3zEo5xH36shXYNdvl7+L9CvZ4XbG9D9oFDiyn2QBX3+wAgNv33c6nvFd
wXPcbdb5VnMJSIIW2cRvTQsn8lZIFW05nVoNBix1sVVnv/HOp2S/aeLSDuC0GI0Q
yS3pbw6n/kGrZgV3AzXUSrl8q0y/yy9lJ/pwM6R2vU2lLSTmkL2zq3VxkTL5AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUlaVjhGLlvOWFdd4zLQiFgWPaA6owHwYDVR0j
BBgwFoAU+JM5Jq6Dne1ymvouDk3L+wdJ3xswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTU1MjEwOTktM2JhMS00ZjkxLWI1YmItNzEyYzNiYmE2MzM3LzAvRjg5MzM5MjZB
RTgzOURFRDcyOUFGQTJFMEU0RENCRkIwNzQ5REYxQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GODkzMzkyNkFFODM5REVENzI5QUZBMkUwRTREQ0JGQjA3NDlE
RjFCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE1NTIxMDk5LTNiYTEtNGY5MS1i
NWJiLTcxMmMzYmJhNjMzNy8wLzMxMzAzMzJlMzEzOTMwMmUzMTMwMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvm0wDQYJ
KoZIhvcNAQELBQADggEBAAs6Hn5blnwT55m/6YJ//1TTH2YAg89IXK0kGl8yRqQt
TECxw20MWdPnSC/IbhMJ9u1dWkYvEno3KBS1UvM3KFQ3KfaOuyodiDifeswXhfuz
BSIMgBkpWwLzz3oDVXQrNkj8i7zWcJOUFCDs2mUPkHklbLg020SrIU5XdpAdd8Mm
2/8h75pTeBLkRj7XXTSGBCAyck+lrxZW87IV2cHJeppHEMwThu9uKkFl/CL9ezIM
oWFFZpstvOq+7FA0TLaqxENjrzPmP2U6/K8uGDRHWT3Mk6YnYeKw1scZM07GfKR7
cIuB0VaSBc3nKFdsZrZnCBHw7JXp9vuorGssfM2A2q0=
-----END CERTIFICATE-----
Generated at Wed May 13 13:08:19 2026 by rpki-client