Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa
File:                     3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (raw, json)
Hash identifier:          CzpBmVwagEtnKqxKjT1pUSrqGuU3xrwBdruiL5NCJ14=
Subject key identifier:   85:96:3C:A7:3E:58:98:70:30:D9:60:F8:3C:AD:7A:9C:75:54:46:CD
Certificate issuer:       /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Certificate serial:       6B3CBDA7E38C2396D8AB72B254D2B4FC526E63A9
Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa
Signing time:             Sun 03 May 2026 02:15:42 +0000
ROA not before:           Sun 03 May 2026 02:10:42 +0000
ROA not after:            Sun 02 May 2027 02:15:42 +0000
asID:                     149344
IP address blocks:        103.176.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
                          rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3c:bd:a7:e3:8c:23:96:d8:ab:72:b2:54:d2:b4:fc:52:6e:63:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
        Validity
            Not Before: May  3 02:10:42 2026 GMT
            Not After : May  2 02:15:42 2027 GMT
        Subject: CN=85963CA73E58987030D960F83CAD7A9C755446CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:57:1a:a4:df:38:cb:54:46:b4:d5:e3:d5:
                    a9:ee:1a:fc:75:58:de:6b:c8:3c:f0:69:b4:0e:7e:
                    b8:b9:1f:0e:c7:d7:38:69:57:6d:57:d9:ae:05:41:
                    0a:da:00:61:1b:f4:5a:83:5e:b1:4f:59:e7:e7:42:
                    a6:88:3d:6c:70:68:90:72:5f:ed:9d:35:26:6f:0c:
                    d1:a2:a5:5b:1d:79:2c:3c:0e:2a:80:ff:f4:10:c7:
                    39:77:e9:18:53:70:cc:4b:51:6b:48:7b:be:c9:5c:
                    aa:41:92:a9:bd:ea:f0:de:fa:4e:e2:93:81:52:8d:
                    7e:fb:1f:19:c1:7f:78:a5:c9:3d:89:97:71:60:b1:
                    22:d2:a7:66:3e:b2:86:3c:33:ea:cc:62:2b:17:c1:
                    dc:7e:c0:6e:47:73:5b:16:27:4e:a3:6f:c4:e2:6d:
                    a9:0f:3d:ed:12:b7:c3:2a:0c:65:c3:71:d9:3c:f1:
                    68:80:e4:32:00:b5:28:3b:a3:c0:0b:68:45:94:45:
                    b7:77:f7:cc:f1:05:4e:95:d3:a8:c0:54:2a:7f:5a:
                    16:1f:7d:bb:be:de:b1:1e:1a:4f:d3:8e:ba:d4:ce:
                    3e:fd:ed:32:3d:6a:e9:cc:17:77:3d:37:37:ee:bc:
                    8e:0b:ef:1b:1d:07:7a:9e:9e:19:83:97:d4:2c:8e:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:96:3C:A7:3E:58:98:70:30:D9:60:F8:3C:AD:7A:9C:75:54:46:CD
            X509v3 Authority Key Identifier:
                keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:55:a4:27:aa:55:d1:0a:53:d8:fe:2f:95:4f:64:44:40:49:
         01:e9:87:68:db:4d:4f:4e:9d:91:c1:e0:fd:25:82:21:33:02:
         b0:8c:bd:b7:e8:ac:d5:b4:9d:86:d7:e1:2d:f0:df:fa:df:59:
         d8:8a:12:d1:d3:68:58:8f:79:c2:56:8b:5c:eb:00:68:2c:d1:
         37:e7:67:79:c4:7b:8e:0c:d9:cb:3e:b3:f0:1a:12:72:71:75:
         8a:ad:d3:60:88:61:bd:e2:af:c6:5b:5a:e3:31:2b:16:89:87:
         39:8b:07:bb:20:7c:ab:a5:6f:51:43:af:16:54:e3:de:ee:e8:
         03:3d:f0:f3:52:72:3f:ae:78:3c:49:23:14:62:b0:5d:f9:91:
         11:29:7c:dc:f7:c2:18:cc:56:b8:f6:23:6c:56:4a:50:98:a5:
         09:67:f6:e8:3a:f6:ab:56:2d:4d:52:ba:f6:d1:3d:80:49:7b:
         b2:a2:37:6b:72:c0:f3:68:86:c7:c8:e6:be:4d:db:3e:b5:71:
         4c:18:af:d8:36:37:bc:77:50:53:a7:cb:a8:82:33:d0:79:41:
         b0:c4:1b:4d:01:f7:06:e5:48:04:a4:bf:e1:b0:78:97:62:30:
         af:df:5a:dc:95:bb:68:b1:cb:f0:9d:c6:6f:cf:a3:08:cf:c5:
         ef:b7:d6:69
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUazy9p+OMI5bYq3KyVNK0/FJuY6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA1NTNFOUZCRDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFC
MkE2QTMzNDAeFw0yNjA1MDMwMjEwNDJaFw0yNzA1MDIwMjE1NDJaMDMxMTAvBgNV
BAMTKDg1OTYzQ0E3M0U1ODk4NzAzMEQ5NjBGODNDQUQ3QTlDNzU1NDQ2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpq1capN84y1RGtNXj1anuGvx1
WN5ryDzwabQOfri5Hw7H1zhpV21X2a4FQQraAGEb9FqDXrFPWefnQqaIPWxwaJBy
X+2dNSZvDNGipVsdeSw8DiqA//QQxzl36RhTcMxLUWtIe77JXKpBkqm96vDe+k7i
k4FSjX77HxnBf3ilyT2Jl3FgsSLSp2Y+soY8M+rMYisXwdx+wG5Hc1sWJ06jb8Ti
bakPPe0St8MqDGXDcdk88WiA5DIAtSg7o8ALaEWURbd398zxBU6V06jAVCp/WhYf
fbu+3rEeGk/TjrrUzj797TI9aunMF3c9NzfuvI4L7xsdB3qenhmDl9QsjjdDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUhZY8pz5YmHAw2WD4PK16nHVURs0wHwYDVR0j
BBgwFoAUEFU+n71i0BL8AapgND8UMbKmozQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTcyMTY0MjUtNmFhMy00NDI5LWIxNzUtODY5MDFiYjBjYjFmLzAvMTA1NTNFOUZC
RDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFCMkE2QTMzNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDU1M0U5RkJENjJEMDEyRkMwMUFBNjAzNDNGMTQzMUIyQTZB
MzM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3MjE2NDI1LTZhYTMtNDQyOS1i
MTc1LTg2OTAxYmIwY2IxZi8wLzMxMzAzMzJlMzEzNzM2MmUzOTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7BiMA0GCSqG
SIb3DQEBCwUAA4IBAQB4VaQnqlXRClPY/i+VT2REQEkB6Ydo201PTp2RweD9JYIh
MwKwjL236KzVtJ2G1+Et8N/631nYihLR02hYj3nCVotc6wBoLNE352d5xHuODNnL
PrPwGhJycXWKrdNgiGG94q/GW1rjMSsWiYc5iwe7IHyrpW9RQ68WVOPe7ugDPfDz
UnI/rng8SSMUYrBd+ZERKXzc98IYzFa49iNsVkpQmKUJZ/boOvarVi1NUrr20T2A
SXuyojdrcsDzaIbHyOa+Tds+tXFMGK/YNje8d1BTp8uogjPQeUGwxBtNAfcG5UgE
pL/hsHiXYjCv31rclbtoscvwncZvz6MIz8Xvt9Zp
-----END CERTIFICATE-----
Generated at Wed May 13 14:47:24 2026 by rpki-client