Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/3130332e342e3234302e302f32342d3234203d3e20313439363834.roa
File:                     3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (raw, json)
Hash identifier:          BZY0+bJnzvWTGl0me+IsT0sdxq8LsPOVFzv3Xd1pRAM=
Subject key identifier:   32:EA:3E:98:C0:64:A2:DC:E2:51:EE:98:A1:06:CF:19:ED:E8:9F:E6
Certificate issuer:       /CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA
Certificate serial:       558484F10F083C1674B21D833F334BF4569FC636
Authority key identifier: F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/3130332e342e3234302e302f32342d3234203d3e20313439363834.roa
Signing time:             Sun 03 May 2026 02:16:03 +0000
ROA not before:           Sun 03 May 2026 02:11:03 +0000
ROA not after:            Sun 02 May 2027 02:16:03 +0000
asID:                     149684
IP address blocks:        103.4.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl
                          rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:84:84:f1:0f:08:3c:16:74:b2:1d:83:3f:33:4b:f4:56:9f:c6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA
        Validity
            Not Before: May  3 02:11:03 2026 GMT
            Not After : May  2 02:16:03 2027 GMT
        Subject: CN=32EA3E98C064A2DCE251EE98A106CF19EDE89FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:e4:94:0a:51:51:e6:bc:d7:20:c8:ee:b4:
                    f5:a5:b1:0c:84:33:bd:97:02:c2:c1:e0:34:38:6a:
                    c8:90:b4:2f:7b:d6:d3:ff:9b:cd:0e:f1:8e:9f:97:
                    2d:61:3b:b5:d5:da:fd:89:c1:a1:3b:9d:ef:d1:4f:
                    80:be:05:e8:f8:78:7c:21:86:fa:56:e1:5d:ce:e1:
                    8e:56:72:50:b1:a5:44:4a:f3:35:2a:fb:2a:aa:86:
                    01:a5:cd:96:e0:e4:8c:97:dc:03:47:f3:83:de:ea:
                    81:d0:5e:75:36:b7:9c:ea:a0:ea:91:94:48:16:24:
                    9d:af:39:14:25:a6:bd:c9:55:ec:52:d2:47:6b:06:
                    e3:f4:1d:fe:4e:1d:9b:f3:da:ff:bc:41:5f:cb:fe:
                    12:79:39:28:60:53:4a:06:a0:32:3a:0c:e6:46:b8:
                    61:2b:91:87:b5:96:5d:8a:3b:a1:bb:31:01:99:e7:
                    3a:20:e9:e9:b6:cf:5b:ef:19:7b:89:4a:1e:60:ad:
                    4f:fb:8d:0a:d2:ff:30:f3:b3:37:6b:5c:90:cd:4c:
                    61:a6:af:99:5a:78:33:a0:f6:73:a1:7e:5a:ee:56:
                    6f:b0:40:48:2b:a1:9d:48:b6:3d:9b:3a:7f:29:a9:
                    34:09:c6:af:ac:59:37:df:e4:12:7e:39:d5:c7:ec:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EA:3E:98:C0:64:A2:DC:E2:51:EE:98:A1:06:CF:19:ED:E8:9F:E6
            X509v3 Authority Key Identifier:
                keyid:F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/3130332e342e3234302e302f32342d3234203d3e20313439363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:72:74:26:d0:4b:f4:85:67:5d:a6:ef:06:e5:fe:ca:86:16:
         85:98:ea:58:b3:16:4b:e8:67:28:df:65:0a:89:f3:2b:c5:da:
         85:62:d8:17:bd:2f:55:30:6a:ba:d9:3d:2b:03:33:b0:3b:2a:
         b0:30:8e:95:2d:05:dc:26:93:f7:60:c7:b2:02:4c:67:68:fc:
         4c:c2:98:54:57:3d:d4:44:98:b0:76:ce:a2:74:21:1c:e2:6b:
         3c:72:08:cb:c0:a4:f9:a5:86:8e:70:3d:ba:84:d1:00:c3:00:
         41:22:b0:d4:12:f8:74:97:a1:8f:6e:61:70:57:c1:01:0d:a8:
         1b:64:d6:63:c5:ae:2b:81:fb:e0:a6:b2:17:a9:c5:b7:92:ef:
         04:c0:d8:0c:06:9f:9b:f9:d1:1c:3e:27:bd:a1:90:cc:46:e1:
         a6:20:bf:eb:42:63:a2:0a:6f:7a:2c:b3:22:51:10:35:23:93:
         24:2b:46:75:df:d9:00:d0:97:4d:a5:fa:33:f4:e3:b7:98:9a:
         d3:0f:77:9b:ba:c9:4f:4d:f9:8f:c5:2c:9b:fa:86:bc:d7:df:
         12:44:b5:a6:85:ae:6d:84:5a:88:a1:d7:3c:b0:53:64:f1:ed:
         5d:2b:c9:f8:0f:66:d9:ff:49:ba:3c:ca:66:6c:48:c2:b0:76:
         2a:c8:8b:3c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVYSE8Q8IPBZ0sh2DPzNL9FafxjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY0RDA2RkIyOUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZD
QzlEM0JDQTAeFw0yNjA1MDMwMjExMDNaFw0yNzA1MDIwMjE2MDNaMDMxMTAvBgNV
BAMTKDMyRUEzRTk4QzA2NEEyRENFMjUxRUU5OEExMDZDRjE5RURFODlGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNH+SUClFR5rzXIMjutPWlsQyE
M72XAsLB4DQ4asiQtC971tP/m80O8Y6fly1hO7XV2v2JwaE7ne/RT4C+Bej4eHwh
hvpW4V3O4Y5WclCxpURK8zUq+yqqhgGlzZbg5IyX3ANH84Pe6oHQXnU2t5zqoOqR
lEgWJJ2vORQlpr3JVexS0kdrBuP0Hf5OHZvz2v+8QV/L/hJ5OShgU0oGoDI6DOZG
uGErkYe1ll2KO6G7MQGZ5zog6em2z1vvGXuJSh5grU/7jQrS/zDzszdrXJDNTGGm
r5laeDOg9nOhflruVm+wQEgroZ1Itj2bOn8pqTQJxq+sWTff5BJ+OdXH7Lt3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUMuo+mMBkotziUe6YoQbPGe3on+YwHwYDVR0j
BBgwFoAU9k0G+yndfGP9EuDSgx0Az8ydO8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTdlOGRkNDAtYmI5NC00ZDQzLWI4ODktOGEwOThkN2Y0NWFjLzAvRjY0RDA2RkIy
OUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZDQzlEM0JDQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNjREMDZGQjI5REQ3QzYzRkQxMkUwRDI4MzFEMDBDRkNDOUQz
QkNBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3ZThkZDQwLWJiOTQtNGQ0My1i
ODg5LThhMDk4ZDdmNDVhYy8wLzMxMzAzMzJlMzQyZTMyMzQzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzOTM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcE8DANBgkqhkiG
9w0BAQsFAAOCAQEAZ3J0JtBL9IVnXabvBuX+yoYWhZjqWLMWS+hnKN9lConzK8Xa
hWLYF70vVTBqutk9KwMzsDsqsDCOlS0F3CaT92DHsgJMZ2j8TMKYVFc91ESYsHbO
onQhHOJrPHIIy8Ck+aWGjnA9uoTRAMMAQSKw1BL4dJehj25hcFfBAQ2oG2TWY8Wu
K4H74KayF6nFt5LvBMDYDAafm/nRHD4nvaGQzEbhpiC/60JjogpveiyzIlEQNSOT
JCtGdd/ZANCXTaX6M/Tjt5ia0w93m7rJT035j8Usm/qGvNffEkS1poWubYRaiKHX
PLBTZPHtXSvJ+A9m2f9JujzKZmxIwrB2KsiLPA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:12 2026 by rpki-client