Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e382e3233382e302f32342d3234203d3e20313332363334.roa
File:                     3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier:          PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=
Subject key identifier:   92:40:4C:41:90:3E:65:7C:C9:20:19:1D:12:73:83:A0:16:0F:C9:DE
Certificate issuer:       /CN=412965964A4E12BD59BDF602A054F3394E99DC57
Certificate serial:       4CB5A9F23C72119A371D6B0C56C4B68C54E22310
Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e382e3233382e302f32342d3234203d3e20313332363334.roa
Signing time:             Sun 03 May 2026 02:19:22 +0000
ROA not before:           Sun 03 May 2026 02:14:22 +0000
ROA not after:            Sun 02 May 2027 02:19:22 +0000
asID:                     132634
IP address blocks:        103.8.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
                          rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b5:a9:f2:3c:72:11:9a:37:1d:6b:0c:56:c4:b6:8c:54:e2:23:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57
        Validity
            Not Before: May  3 02:14:22 2026 GMT
            Not After : May  2 02:19:22 2027 GMT
        Subject: CN=92404C41903E657CC920191D127383A0160FC9DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:19:ff:55:db:da:7a:72:9c:34:45:ba:3e:
                    0b:49:45:26:dd:2e:4c:1b:0e:52:40:f4:dd:9d:1a:
                    e8:79:44:ad:83:28:e5:8f:d2:a9:18:ec:df:f2:18:
                    b6:eb:b8:b1:03:37:38:36:9b:7c:9a:e6:40:68:8c:
                    a8:0f:a6:0f:5a:61:f7:4c:7d:58:df:a0:36:99:c2:
                    f2:fd:a4:6b:a5:f6:88:27:a0:7a:02:83:90:fc:25:
                    49:8f:d3:79:f0:6b:1e:b3:25:2a:97:22:ee:09:54:
                    42:7c:99:d5:5e:31:0c:f2:b9:3e:01:ad:81:2b:e2:
                    b4:b7:4a:55:cf:8a:63:2c:71:f3:0f:3d:89:17:92:
                    0c:f7:18:dd:9a:a5:67:37:d6:f2:b9:a5:94:3e:59:
                    94:71:e2:ff:61:3f:e6:0e:c9:0f:4f:99:23:47:66:
                    78:10:8b:7d:b8:24:0a:f1:f7:61:82:3c:ff:03:70:
                    c7:e2:df:0f:55:00:5c:cb:7d:8a:23:5a:63:40:70:
                    3b:59:1f:7b:2d:9f:40:58:2d:75:32:57:4c:cf:5c:
                    84:f5:47:a1:aa:f2:95:91:a4:93:77:36:67:26:9e:
                    fc:c5:0a:17:fc:3f:4c:09:ef:50:27:ea:9e:67:83:
                    12:14:1e:63:ab:5c:23:3b:5c:de:75:70:a8:62:f4:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:40:4C:41:90:3E:65:7C:C9:20:19:1D:12:73:83:A0:16:0F:C9:DE
            X509v3 Authority Key Identifier:
                keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e382e3233382e302f32342d3234203d3e20313332363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:19:04:b6:bb:2d:ea:fb:38:a0:39:a7:34:54:fb:83:06:00:
         54:b3:9a:a3:4f:6d:8f:38:3d:d9:37:23:79:d3:6f:d9:af:f1:
         bb:3a:80:15:48:35:64:4f:4f:25:f1:06:cb:b3:ee:7c:d6:73:
         53:e7:70:11:eb:3a:29:d8:6d:4d:b7:08:eb:37:48:74:a8:c9:
         93:84:3c:03:6d:3a:a2:14:a7:55:4e:9c:62:f2:6f:df:c8:3d:
         f4:eb:71:e4:86:5e:29:51:1a:3b:70:95:c7:d9:1c:5a:6f:93:
         0b:6c:1f:96:35:55:26:4d:1e:60:a7:56:e7:3d:f7:22:f2:f3:
         c7:8a:2b:f1:01:65:73:69:77:bd:02:84:7d:03:44:34:40:71:
         5c:98:c0:89:1d:c3:87:f6:e7:88:c8:2f:f1:ba:5e:45:42:46:
         bc:0e:74:6f:13:b6:cb:ad:97:e4:c6:bf:03:a6:6d:9e:e2:4d:
         ad:20:58:76:09:74:ed:b1:34:4d:c1:4b:a4:d7:cb:6e:da:b8:
         d2:d4:04:a3:99:a6:e1:13:6c:78:38:ff:28:b9:e9:c9:6a:dc:
         fa:69:9d:21:9c:58:6d:dd:de:4c:cd:34:18:e6:4f:cc:f0:6c:
         56:d0:2d:64:66:b0:f7:08:06:77:a1:fa:6b:f0:ba:e7:be:cf:
         ec:34:54:28
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTLWp8jxyEZo3HWsMVsS2jFTiIxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0
RTk5REM1NzAeFw0yNjA1MDMwMjE0MjJaFw0yNzA1MDIwMjE5MjJaMDMxMTAvBgNV
BAMTKDkyNDA0QzQxOTAzRTY1N0NDOTIwMTkxRDEyNzM4M0EwMTYwRkM5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8Bn/VdvaenKcNEW6PgtJRSbd
LkwbDlJA9N2dGuh5RK2DKOWP0qkY7N/yGLbruLEDNzg2m3ya5kBojKgPpg9aYfdM
fVjfoDaZwvL9pGul9ognoHoCg5D8JUmP03nwax6zJSqXIu4JVEJ8mdVeMQzyuT4B
rYEr4rS3SlXPimMscfMPPYkXkgz3GN2apWc31vK5pZQ+WZRx4v9hP+YOyQ9PmSNH
ZngQi324JArx92GCPP8DcMfi3w9VAFzLfYojWmNAcDtZH3stn0BYLXUyV0zPXIT1
R6Gq8pWRpJN3NmcmnvzFChf8P0wJ71An6p5ngxIUHmOrXCM7XN51cKhi9JblAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUkkBMQZA+ZXzJIBkdEnODoBYPyd4wHwYDVR0j
BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0
QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE
QzU3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwZjdiZTA2LTk2NzItNDY0MS05
N2JkLTliZmRmOTU1ZGUxNy8wLzMxMzAzMzJlMzgyZTMyMzMzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcI7jANBgkqhkiG
9w0BAQsFAAOCAQEAbhkEtrst6vs4oDmnNFT7gwYAVLOao09tjzg92TcjedNv2a/x
uzqAFUg1ZE9PJfEGy7PufNZzU+dwEes6KdhtTbcI6zdIdKjJk4Q8A206ohSnVU6c
YvJv38g99Otx5IZeKVEaO3CVx9kcWm+TC2wfljVVJk0eYKdW5z33IvLzx4or8QFl
c2l3vQKEfQNENEBxXJjAiR3Dh/bniMgv8bpeRUJGvA50bxO2y62X5Ma/A6ZtnuJN
rSBYdgl07bE0TcFLpNfLbtq40tQEo5mm4RNseDj/KLnpyWrc+mmdIZxYbd3eTM00
GOZPzPBsVtAtZGaw9wgGd6H6a/C6577P7DRUKA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:49:57 2026 by rpki-client