Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313530323730.roa
File:                     3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (raw, json)
Hash identifier:          zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=
Subject key identifier:   96:53:BE:8E:45:F0:DD:FD:90:7D:86:89:DF:56:47:31:05:FF:AD:5E
Certificate issuer:       /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4
Certificate serial:       719D1F958EAB048CE2F23CB6D52D3A93C98F87E9
Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313530323730.roa
Signing time:             Sun 03 May 2026 02:19:44 +0000
ROA not before:           Sun 03 May 2026 02:14:44 +0000
ROA not after:            Sun 02 May 2027 02:19:44 +0000
asID:                     150270
IP address blocks:        103.39.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl
                          rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9d:1f:95:8e:ab:04:8c:e2:f2:3c:b6:d5:2d:3a:93:c9:8f:87:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4
        Validity
            Not Before: May  3 02:14:44 2026 GMT
            Not After : May  2 02:19:44 2027 GMT
        Subject: CN=9653BE8E45F0DDFD907D8689DF56473105FFAD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:e0:fa:c2:5a:cd:02:b0:de:8c:5d:25:7d:
                    01:62:21:90:4f:c2:ca:9d:4e:d6:d0:3d:1c:2f:4d:
                    b5:2b:79:01:85:01:59:82:85:66:54:81:76:cf:ab:
                    7a:f0:07:61:87:f6:88:43:69:26:1f:00:58:30:10:
                    70:94:79:11:0d:c9:27:84:ef:fd:b0:85:74:cd:b5:
                    73:26:d2:aa:57:70:c6:42:d4:52:20:b5:13:27:f4:
                    72:bd:fd:5c:16:45:3f:17:e0:5e:c5:74:8d:89:fe:
                    8e:d2:af:5a:93:c1:e6:0d:e3:44:89:58:55:c1:04:
                    e9:21:9f:db:bd:8c:b0:ed:0d:20:e9:2b:35:9f:4e:
                    85:f7:ae:ff:77:85:04:a8:d0:56:9e:fd:cf:5d:db:
                    6a:7a:40:5c:8c:1e:7c:7a:e4:60:22:8f:4f:e2:a7:
                    a0:45:c7:36:c8:a1:fe:e2:fa:bf:8f:bd:fb:96:f2:
                    84:48:40:48:a3:d4:2f:8a:2d:36:1f:aa:12:fc:ef:
                    3c:a4:d4:a8:e9:ea:d6:b0:17:fc:22:fc:61:5e:86:
                    88:f9:3e:ba:96:8e:2c:90:20:f5:7a:1d:f5:83:ca:
                    56:11:9e:95:26:cf:99:b1:67:08:56:c7:88:eb:6f:
                    8f:0e:32:d8:92:aa:cf:1d:6a:71:24:95:99:2c:80:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:53:BE:8E:45:F0:DD:FD:90:7D:86:89:DF:56:47:31:05:FF:AD:5E
            X509v3 Authority Key Identifier:
                keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/3130332e33392e36382e302f32342d3234203d3e20313530323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:63:a8:db:7a:0b:af:85:37:ed:12:cf:95:d4:7b:79:f1:cf:
         9e:4c:cc:44:19:5a:66:75:eb:84:18:43:15:95:db:80:1e:a6:
         69:5c:fa:3a:ed:34:3d:63:c7:db:ec:5e:ed:16:bf:be:86:a0:
         8e:0e:39:fc:39:f3:92:1c:89:33:01:04:6a:33:2e:3c:6e:46:
         97:dd:f1:cc:b2:29:92:0d:61:55:db:6a:70:5c:46:11:5a:4b:
         a5:75:6b:42:ac:4e:ea:38:67:cd:2c:77:9b:19:df:fc:df:da:
         0a:62:b9:2e:18:42:82:0a:4f:83:89:46:1d:b0:25:e4:4f:e4:
         2f:f6:6e:b5:b0:65:67:ce:ee:e1:48:c5:ff:29:65:b9:c1:8d:
         fe:67:e8:d2:44:08:10:41:80:8f:42:97:86:84:32:f8:45:ea:
         cd:7f:a0:d7:a9:79:72:90:5e:d6:d3:03:08:16:c4:cf:71:e7:
         4f:ee:c2:43:58:29:e9:e1:21:eb:ec:ac:9e:31:ca:2d:cd:39:
         da:a4:37:ee:c0:bf:e1:72:6f:9e:c4:5e:4a:23:e7:44:65:c3:
         18:85:3f:2a:3b:74:d3:2c:f8:78:ad:bb:b9:55:40:d8:59:17:
         a3:93:ae:e3:12:36:f3:1f:03:27:38:a5:a2:3c:3c:9d:a5:24:
         82:45:b2:9b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUcZ0flY6rBIzi8jy21S06k8mPh+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE
MDYxRDlBNDAeFw0yNjA1MDMwMjE0NDRaFw0yNzA1MDIwMjE5NDRaMDMxMTAvBgNV
BAMTKDk2NTNCRThFNDVGMERERkQ5MDdEODY4OURGNTY0NzMxMDVGRkFENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8+D6wlrNArDejF0lfQFiIZBP
wsqdTtbQPRwvTbUreQGFAVmChWZUgXbPq3rwB2GH9ohDaSYfAFgwEHCUeRENySeE
7/2whXTNtXMm0qpXcMZC1FIgtRMn9HK9/VwWRT8X4F7FdI2J/o7Sr1qTweYN40SJ
WFXBBOkhn9u9jLDtDSDpKzWfToX3rv93hQSo0Fae/c9d22p6QFyMHnx65GAij0/i
p6BFxzbIof7i+r+PvfuW8oRIQEij1C+KLTYfqhL87zyk1Kjp6tawF/wi/GFehoj5
PrqWjiyQIPV6HfWDylYRnpUmz5mxZwhWx4jrb48OMtiSqs8danEklZksgFd5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUllO+jkXw3f2QfYaJ31ZHMQX/rV4wHwYDVR0j
BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz
MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE
OUE0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIyMjZiZTdiLTJlMjgtNDk1MC1h
YTRjLTIxODVlNjQ3ZGIzZi8wLzMxMzAzMzJlMzMzOTJlMzYzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcnRDANBgkqhkiG
9w0BAQsFAAOCAQEAbmOo23oLr4U37RLPldR7efHPnkzMRBlaZnXrhBhDFZXbgB6m
aVz6Ou00PWPH2+xe7Ra/voagjg45/DnzkhyJMwEEajMuPG5Gl93xzLIpkg1hVdtq
cFxGEVpLpXVrQqxO6jhnzSx3mxnf/N/aCmK5LhhCggpPg4lGHbAl5E/kL/ZutbBl
Z87u4UjF/yllucGN/mfo0kQIEEGAj0KXhoQy+EXqzX+g16l5cpBe1tMDCBbEz3Hn
T+7CQ1gp6eEh6+ysnjHKLc052qQ37sC/4XJvnsReSiPnRGXDGIU/Kjt00yz4eK27
uVVA2FkXo5Ou4xI28x8DJzilojw8naUkgkWymw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:04 2026 by rpki-client