Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa
File:                     3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (raw, json)
Hash identifier:          J67UWBhwkB4SyeMxqFOonlk/hP7ZCxo/ttgUlmNhJvU=
Subject key identifier:   E8:34:37:94:16:28:CF:E2:A3:12:DE:9C:99:C4:C2:B1:CB:B3:B6:B6
Certificate issuer:       /CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7
Certificate serial:       50E8F932C83DA266FE34490F36DFAC0E9770DAE0
Authority key identifier: 8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa
Signing time:             Sun 03 May 2026 02:20:15 +0000
ROA not before:           Sun 03 May 2026 02:15:15 +0000
ROA not after:            Sun 02 May 2027 02:20:15 +0000
asID:                     131785
IP address blocks:        103.226.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl
                          rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e8:f9:32:c8:3d:a2:66:fe:34:49:0f:36:df:ac:0e:97:70:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7
        Validity
            Not Before: May  3 02:15:15 2026 GMT
            Not After : May  2 02:20:15 2027 GMT
        Subject: CN=E83437941628CFE2A312DE9C99C4C2B1CBB3B6B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:f0:8a:4e:09:4d:a9:b6:6a:1b:0c:62:6b:
                    4d:82:16:cd:21:d8:77:f3:9c:64:0c:3e:5a:6c:ec:
                    98:8a:bd:42:93:49:de:e8:01:e3:3c:f9:47:94:6b:
                    52:95:a0:80:9e:5c:51:9f:6d:0b:d6:38:1c:49:a4:
                    3e:37:25:08:43:60:7b:dc:c2:48:77:c4:f2:f6:db:
                    47:e6:0a:1f:a5:4c:5c:07:73:cc:1a:9d:03:47:cc:
                    9f:17:fe:d1:6c:24:41:57:5e:ee:42:ff:27:ba:ab:
                    b4:f2:aa:35:80:a8:25:b0:47:39:50:1e:76:ec:f7:
                    d2:dc:e0:1d:84:8e:60:55:81:b0:6f:36:1f:cd:ff:
                    32:de:1c:d8:46:22:4c:84:da:45:58:a2:fa:bb:77:
                    7f:2d:66:8b:83:45:b1:c4:25:14:48:69:e8:58:2e:
                    66:ce:4d:bf:e0:c1:d7:5d:92:e9:7c:08:f3:81:ef:
                    ab:98:77:19:6d:d7:c6:98:a2:84:fb:19:cb:ba:fe:
                    1f:1f:7b:32:bb:9c:4f:78:a3:30:2a:9a:bb:3a:79:
                    7c:43:27:47:d6:62:00:79:52:64:d3:bb:64:96:53:
                    40:c7:05:49:f1:6d:d4:6a:74:64:81:8b:9a:fc:55:
                    42:cd:c5:46:8c:3a:61:9b:a5:5a:b7:d5:b0:9c:cf:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:34:37:94:16:28:CF:E2:A3:12:DE:9C:99:C4:C2:B1:CB:B3:B6:B6
            X509v3 Authority Key Identifier:
                keyid:8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a5:2d:d2:d5:b2:e9:9a:4e:63:a0:b2:b4:0c:cd:c2:7a:ab:
         b0:14:4d:f3:43:ea:b0:b6:1e:d1:db:89:41:9f:cc:79:dd:bc:
         51:cc:f7:ce:84:af:91:d4:99:ed:a5:0e:32:78:40:00:3f:a4:
         2a:56:93:81:61:26:0e:c7:f5:27:ca:1a:ff:ac:c3:f0:4e:83:
         7a:54:76:4d:5f:69:60:b7:c1:76:e9:e8:fc:18:5b:37:6f:dd:
         86:6a:ff:00:bb:a1:01:7c:90:57:de:73:4a:6c:cf:13:96:2f:
         de:ec:1f:32:33:15:f8:44:5b:f2:d4:ae:49:99:db:c2:70:0f:
         df:14:e0:2e:ad:89:51:27:93:f0:a5:cc:05:1a:7e:73:cc:e7:
         d3:c8:ef:95:20:20:f2:3f:4e:1d:c5:5c:52:ab:4a:bc:0c:b3:
         60:b6:0f:10:b0:77:a1:a3:17:37:e5:bf:47:3b:3d:d1:7c:71:
         19:53:94:46:0f:f8:2a:1d:63:57:b0:3f:51:12:39:01:af:e6:
         83:86:72:03:38:78:c4:7e:94:c1:ff:0c:81:d1:42:68:cc:c5:
         d7:69:ec:8b:8a:b3:8b:29:ce:83:57:aa:c7:ac:c5:21:fd:aa:
         05:e8:13:4c:2c:d2:e9:39:aa:79:03:3e:50:d3:56:58:f4:08:
         64:9b:32:68
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUOj5Msg9omb+NEkPNt+sDpdw2uAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENBOEE2NjhBMjQwREY3QjE1RkJDM0U0NTE2QTg0MDhC
QkRDNDdFNzAeFw0yNjA1MDMwMjE1MTVaFw0yNzA1MDIwMjIwMTVaMDMxMTAvBgNV
BAMTKEU4MzQzNzk0MTYyOENGRTJBMzEyREU5Qzk5QzRDMkIxQ0JCM0I2QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbvCKTglNqbZqGwxia02CFs0h
2HfznGQMPlps7JiKvUKTSd7oAeM8+UeUa1KVoICeXFGfbQvWOBxJpD43JQhDYHvc
wkh3xPL220fmCh+lTFwHc8wanQNHzJ8X/tFsJEFXXu5C/ye6q7TyqjWAqCWwRzlQ
Hnbs99Lc4B2EjmBVgbBvNh/N/zLeHNhGIkyE2kVYovq7d38tZouDRbHEJRRIaehY
LmbOTb/gwdddkul8CPOB76uYdxlt18aYooT7Gcu6/h8fezK7nE94ozAqmrs6eXxD
J0fWYgB5UmTTu2SWU0DHBUnxbdRqdGSBi5r8VULNxUaMOmGbpVq31bCcz9m9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6DQ3lBYoz+KjEt6cmcTCscuztrYwHwYDVR0j
BBgwFoAUjKimaKJA33sV+8PkUWqECLvcR+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjQyMDc1MjMtZDVmNS00YWNjLWIwYWMtYmZiMDk1NGZhNGUwLzAvOENBOEE2NjhB
MjQwREY3QjE1RkJDM0U0NTE2QTg0MDhCQkRDNDdFNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84Q0E4QTY2OEEyNDBERjdCMTVGQkMzRTQ1MTZBODQwOEJCREM0
N0U3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI0MjA3NTIzLWQ1ZjUtNGFjYy1i
MGFjLWJmYjA5NTRmYTRlMC8wLzMxMzAzMzJlMzIzMjM2MmUzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+I3MA0GCSqG
SIb3DQEBCwUAA4IBAQBfpS3S1bLpmk5joLK0DM3CequwFE3zQ+qwth7R24lBn8x5
3bxRzPfOhK+R1JntpQ4yeEAAP6QqVpOBYSYOx/Unyhr/rMPwToN6VHZNX2lgt8F2
6ej8GFs3b92Gav8Au6EBfJBX3nNKbM8Tli/e7B8yMxX4RFvy1K5JmdvCcA/fFOAu
rYlRJ5PwpcwFGn5zzOfTyO+VICDyP04dxVxSq0q8DLNgtg8QsHehoxc35b9HOz3R
fHEZU5RGD/gqHWNXsD9REjkBr+aDhnIDOHjEfpTB/wyB0UJozMXXaeyLirOLKc6D
V6rHrMUh/aoF6BNMLNLpOap5Az5Q01ZY9AhkmzJo
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:36 2026 by rpki-client