Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa
File:                     3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (raw, json)
Hash identifier:          3NdyDC+1ZO5sttCVKzm0UcFCITwWVerR5FdVYXY26PA=
Subject key identifier:   53:42:55:0B:E7:F3:FE:4D:DB:D9:EB:84:DB:CF:02:89:4A:53:08:2C
Certificate issuer:       /CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
Certificate serial:       3EB20E541E160BE8C750C6A252C1B95FB648D3A8
Authority key identifier: FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa
Signing time:             Sun 03 May 2026 02:20:38 +0000
ROA not before:           Sun 03 May 2026 02:15:38 +0000
ROA not after:            Sun 02 May 2027 02:20:38 +0000
asID:                     149966
IP address blocks:        103.191.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl
                          rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b2:0e:54:1e:16:0b:e8:c7:50:c6:a2:52:c1:b9:5f:b6:48:d3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
        Validity
            Not Before: May  3 02:15:38 2026 GMT
            Not After : May  2 02:20:38 2027 GMT
        Subject: CN=5342550BE7F3FE4DDBD9EB84DBCF02894A53082C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:9c:8b:e0:47:f1:ed:f3:23:dd:e1:37:e6:
                    a1:6c:bb:c6:62:9f:62:69:aa:04:77:89:d8:f4:1c:
                    5f:d8:fb:e4:f4:bd:dd:aa:58:83:a0:de:d3:c2:51:
                    57:25:e9:b7:86:47:02:05:7d:ae:df:f4:45:0c:be:
                    ea:e7:28:1b:af:a5:46:6e:fd:5c:65:53:07:d5:ab:
                    0a:d6:24:3f:44:7c:cf:93:54:b2:b2:92:33:ce:4f:
                    98:e7:07:d6:8c:bb:1d:27:8a:36:3f:6b:4c:c2:cb:
                    bf:a4:65:63:d2:bc:68:cd:fa:b2:50:7c:04:c2:11:
                    d2:66:3b:5d:87:19:4d:17:2d:41:c8:5c:4d:01:c8:
                    ec:08:90:1b:5d:2d:7a:a9:d3:95:66:46:42:a7:c6:
                    fc:aa:d2:e8:69:85:20:0c:8c:18:a3:fd:9d:73:7f:
                    d9:f7:d0:66:36:d6:75:1d:5b:72:1c:3e:f3:7c:a6:
                    10:f8:ac:f4:af:03:52:e6:ad:da:90:60:81:79:02:
                    1b:36:3b:b0:61:7c:e1:03:09:52:0f:a8:2a:af:8d:
                    9f:27:95:21:c3:d6:c7:3e:ce:fd:72:52:43:a4:9f:
                    aa:49:4b:b0:ca:83:d0:82:47:11:d2:c7:05:4d:d5:
                    f8:4c:b3:ad:92:9a:ec:e3:df:5f:1d:77:c3:5b:bf:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:42:55:0B:E7:F3:FE:4D:DB:D9:EB:84:DB:CF:02:89:4A:53:08:2C
            X509v3 Authority Key Identifier:
                keyid:FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:0b:60:63:f3:e8:98:89:12:25:2a:72:2a:64:d7:86:3b:
         42:42:9d:b7:60:c2:58:8c:91:b3:8c:c9:11:48:ad:06:03:e4:
         0c:fd:c8:9f:fa:ec:1e:a5:78:f9:f3:b9:f6:50:52:54:11:cc:
         31:5a:c9:f7:5c:ef:fb:0d:fd:55:60:22:db:90:f6:3d:84:92:
         31:2e:0b:d9:0d:95:16:42:65:c0:3d:4d:5b:81:47:bf:54:11:
         aa:6b:6b:7d:5b:8f:6e:8d:89:d1:28:3d:99:cc:8a:4b:62:80:
         05:f7:95:b7:66:27:a4:95:cb:40:96:42:68:48:93:45:c4:5c:
         14:d8:80:08:d7:ba:25:87:0c:88:31:7c:25:a5:db:06:1f:8b:
         99:05:37:77:36:e3:ed:61:ee:0f:91:51:83:d2:d1:3a:8f:2c:
         5c:81:16:6d:55:74:ae:75:a4:1a:83:96:bc:63:09:67:8c:40:
         55:06:0c:7d:1d:4e:c1:85:c4:df:99:5f:42:ef:7a:ba:52:24:
         7d:c0:52:e2:00:b2:40:89:e8:a6:ec:cf:da:f4:3d:bd:f4:71:
         06:03:f3:63:ea:d2:6e:87:e9:07:e6:a0:b0:08:f9:6d:f7:6b:
         df:02:ea:19:08:44:96:ea:61:34:10:16:78:2d:98:a9:c9:64:
         94:69:43:a6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUPrIOVB4WC+jHUMaiUsG5X7ZI06gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJFMUQ5NjJDREY1MEFFNEM4OERFRDA5N0M0RkQ1QzQw
RUQxREFBRTAeFw0yNjA1MDMwMjE1MzhaFw0yNzA1MDIwMjIwMzhaMDMxMTAvBgNV
BAMTKDUzNDI1NTBCRTdGM0ZFNEREQkQ5RUI4NERCQ0YwMjg5NEE1MzA4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV6JyL4Efx7fMj3eE35qFsu8Zi
n2JpqgR3idj0HF/Y++T0vd2qWIOg3tPCUVcl6beGRwIFfa7f9EUMvurnKBuvpUZu
/VxlUwfVqwrWJD9EfM+TVLKykjPOT5jnB9aMux0nijY/a0zCy7+kZWPSvGjN+rJQ
fATCEdJmO12HGU0XLUHIXE0ByOwIkBtdLXqp05VmRkKnxvyq0uhphSAMjBij/Z1z
f9n30GY21nUdW3IcPvN8phD4rPSvA1LmrdqQYIF5Ahs2O7BhfOEDCVIPqCqvjZ8n
lSHD1sc+zv1yUkOkn6pJS7DKg9CCRxHSxwVN1fhMs62Smuzj318dd8Nbvwy3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUU0JVC+fz/k3b2euE288CiUpTCCwwHwYDVR0j
BBgwFoAU++HZYs31CuTIje0JfE/VxA7R2q4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjZhNmNhMTItYjI4Ny00YWM3LTg3YjgtNmNkNzMzNTNlNjdmLzAvRkJFMUQ5NjJD
REY1MEFFNEM4OERFRDA5N0M0RkQ1QzQwRUQxREFBRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQkUxRDk2MkNERjUwQUU0Qzg4REVEMDk3QzRGRDVDNDBFRDFE
QUFFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI2YTZjYTEyLWIyODctNGFjNy04
N2I4LTZjZDczMzUzZTY3Zi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv5gwDQYJ
KoZIhvcNAQELBQADggEBAA+vC2Bj8+iYiRIlKnIqZNeGO0JCnbdgwliMkbOMyRFI
rQYD5Az9yJ/67B6lePnzufZQUlQRzDFayfdc7/sN/VVgItuQ9j2EkjEuC9kNlRZC
ZcA9TVuBR79UEapra31bj26NidEoPZnMiktigAX3lbdmJ6SVy0CWQmhIk0XEXBTY
gAjXuiWHDIgxfCWl2wYfi5kFN3c24+1h7g+RUYPS0TqPLFyBFm1VdK51pBqDlrxj
CWeMQFUGDH0dTsGFxN+ZX0LverpSJH3AUuIAskCJ6Kbsz9r0Pb30cQYD82Pq0m6H
6QfmoLAI+W33a98C6hkIRJbqYTQQFngtmKnJZJRpQ6Y=
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:50 2026 by rpki-client