Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
File:                     3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier:          QzM90YWTXns1ydz40IJ13wxTQ2LuYS2Sj6cuHqSNNQs=
Subject key identifier:   66:AA:72:F4:9C:C3:8F:19:D7:DC:DC:27:40:00:0C:47:F2:99:EC:EC
Certificate issuer:       /CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD
Certificate serial:       5B0236D63D54DA36AE953CD06BC962FC08681FAD
Authority key identifier: 62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
Signing time:             Sun 03 May 2026 02:21:54 +0000
ROA not before:           Sun 03 May 2026 02:16:54 +0000
ROA not after:            Sun 02 May 2027 02:21:54 +0000
asID:                     136842
IP address blocks:        103.100.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl
                          rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:02:36:d6:3d:54:da:36:ae:95:3c:d0:6b:c9:62:fc:08:68:1f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD
        Validity
            Not Before: May  3 02:16:54 2026 GMT
            Not After : May  2 02:21:54 2027 GMT
        Subject: CN=66AA72F49CC38F19D7DCDC2740000C47F299ECEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4a:25:cd:8e:8f:d3:aa:e4:ec:ec:c5:0b:00:
                    5b:da:fd:4b:35:83:1c:f0:7a:00:e4:c2:8d:60:6b:
                    da:60:57:a9:b1:99:2a:b5:42:3a:a3:17:57:3d:e7:
                    94:e9:32:56:cb:7d:de:86:73:9c:20:64:5f:f4:ee:
                    71:78:d1:91:99:0d:af:35:a8:e4:4e:f4:11:cd:8e:
                    59:ac:50:cd:da:98:03:89:80:75:69:ac:ae:fb:63:
                    4d:b6:3b:c7:bd:f7:7e:82:b8:e3:cd:80:e6:a5:22:
                    8b:ff:ed:ff:f2:4f:67:f1:39:c4:15:fb:03:70:62:
                    ff:02:e2:c7:ef:06:62:81:85:ff:49:b9:ec:b5:0a:
                    32:fb:0c:87:f0:b8:ce:05:cf:03:c2:78:ed:24:5d:
                    8f:5f:8c:43:82:89:14:e6:99:6f:cf:d2:05:84:72:
                    60:2f:15:a3:c7:46:49:ce:e5:f7:95:05:26:fd:8a:
                    73:da:a1:f5:b5:7a:c9:26:c0:5b:5e:2b:32:17:4b:
                    da:4b:09:b0:db:6d:09:35:89:e6:23:a8:f8:b8:7a:
                    8c:67:d6:a5:70:3d:e2:49:0a:1f:94:6a:13:9c:26:
                    b1:4c:62:cf:56:08:e4:94:4f:0f:45:c1:9d:f4:1a:
                    dd:61:a2:33:39:4c:ff:9f:7b:77:81:f6:45:34:98:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AA:72:F4:9C:C3:8F:19:D7:DC:DC:27:40:00:0C:47:F2:99:EC:EC
            X509v3 Authority Key Identifier:
                keyid:62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:ef:62:59:a9:b0:39:96:c2:76:0c:12:b4:ae:c1:0e:33:
         f7:e5:5a:34:d6:71:30:b2:58:c4:77:75:82:8f:64:0b:8d:35:
         a6:51:bf:c4:2d:74:a8:a7:27:3f:92:7e:17:72:43:11:14:32:
         44:a1:b7:4c:52:a8:e1:2f:29:e5:fb:db:4d:e3:7d:71:1b:a4:
         b9:aa:85:7b:91:0d:9d:0c:a7:6b:81:9b:02:da:fa:48:15:68:
         84:b8:3c:57:c4:02:ad:5f:87:88:ea:f3:8d:15:00:e8:a7:32:
         21:48:70:9b:44:d4:e3:4f:eb:41:87:ac:99:c2:23:e6:52:b1:
         99:ad:a3:f8:72:49:87:16:3d:f9:97:59:9b:2a:6a:b3:5b:28:
         35:e8:75:fb:1c:12:c6:5f:88:c9:bf:f6:8d:13:bf:4a:6f:6a:
         76:4e:36:16:30:51:41:3f:6c:c1:81:68:91:1b:0e:a5:39:a1:
         19:13:45:9a:72:e1:c0:8e:8f:8e:41:08:7e:a3:ff:65:fa:d9:
         20:be:dd:c5:b5:72:80:db:98:5a:7d:50:19:c6:f9:3e:2a:2a:
         a1:e2:29:b6:06:ba:a4:1a:c9:32:1f:3f:64:0d:9c:0d:92:54:
         00:7a:cc:02:2b:c1:38:bf:57:21:2d:38:d2:56:9b:84:be:7e:
         6a:2a:a4:f5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWwI21j1U2jaulTzQa8li/AhoH60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1
N0MxQ0FCRDAeFw0yNjA1MDMwMjE2NTRaFw0yNzA1MDIwMjIxNTRaMDMxMTAvBgNV
BAMTKDY2QUE3MkY0OUNDMzhGMTlEN0RDREMyNzQwMDAwQzQ3RjI5OUVDRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSiXNjo/TquTs7MULAFva/Us1
gxzwegDkwo1ga9pgV6mxmSq1QjqjF1c955TpMlbLfd6Gc5wgZF/07nF40ZGZDa81
qORO9BHNjlmsUM3amAOJgHVprK77Y022O8e9936CuOPNgOalIov/7f/yT2fxOcQV
+wNwYv8C4sfvBmKBhf9Juey1CjL7DIfwuM4FzwPCeO0kXY9fjEOCiRTmmW/P0gWE
cmAvFaPHRknO5feVBSb9inPaofW1eskmwFteKzIXS9pLCbDbbQk1ieYjqPi4eoxn
1qVwPeJJCh+UahOcJrFMYs9WCOSUTw9FwZ30Gt1hojM5TP+fe3eB9kU0mFvNAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUZqpy9JzDjxnX3NwnQAAMR/KZ7OwwHwYDVR0j
BBgwFoAUYp50pgtSrJ/C96ERpoN2u1fByr0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmE5N2JjZjQtZTFhYS00N2Q2LWJkZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYw
QjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1N0MxQ0FCRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MjlFNzRBNjBCNTJBQzlGQzJGN0ExMTFBNjgzNzZCQjU3QzFD
QUJELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJhOTdiY2Y0LWUxYWEtNDdkNi1i
ZGU2LTJlNjY3YjlkNjEzNC8wLzMxMzAzMzJlMzEzMDMwMmUzMjM0MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZPcwDQYJ
KoZIhvcNAQELBQADggEBAGHy72JZqbA5lsJ2DBK0rsEOM/flWjTWcTCyWMR3dYKP
ZAuNNaZRv8QtdKinJz+SfhdyQxEUMkSht0xSqOEvKeX7203jfXEbpLmqhXuRDZ0M
p2uBmwLa+kgVaIS4PFfEAq1fh4jq840VAOinMiFIcJtE1ONP60GHrJnCI+ZSsZmt
o/hySYcWPfmXWZsqarNbKDXodfscEsZfiMm/9o0Tv0pvanZONhYwUUE/bMGBaJEb
DqU5oRkTRZpy4cCOj45BCH6j/2X62SC+3cW1coDbmFp9UBnG+T4qKqHiKbYGuqQa
yTIfP2QNnA2SVAB6zAIrwTi/VyEtONJWm4S+fmoqpPU=
-----END CERTIFICATE-----
Generated at Wed May 13 01:45:06 2026 by rpki-client