Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/3130332e31332e3136342e302f32332d3234203d3e2034383030.roa
File:                     3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          LV3eS8DWx/O74oQ0CzVazcwm3a7uu6GLraOIjVHVQ5o=
Subject key identifier:   C1:42:49:08:D0:E2:C0:1D:86:D4:E8:13:FC:3F:9D:8E:84:05:5E:F6
Certificate issuer:       /CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
Certificate serial:       0F4736C726276F83402A3712F7FAE965CAA0E6A7
Authority key identifier: E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/3130332e31332e3136342e302f32332d3234203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:23:24 +0000
ROA not before:           Sun 03 May 2026 02:18:24 +0000
ROA not after:            Sun 02 May 2027 02:23:24 +0000
asID:                     4800
IP address blocks:        103.13.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl
                          rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:47:36:c7:26:27:6f:83:40:2a:37:12:f7:fa:e9:65:ca:a0:e6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4916A38F928B049A7533CB4FE25B8FA9D96DF74
        Validity
            Not Before: May  3 02:18:24 2026 GMT
            Not After : May  2 02:23:24 2027 GMT
        Subject: CN=C1424908D0E2C01D86D4E813FC3F9D8E84055EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cd:16:bc:7c:13:03:a5:b5:e4:cc:9f:3c:83:
                    6c:59:e5:4d:b9:ef:c8:54:47:ae:f8:32:5d:cb:c7:
                    7c:96:19:a0:f3:17:10:92:80:a4:7d:d9:66:10:c5:
                    37:b9:1e:3b:1a:58:c9:fd:dd:2f:38:4f:8a:7e:01:
                    73:4d:60:23:9b:0a:da:f0:8d:74:2f:47:95:06:7e:
                    97:c4:51:66:a5:4d:5a:3d:6c:ba:3d:29:94:49:8d:
                    1e:70:39:a3:2c:6f:16:2d:2e:12:42:dc:71:f5:39:
                    79:5a:7d:be:26:53:3b:58:a3:2b:b1:9c:86:f0:2d:
                    2b:3f:a4:92:65:d3:f8:06:d6:db:68:f9:5f:a1:2d:
                    66:7a:99:a2:82:40:49:86:83:9a:fd:cb:a1:8a:89:
                    cb:dd:d9:0c:8e:80:4e:7d:4f:ac:f9:5b:8e:74:c6:
                    a8:1a:05:dd:43:08:bd:ca:da:99:f7:bb:78:18:16:
                    31:b0:1b:94:8f:b9:1f:d2:a2:d9:59:bf:25:0c:44:
                    6d:c0:a9:6b:c8:a9:7f:30:fd:71:82:97:41:5b:e6:
                    ca:75:8a:98:15:79:3a:4b:fd:13:be:44:a4:e3:97:
                    d1:33:c3:bf:40:c3:1f:52:81:16:ec:a3:6a:cb:36:
                    82:c9:df:b9:37:d3:c2:fe:db:2e:5f:f0:03:47:fe:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:42:49:08:D0:E2:C0:1D:86:D4:E8:13:FC:3F:9D:8E:84:05:5E:F6
            X509v3 Authority Key Identifier:
                keyid:E4:91:6A:38:F9:28:B0:49:A7:53:3C:B4:FE:25:B8:FA:9D:96:DF:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4916A38F928B049A7533CB4FE25B8FA9D96DF74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/3130332e31332e3136342e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:5a:ef:ac:8f:40:bc:13:53:6f:09:f9:49:09:5b:09:30:c5:
         ba:54:2a:3c:f1:0a:34:8b:6d:24:e4:81:fa:e9:b0:74:97:2e:
         06:d5:6d:f2:d4:e2:ca:7d:49:09:18:02:a6:b5:4d:fa:a3:3e:
         45:45:90:df:2c:76:51:08:cf:9d:95:6d:c0:66:36:a5:4c:a9:
         f4:c4:82:97:b7:bf:63:57:66:82:4d:ce:5d:ca:44:84:45:7e:
         f0:35:2c:5f:64:31:fa:33:e7:c2:f5:e7:46:3a:81:41:19:a7:
         65:54:c0:46:68:af:67:fe:66:2d:8e:69:17:99:c3:c5:90:c6:
         f2:4b:5c:f4:08:59:08:9c:22:89:9f:b6:6c:f4:68:98:1a:2b:
         e4:bf:7b:f3:a8:db:76:59:5f:0c:73:81:4d:b8:7e:02:0a:fb:
         fe:1c:23:58:3d:5e:05:3e:2a:a1:2e:00:c0:9e:89:28:d0:72:
         0d:5f:32:dd:28:ce:fb:24:6f:e4:f2:a9:89:e2:5c:fe:36:4b:
         ca:72:9f:8e:48:12:cd:7b:cf:8f:de:1f:3c:37:16:f6:e4:f8:
         f2:2f:85:34:34:66:05:f3:cd:8b:aa:bd:2c:59:80:af:a2:b6:
         d8:3d:1a:f0:c9:5b:ba:40:59:af:92:9b:e6:bf:4d:e7:46:71:
         88:af:de:77
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUD0c2xyYnb4NAKjcS9/rpZcqg5qcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ5MTZBMzhGOTI4QjA0OUE3NTMzQ0I0RkUyNUI4RkE5
RDk2REY3NDAeFw0yNjA1MDMwMjE4MjRaFw0yNzA1MDIwMjIzMjRaMDMxMTAvBgNV
BAMTKEMxNDI0OTA4RDBFMkMwMUQ4NkQ0RTgxM0ZDM0Y5RDhFODQwNTVFRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzRa8fBMDpbXkzJ88g2xZ5U25
78hUR674Ml3Lx3yWGaDzFxCSgKR92WYQxTe5HjsaWMn93S84T4p+AXNNYCObCtrw
jXQvR5UGfpfEUWalTVo9bLo9KZRJjR5wOaMsbxYtLhJC3HH1OXlafb4mUztYoyux
nIbwLSs/pJJl0/gG1tto+V+hLWZ6maKCQEmGg5r9y6GKicvd2QyOgE59T6z5W450
xqgaBd1DCL3K2pn3u3gYFjGwG5SPuR/SotlZvyUMRG3AqWvIqX8w/XGCl0Fb5sp1
ipgVeTpL/RO+RKTjl9Ezw79Awx9SgRbso2rLNoLJ37k308L+2y5f8ANH/oSbAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUwUJJCNDiwB2G1OgT/D+djoQFXvYwHwYDVR0j
BBgwFoAU5JFqOPkosEmnUzy0/iW4+p2W33QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmY4ZDE1OTQtNDNlOS00MzJkLWJlODItZGMwYjk3NjdkY2I2LzAvRTQ5MTZBMzhG
OTI4QjA0OUE3NTMzQ0I0RkUyNUI4RkE5RDk2REY3NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNDkxNkEzOEY5MjhCMDQ5QTc1MzNDQjRGRTI1QjhGQTlEOTZE
Rjc0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJmOGQxNTk0LTQzZTktNDMyZC1i
ZTgyLWRjMGI5NzY3ZGNiNi8wLzMxMzAzMzJlMzEzMzJlMzEzNjM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnDaQwDQYJKoZIhvcN
AQELBQADggEBAK9a76yPQLwTU28J+UkJWwkwxbpUKjzxCjSLbSTkgfrpsHSXLgbV
bfLU4sp9SQkYAqa1TfqjPkVFkN8sdlEIz52VbcBmNqVMqfTEgpe3v2NXZoJNzl3K
RIRFfvA1LF9kMfoz58L150Y6gUEZp2VUwEZor2f+Zi2OaReZw8WQxvJLXPQIWQic
Iomftmz0aJgaK+S/e/Oo23ZZXwxzgU24fgIK+/4cI1g9XgU+KqEuAMCeiSjQcg1f
Mt0ozvskb+TyqYniXP42S8pyn45IEs17z4/eHzw3Fvbk+PIvhTQ0ZgXzzYuqvSxZ
gK+ittg9GvDJW7pAWa+Sm+a/TedGcYiv3nc=
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:00 2026 by rpki-client