Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa
File:                     3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (raw, json)
Hash identifier:          OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=
Subject key identifier:   40:F3:09:E2:BB:19:58:B9:C1:C4:4E:61:99:AE:F3:84:0A:DE:40:75
Certificate issuer:       /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7
Certificate serial:       1A66BE840BE69976E23D63A4FA1D87042F0118A6
Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa
Signing time:             Sun 03 May 2026 02:23:47 +0000
ROA not before:           Sun 03 May 2026 02:18:47 +0000
ROA not after:            Sun 02 May 2027 02:23:47 +0000
asID:                     138097
IP address blocks:        103.130.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl
                          rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:66:be:84:0b:e6:99:76:e2:3d:63:a4:fa:1d:87:04:2f:01:18:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7
        Validity
            Not Before: May  3 02:18:47 2026 GMT
            Not After : May  2 02:23:47 2027 GMT
        Subject: CN=40F309E2BB1958B9C1C44E6199AEF3840ADE4075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:fa:97:58:15:de:0b:d5:8f:7a:b2:45:8b:
                    cb:79:10:0c:1d:f7:51:b9:03:87:7e:cd:19:21:7e:
                    a6:37:21:e9:65:3a:f5:56:2a:0e:71:f8:64:af:15:
                    c3:ff:27:0a:50:12:04:ec:e1:1e:13:28:08:a2:e0:
                    c6:80:93:ed:da:f8:e6:7d:cf:df:a9:c8:ab:cc:6a:
                    e0:c2:7f:2d:7b:f2:c2:22:5e:ef:b5:c1:1c:44:e9:
                    1c:d2:50:43:70:a9:cc:08:ea:ec:ca:bf:db:d3:64:
                    61:b0:4a:36:94:e3:a1:f8:4a:e2:4f:14:ff:58:64:
                    47:1b:91:28:e8:c8:97:c8:71:4f:a7:8f:e4:e8:a5:
                    d5:8e:8a:28:5d:4f:a6:1a:3e:27:6f:50:75:82:46:
                    18:f3:f8:36:2f:82:d3:76:c3:5c:50:13:eb:8e:5a:
                    a5:b4:f1:2c:64:08:0f:91:26:5d:71:05:fb:21:a3:
                    e2:35:09:7d:c0:04:bf:39:4a:63:6f:50:6b:a1:2d:
                    3c:5d:59:ad:88:27:7f:0a:3d:74:10:0e:f7:a7:a0:
                    45:6e:ce:48:18:61:e0:46:62:b5:60:7f:d4:8c:80:
                    f4:53:2e:3d:a2:85:74:11:50:7f:ca:a5:46:d7:23:
                    08:04:ee:9c:d7:c3:7c:a4:8b:ae:c1:2c:8c:49:6d:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F3:09:E2:BB:19:58:B9:C1:C4:4E:61:99:AE:F3:84:0A:DE:40:75
            X509v3 Authority Key Identifier:
                keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:b1:26:67:15:c0:a1:d3:15:75:b2:32:f7:84:0f:a0:08:
         4c:13:d1:0b:7c:94:e0:df:98:03:9d:65:5e:ee:16:ce:ef:c7:
         e3:5d:1e:93:a3:55:cb:20:54:ec:fd:93:6e:1c:48:55:0c:01:
         6a:24:55:2f:fe:54:a7:f8:dc:ad:2f:b6:b3:72:02:49:10:7b:
         6a:e4:be:7b:0d:88:b1:d5:22:55:9e:7e:d6:dc:d7:aa:67:79:
         6e:8b:f6:59:48:9b:c1:a2:eb:25:7e:02:df:cf:3f:7c:49:46:
         5d:a1:ed:44:1d:af:f2:3c:e3:2c:01:10:63:02:75:25:19:59:
         4c:7a:22:84:87:d6:41:24:19:7d:30:43:0f:ab:f5:b1:b1:c8:
         36:71:35:cd:b9:89:7d:47:70:a5:93:40:61:56:49:ce:69:0d:
         9d:fa:1e:60:2b:fb:90:93:9a:b2:a4:80:b5:e9:09:6a:fb:37:
         17:45:67:93:2a:94:62:3b:91:81:b3:fe:2c:40:7e:95:6c:e5:
         7c:78:db:d8:42:03:b2:68:e2:5c:67:58:01:ec:67:8b:5f:84:
         53:17:eb:30:9a:bd:e3:93:ce:e5:30:af:68:5f:bc:c6:2c:66:
         88:6a:6d:3f:43:ab:95:53:fa:f9:0f:e0:59:da:7b:a8:17:ae:
         7b:21:0c:5e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUGma+hAvmmXbiPWOk+h2HBC8BGKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy
NDIzRURCNzAeFw0yNjA1MDMwMjE4NDdaFw0yNzA1MDIwMjIzNDdaMDMxMTAvBgNV
BAMTKDQwRjMwOUUyQkIxOTU4QjlDMUM0NEU2MTk5QUVGMzg0MEFERTQwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3lvqXWBXeC9WPerJFi8t5EAwd
91G5A4d+zRkhfqY3IellOvVWKg5x+GSvFcP/JwpQEgTs4R4TKAii4MaAk+3a+OZ9
z9+pyKvMauDCfy178sIiXu+1wRxE6RzSUENwqcwI6uzKv9vTZGGwSjaU46H4SuJP
FP9YZEcbkSjoyJfIcU+nj+TopdWOiihdT6YaPidvUHWCRhjz+DYvgtN2w1xQE+uO
WqW08SxkCA+RJl1xBfsho+I1CX3ABL85SmNvUGuhLTxdWa2IJ38KPXQQDvenoEVu
zkgYYeBGYrVgf9SMgPRTLj2ihXQRUH/KpUbXIwgE7pzXw3yki67BLIxJbZz9AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUQPMJ4rsZWLnBxE5hma7zhAreQHUwHwYDVR0j
BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD
MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF
REI3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwYTM5MmRjLTJlNGUtNDc3MC04
ZjY4LWJjNjFmODBiNzRhNy8wLzMxMzAzMzJlMzEzMzMwMmUzMjMwMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM5Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABngs4wDQYJ
KoZIhvcNAQELBQADggEBAAs9sSZnFcCh0xV1sjL3hA+gCEwT0Qt8lODfmAOdZV7u
Fs7vx+NdHpOjVcsgVOz9k24cSFUMAWokVS/+VKf43K0vtrNyAkkQe2rkvnsNiLHV
IlWeftbc16pneW6L9llIm8Gi6yV+At/PP3xJRl2h7UQdr/I84ywBEGMCdSUZWUx6
IoSH1kEkGX0wQw+r9bGxyDZxNc25iX1HcKWTQGFWSc5pDZ36HmAr+5CTmrKkgLXp
CWr7NxdFZ5MqlGI7kYGz/ixAfpVs5Xx429hCA7Jo4lxnWAHsZ4tfhFMX6zCaveOT
zuUwr2hfvMYsZohqbT9Dq5VT+vkP4Fnae6gXrnshDF4=
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:39 2026 by rpki-client