Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=
Subject key identifier:   14:22:8C:B1:57:23:26:5F:C9:47:AF:89:6A:D3:C6:40:5E:9F:30:CB
Certificate issuer:       /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
Certificate serial:       626547187B487CF8FA5C2E0853AFCF3D43C427D1
Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 03 May 2026 02:25:24 +0000
ROA not before:           Sun 03 May 2026 02:20:24 +0000
ROA not after:            Sun 02 May 2027 02:25:24 +0000
asID:                     139952
IP address blocks:        103.162.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl
                          rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:65:47:18:7b:48:7c:f8:fa:5c:2e:08:53:af:cf:3d:43:c4:27:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
        Validity
            Not Before: May  3 02:20:24 2026 GMT
            Not After : May  2 02:25:24 2027 GMT
        Subject: CN=14228CB15723265FC947AF896AD3C6405E9F30CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:95:22:bf:3e:7f:3e:80:7f:7a:c0:db:15:
                    ad:45:6e:1d:4d:0a:56:c1:a1:c6:25:8c:d8:d4:e4:
                    dc:95:2a:28:86:1e:4c:49:47:52:38:31:c6:78:44:
                    f8:c1:f1:1b:22:6c:ea:12:7d:1a:87:21:08:83:af:
                    85:b9:db:f6:88:fe:88:8a:82:3e:89:94:51:c6:49:
                    8d:fa:4c:91:e1:9e:fc:e9:62:53:0a:ae:18:56:11:
                    99:eb:4f:43:08:11:c3:b4:16:2c:62:de:0a:f8:57:
                    65:16:9f:54:e5:24:53:80:2c:22:2e:8c:70:e1:74:
                    36:22:89:7b:47:69:2a:f0:88:89:40:9b:44:4a:3b:
                    8c:24:5c:5b:72:5b:2d:8e:74:78:13:5f:68:65:47:
                    d3:3f:a1:55:83:32:9c:3d:26:ef:56:f1:f6:ed:44:
                    05:5f:58:2c:32:c8:c2:e7:fd:49:f5:27:e6:d8:30:
                    1e:64:91:f9:b7:7c:bc:67:0e:7a:8f:98:b6:b9:e7:
                    f8:69:42:95:de:b6:fb:28:01:1a:b3:2e:15:8a:be:
                    a2:ec:32:f5:01:4b:0c:f1:89:e1:85:6d:6b:c2:c2:
                    6a:25:04:94:23:74:a6:8c:37:5f:8a:74:6f:e2:6f:
                    a8:37:05:5d:d0:f9:9e:54:00:fa:16:1e:f3:38:86:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:22:8C:B1:57:23:26:5F:C9:47:AF:89:6A:D3:C6:40:5E:9F:30:CB
            X509v3 Authority Key Identifier:
                keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:5a:33:c9:f3:4f:7c:49:0a:20:81:f9:e0:4d:70:0f:8e:
         c6:67:8f:28:5c:0f:2d:32:53:d9:18:fb:85:84:9b:82:a8:08:
         70:d1:7d:48:5b:8b:ca:12:2b:e3:dd:19:91:03:39:7f:13:fb:
         ff:65:45:9d:e0:33:64:3d:d0:31:95:65:75:d5:1d:f3:a6:13:
         4c:2d:27:bc:ef:65:fb:50:8e:8d:e4:06:0e:2c:8a:d9:68:9a:
         de:ac:4b:1c:16:d6:73:de:f3:5e:e2:ee:04:ee:e0:a9:58:35:
         32:c5:b7:20:17:ad:7a:e3:5b:d9:42:83:e0:85:68:16:4c:70:
         d7:a8:f7:68:cd:72:56:46:c9:ff:56:97:e8:1d:4a:e1:14:b0:
         9e:dc:f1:97:b0:b4:a2:93:99:8c:a8:03:be:49:17:0c:d1:ad:
         12:73:8b:e0:c9:7b:14:ea:da:b3:9d:29:43:1b:18:f8:5c:62:
         cf:ac:88:be:2e:32:04:a2:dd:fe:5d:8b:4c:e6:22:73:f7:6c:
         fa:63:19:f8:fe:7b:d3:6d:f7:08:a9:e0:96:33:63:77:ed:b0:
         24:03:c8:5e:b3:a5:2c:20:6b:6e:9d:51:87:11:a7:93:3b:d4:
         01:4e:9a:f8:bb:05:b0:49:cd:56:59:0d:24:42:c3:6d:de:3d:
         ef:9c:5b:9d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUYmVHGHtIfPj6XC4IU6/PPUPEJ9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3
OThGNEEwRTAeFw0yNjA1MDMwMjIwMjRaFw0yNzA1MDIwMjI1MjRaMDMxMTAvBgNV
BAMTKDE0MjI4Q0IxNTcyMzI2NUZDOTQ3QUY4OTZBRDNDNjQwNUU5RjMwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0M5Uivz5/PoB/esDbFa1Fbh1N
ClbBocYljNjU5NyVKiiGHkxJR1I4McZ4RPjB8RsibOoSfRqHIQiDr4W52/aI/oiK
gj6JlFHGSY36TJHhnvzpYlMKrhhWEZnrT0MIEcO0Fixi3gr4V2UWn1TlJFOALCIu
jHDhdDYiiXtHaSrwiIlAm0RKO4wkXFtyWy2OdHgTX2hlR9M/oVWDMpw9Ju9W8fbt
RAVfWCwyyMLn/Un1J+bYMB5kkfm3fLxnDnqPmLa55/hpQpXetvsoARqzLhWKvqLs
MvUBSwzxieGFbWvCwmolBJQjdKaMN1+KdG/ib6g3BV3Q+Z5UAPoWHvM4hn6nAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUFCKMsVcjJl/JR6+JatPGQF6fMMswHwYDVR0j
BBgwFoAUM+rvJxW69+fitM4wUQUnnXmPSg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzU4YzhmOWYtNDIxMy00YTJhLTg1YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcx
NUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3OThGNEEwRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zM0VBRUYyNzE1QkFGN0U3RTJCNENFMzA1MTA1Mjc5RDc5OEY0
QTBFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM1OGM4ZjlmLTQyMTMtNGEyYS04
NWMzLWIyNGIwZDBiNTEwNy8wLzMxMzAzMzJlMzEzNjMyMmUzMjMyMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnotwwDQYJ
KoZIhvcNAQELBQADggEBAAZcWjPJ8098SQoggfngTXAPjsZnjyhcDy0yU9kY+4WE
m4KoCHDRfUhbi8oSK+PdGZEDOX8T+/9lRZ3gM2Q90DGVZXXVHfOmE0wtJ7zvZftQ
jo3kBg4sitlomt6sSxwW1nPe817i7gTu4KlYNTLFtyAXrXrjW9lCg+CFaBZMcNeo
92jNclZGyf9Wl+gdSuEUsJ7c8ZewtKKTmYyoA75JFwzRrRJzi+DJexTq2rOdKUMb
GPhcYs+siL4uMgSi3f5di0zmInP3bPpjGfj+e9Nt9wip4JYzY3ftsCQDyF6zpSwg
a26dUYcRp5M71AFOmvi7BbBJzVZZDSRCw23ePe+cW50=
-----END CERTIFICATE-----
Generated at Wed May 13 05:57:22 2026 by rpki-client