Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/3130332e3135322e372e302f32342d3234203d3e20313430343236.roa
File:                     3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (raw, json)
Hash identifier:          nXHdSA+c5zf00SmFOpLQqjFcwfm5eVHw9Cph5IqIoGg=
Subject key identifier:   2F:90:27:94:CE:BE:B6:40:68:66:61:B0:F4:7B:9A:FE:42:F2:8F:5D
Certificate issuer:       /CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8
Certificate serial:       2F51097F4942FCB78EE2597C10D5054FE93DD2A9
Authority key identifier: CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/3130332e3135322e372e302f32342d3234203d3e20313430343236.roa
Signing time:             Sun 03 May 2026 02:27:05 +0000
ROA not before:           Sun 03 May 2026 02:22:05 +0000
ROA not after:            Sun 02 May 2027 02:27:05 +0000
asID:                     140426
IP address blocks:        103.152.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl
                          rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:51:09:7f:49:42:fc:b7:8e:e2:59:7c:10:d5:05:4f:e9:3d:d2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8
        Validity
            Not Before: May  3 02:22:05 2026 GMT
            Not After : May  2 02:27:05 2027 GMT
        Subject: CN=2F902794CEBEB640686661B0F47B9AFE42F28F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:90:35:54:a9:6f:35:10:22:f0:9e:4a:36:37:
                    53:9d:75:ba:6b:30:3a:6d:29:c4:b0:ed:25:93:84:
                    95:00:04:9f:5a:8a:9f:92:83:4f:b3:fb:06:2a:07:
                    20:bc:24:a5:66:cc:9a:36:a1:7e:23:09:5a:77:fc:
                    df:cc:88:b1:0f:c8:b6:b9:10:b0:15:a2:cc:a3:b7:
                    35:71:ef:20:d5:81:29:3b:5d:67:f1:25:58:01:37:
                    f9:1c:58:d7:5f:9b:2b:cd:36:40:8c:53:27:0f:0b:
                    78:eb:dc:1f:d6:71:34:b8:59:ac:1a:e1:db:a1:75:
                    ea:70:60:0c:9f:e4:66:50:f3:6b:5f:bf:9d:d0:c8:
                    71:d4:ce:e0:c6:73:6b:33:7e:de:0d:f8:92:32:88:
                    3a:66:33:35:3b:7c:bd:3b:78:93:f1:fd:2e:e6:08:
                    3b:16:0c:df:d2:77:a3:e7:b6:31:01:9d:10:f2:b8:
                    d5:26:f9:6c:fc:62:25:22:90:a7:de:6f:eb:0a:13:
                    64:4b:24:5e:e1:ce:5a:db:df:a4:e4:e9:1e:10:8d:
                    52:01:a0:8f:0a:03:1d:d1:30:6f:f5:4e:8b:3f:fe:
                    fc:b1:67:1a:b3:e1:82:c8:e2:f8:99:a2:4b:57:11:
                    16:d3:ba:cb:92:5f:ce:3f:fd:73:90:54:53:80:2e:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:90:27:94:CE:BE:B6:40:68:66:61:B0:F4:7B:9A:FE:42:F2:8F:5D
            X509v3 Authority Key Identifier:
                keyid:CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/3130332e3135322e372e302f32342d3234203d3e20313430343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:9d:2e:cf:06:53:f0:e2:96:8e:70:c2:89:04:ee:61:93:48:
         96:60:fe:83:89:7b:1d:e4:b8:ff:27:89:58:c4:db:9b:88:94:
         27:67:22:77:dc:99:6e:2d:4b:e1:b8:b0:3f:55:0c:0e:cc:ab:
         e2:13:a7:9d:b6:be:20:dc:59:56:a8:8a:4d:cb:16:cf:2d:15:
         c8:d2:f3:cb:c9:ba:b3:a0:7b:c9:18:fe:93:b6:b6:24:3b:0c:
         7c:28:b2:9b:47:3c:3b:47:66:34:28:87:e7:63:91:39:1e:c5:
         cd:19:9d:ec:65:1f:6c:94:37:0a:bc:57:af:74:e0:cd:d3:03:
         8d:9f:50:27:a2:ee:92:57:96:a2:09:28:0c:10:ce:19:25:59:
         19:13:11:af:60:b7:84:36:83:6b:e0:a5:31:f6:05:87:26:5d:
         b6:55:28:2e:d1:87:1a:c6:ca:84:71:49:8e:4c:0b:86:05:7b:
         50:98:48:49:a7:55:31:47:74:be:b8:e7:78:1c:5a:94:b4:92:
         43:f7:87:e9:24:ae:a5:0d:84:b2:a7:68:e9:7b:f6:3b:53:bf:
         8c:de:cd:2d:ea:91:26:0d:28:35:d8:0f:c6:d5:cc:87:21:24:
         42:a8:58:f7:74:3b:3b:a6:01:72:27:18:09:ed:4d:14:2d:81:
         23:a1:c0:07
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUL1EJf0lC/LeO4ll8ENUFT+k90qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFC
OUUzNkZFODAeFw0yNjA1MDMwMjIyMDVaFw0yNzA1MDIwMjI3MDVaMDMxMTAvBgNV
BAMTKDJGOTAyNzk0Q0VCRUI2NDA2ODY2NjFCMEY0N0I5QUZFNDJGMjhGNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkDVUqW81ECLwnko2N1Oddbpr
MDptKcSw7SWThJUABJ9aip+Sg0+z+wYqByC8JKVmzJo2oX4jCVp3/N/MiLEPyLa5
ELAVosyjtzVx7yDVgSk7XWfxJVgBN/kcWNdfmyvNNkCMUycPC3jr3B/WcTS4Wawa
4duhdepwYAyf5GZQ82tfv53QyHHUzuDGc2szft4N+JIyiDpmMzU7fL07eJPx/S7m
CDsWDN/Sd6PntjEBnRDyuNUm+Wz8YiUikKfeb+sKE2RLJF7hzlrb36Tk6R4QjVIB
oI8KAx3RMG/1Tos//vyxZxqz4YLI4viZoktXERbTusuSX84//XOQVFOALm+PAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUL5AnlM6+tkBoZmGw9Hua/kLyj10wHwYDVR0j
BBgwFoAUz+JwtmTrZJS2eSehSJwPirnjb+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2JhZjM2NWUtMDVkZS00YzM5LWJmOTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2
NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFCOUUzNkZFOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DRkUyNzBCNjY0RUI2NDk0QjY3OTI3QTE0ODlDMEY4QUI5RTM2
RkU4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYWYzNjVlLTA1ZGUtNGMzOS1i
Zjk2LTgzZTkzOWJlZDdkZi8wLzMxMzAzMzJlMzEzNTMyMmUzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMDM0MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeYBzANBgkqhkiG
9w0BAQsFAAOCAQEAuJ0uzwZT8OKWjnDCiQTuYZNIlmD+g4l7HeS4/yeJWMTbm4iU
J2cid9yZbi1L4biwP1UMDsyr4hOnnba+INxZVqiKTcsWzy0VyNLzy8m6s6B7yRj+
k7a2JDsMfCiym0c8O0dmNCiH52OROR7FzRmd7GUfbJQ3CrxXr3TgzdMDjZ9QJ6Lu
kleWogkoDBDOGSVZGRMRr2C3hDaDa+ClMfYFhyZdtlUoLtGHGsbKhHFJjkwLhgV7
UJhISadVMUd0vrjneBxalLSSQ/eH6SSupQ2Esqdo6Xv2O1O/jN7NLeqRJg0oNdgP
xtXMhyEkQqhY93Q7O6YBcicYCe1NFC2BI6HABw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:56:43 2026 by rpki-client