Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa
File:                     3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (raw, json)
Hash identifier:          zpN+ZUQARf85utjXtSfFSa/KkTvAdeU606KS8jCMD5U=
Subject key identifier:   E7:2E:28:D8:B3:EB:83:D6:08:7E:61:13:62:0A:9C:53:6B:6B:41:7B
Certificate issuer:       /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4
Certificate serial:       5ADBD3BC4E9F03A8415120033EDA0FE8311F88A4
Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa
Signing time:             Sun 03 May 2026 02:27:37 +0000
ROA not before:           Sun 03 May 2026 02:22:37 +0000
ROA not after:            Sun 02 May 2027 02:27:37 +0000
asID:                     151994
IP address blocks:        103.255.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl
                          rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:db:d3:bc:4e:9f:03:a8:41:51:20:03:3e:da:0f:e8:31:1f:88:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4
        Validity
            Not Before: May  3 02:22:37 2026 GMT
            Not After : May  2 02:27:37 2027 GMT
        Subject: CN=E72E28D8B3EB83D6087E6113620A9C536B6B417B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9f:d2:2f:c3:8e:68:53:a4:39:27:6c:86:5b:
                    4d:da:f5:b0:b6:78:91:0a:cc:85:ac:60:76:78:b5:
                    c0:35:61:ae:3b:59:ae:fa:02:1e:1a:d5:d2:d4:52:
                    19:7a:4a:97:fa:51:42:9e:fc:91:4c:d3:85:8b:8c:
                    8d:75:70:73:a7:30:79:cb:30:de:0a:9c:6c:cd:f4:
                    13:e8:4d:49:f3:c7:17:f7:43:25:54:af:fb:3f:9e:
                    6a:11:74:31:38:e4:38:58:f9:24:dd:ed:cb:d6:bb:
                    01:2d:46:8a:41:21:c8:93:9c:37:18:0c:df:78:77:
                    88:cf:e0:a1:66:6b:b1:bb:c2:ba:64:ca:db:a9:6b:
                    84:06:c8:81:78:c1:55:12:02:82:eb:d0:93:cc:80:
                    3a:ee:90:34:a4:32:2d:ab:4f:88:bb:68:19:b8:eb:
                    bb:bf:b4:b3:57:02:c3:e0:3f:61:d4:b2:3d:5d:42:
                    15:7b:63:9c:ba:5a:1c:a1:1c:a6:76:e6:b6:16:93:
                    88:f9:0a:15:43:53:93:46:87:af:ea:02:4f:02:69:
                    51:97:85:6a:74:4c:85:87:2f:7f:8b:17:5a:94:43:
                    e1:1d:66:d1:f5:b8:7a:88:a9:76:22:22:26:5e:e3:
                    3d:e2:84:0d:95:aa:96:73:9e:f1:7b:47:c0:23:75:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2E:28:D8:B3:EB:83:D6:08:7E:61:13:62:0A:9C:53:6B:6B:41:7B
            X509v3 Authority Key Identifier:
                keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5a:61:29:6f:b7:09:a5:55:6c:df:5f:fd:ac:ca:c8:28:c1:
         39:4e:c5:5b:ae:74:d0:4d:5b:7c:73:36:a6:79:f1:85:27:43:
         3d:5d:93:dd:8a:61:25:20:93:b8:96:32:0d:fb:e9:c4:aa:61:
         54:28:4a:80:9c:ca:f0:2c:f4:b6:00:01:3c:ae:0f:86:7c:fa:
         b0:45:44:5e:17:24:c6:3f:f9:46:1e:c7:35:84:1c:dd:95:c5:
         f7:b6:17:9b:67:73:ee:5b:d8:28:01:3a:0e:78:da:92:40:83:
         0c:46:12:55:f4:07:0c:e4:be:ee:36:8a:8a:66:7d:2b:e0:85:
         ee:a0:86:14:a1:58:9d:8c:41:2c:17:f2:44:2b:45:c8:e2:23:
         07:23:e1:95:ba:92:55:4a:76:ec:02:f9:3e:3e:f8:dd:21:86:
         3f:6e:8f:8b:92:f0:73:c0:a5:54:fa:07:ed:1a:22:b8:bf:7a:
         75:cb:91:9d:c1:6a:2f:7f:68:c9:84:ce:a5:71:e1:08:72:dd:
         bf:e9:50:b0:60:1e:46:6b:e1:2a:6f:ee:f3:63:16:fb:95:84:
         19:c2:d4:4f:f9:3d:8b:f2:99:87:be:ce:af:01:8f:91:35:75:
         35:12:5f:60:78:a2:cd:f8:64:68:78:b9:81:11:93:b9:2b:05:
         45:e0:c2:88
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWtvTvE6fA6hBUSADPtoP6DEfiKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2
QkM2NUVFNDAeFw0yNjA1MDMwMjIyMzdaFw0yNzA1MDIwMjI3MzdaMDMxMTAvBgNV
BAMTKEU3MkUyOEQ4QjNFQjgzRDYwODdFNjExMzYyMEE5QzUzNkI2QjQxN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDin9Ivw45oU6Q5J2yGW03a9bC2
eJEKzIWsYHZ4tcA1Ya47Wa76Ah4a1dLUUhl6Spf6UUKe/JFM04WLjI11cHOnMHnL
MN4KnGzN9BPoTUnzxxf3QyVUr/s/nmoRdDE45DhY+STd7cvWuwEtRopBIciTnDcY
DN94d4jP4KFma7G7wrpkytupa4QGyIF4wVUSAoLr0JPMgDrukDSkMi2rT4i7aBm4
67u/tLNXAsPgP2HUsj1dQhV7Y5y6WhyhHKZ25rYWk4j5ChVDU5NGh6/qAk8CaVGX
hWp0TIWHL3+LF1qUQ+EdZtH1uHqIqXYiIiZe4z3ihA2VqpZznvF7R8AjdVenAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU5y4o2LPrg9YIfmETYgqcU2trQXswHwYDVR0j
BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw
OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1
RUU0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjNDdlZjVjLTViYmEtNGNkMS04
ZGM5LTE3M2UyNzUxZjRmNC8wLzMxMzAzMzJlMzIzNTM1MmUzMTM2MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzOTM5MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/6UwDQYJ
KoZIhvcNAQELBQADggEBAJRaYSlvtwmlVWzfX/2sysgowTlOxVuudNBNW3xzNqZ5
8YUnQz1dk92KYSUgk7iWMg376cSqYVQoSoCcyvAs9LYAATyuD4Z8+rBFRF4XJMY/
+UYexzWEHN2Vxfe2F5tnc+5b2CgBOg542pJAgwxGElX0Bwzkvu42iopmfSvghe6g
hhShWJ2MQSwX8kQrRcjiIwcj4ZW6klVKduwC+T4++N0hhj9uj4uS8HPApVT6B+0a
Iri/enXLkZ3Bai9/aMmEzqVx4Qhy3b/pULBgHkZr4Spv7vNjFvuVhBnC1E/5PYvy
mYe+zq8Bj5E1dTUSX2B4os34ZGh4uYERk7krBUXgwog=
-----END CERTIFICATE-----
Generated at Wed May 13 10:00:42 2026 by rpki-client