Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa
File:                     3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa (raw, json)
Hash identifier:          LNgwgKg7/TC2FJnghlu6rZrO15KD26+bO9sGt4Bn1Os=
Subject key identifier:   4E:F7:88:CA:79:ED:44:32:71:94:86:70:02:66:D4:80:2F:4E:0A:20
Certificate issuer:       /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial:       27949A500CBB44A2ABEED7EDE0EA1C113CA6BAEF
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa
Signing time:             Sun 03 May 2026 02:28:19 +0000
ROA not before:           Sun 03 May 2026 02:23:19 +0000
ROA not after:            Sun 02 May 2027 02:28:19 +0000
asID:                     139949
IP address blocks:        103.147.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
                          rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:94:9a:50:0c:bb:44:a2:ab:ee:d7:ed:e0:ea:1c:11:3c:a6:ba:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
        Validity
            Not Before: May  3 02:23:19 2026 GMT
            Not After : May  2 02:28:19 2027 GMT
        Subject: CN=4EF788CA79ED4432719486700266D4802F4E0A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:a1:8d:34:e2:0b:d4:5d:d4:11:b0:79:6d:
                    64:45:7c:32:d6:89:92:26:95:2a:4b:3f:a9:54:74:
                    ab:29:5a:cb:92:e6:e5:c9:7a:ef:b6:57:f6:bf:ee:
                    fe:78:3e:8e:cd:4d:25:41:dc:c6:72:d2:ac:3d:81:
                    89:4b:82:d9:49:3a:71:19:3a:6a:83:06:24:4a:35:
                    84:c0:ae:31:06:11:64:cd:45:d2:c5:e6:b1:41:d9:
                    37:bb:b1:03:aa:fb:f8:9e:ad:78:cc:18:42:5b:fa:
                    64:a5:61:6a:f0:d1:85:f1:97:f5:c0:a2:2b:eb:cf:
                    8b:2e:5a:c4:ad:bd:41:b7:29:7b:f9:db:af:b0:9c:
                    25:41:ff:ff:19:d4:a5:6c:08:eb:cb:99:ac:9e:2f:
                    6c:4b:7f:12:38:14:d7:5f:5a:e3:e7:de:32:4a:fd:
                    15:9c:5f:c6:e1:da:e0:fe:d3:5b:fb:87:af:75:ae:
                    5d:b2:3d:63:4b:13:03:34:df:0e:91:31:67:e4:58:
                    de:d7:55:f2:8d:fe:9a:e6:32:b2:b1:7b:f1:f8:b3:
                    eb:62:dc:99:ab:ed:e8:42:c3:f9:be:a1:5b:2e:d2:
                    6b:b1:07:06:15:7d:b9:3d:75:e8:c4:0b:2b:41:1c:
                    ac:dd:40:75:cd:d5:da:59:e7:87:26:b1:4f:af:b4:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F7:88:CA:79:ED:44:32:71:94:86:70:02:66:D4:80:2F:4E:0A:20
            X509v3 Authority Key Identifier:
                keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:87:d0:cc:1a:4b:06:3c:5a:be:66:9d:a3:9e:53:fa:86:33:
         bf:c3:38:35:fe:01:da:0f:8a:80:97:d0:71:56:f4:59:50:e4:
         3c:a8:ea:8d:40:3a:9b:79:6d:df:a5:07:6f:5e:ad:ea:0b:80:
         76:44:6d:3c:6f:d6:98:8a:e2:21:19:97:83:c8:b8:32:bb:fc:
         be:b6:d6:79:72:2a:ee:1e:94:07:9a:0d:a0:8f:35:cd:52:22:
         5c:74:91:c6:13:4a:b0:8a:e5:a0:69:1c:65:66:5f:1c:b5:06:
         19:62:6a:db:91:0c:5d:7b:fd:fb:41:12:69:86:21:d4:07:ce:
         57:0c:5e:29:b9:f9:1c:80:63:f2:fe:c5:1e:01:5a:77:fd:f9:
         4c:9d:26:55:7c:a3:0f:0d:08:7e:93:82:a3:32:98:7c:81:fb:
         f0:92:c6:a3:18:97:93:e9:c2:68:30:e3:8d:e8:df:30:90:6d:
         f2:49:16:e2:ea:64:47:16:08:aa:ec:8d:bf:ec:7c:be:b6:61:
         0d:25:5e:a9:cd:63:83:e5:0c:05:45:f0:8f:46:91:8d:a1:6d:
         7f:e1:a2:99:67:2d:2e:c3:5a:da:9b:bb:34:84:9b:af:fb:09:
         f9:e1:fa:5d:65:88:01:1d:10:d9:e8:fc:cb:8b:a2:1b:0a:a8:
         c4:31:c6:a1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJ5SaUAy7RKKr7tft4OocETymuu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw
MUQwNjRGMDAeFw0yNjA1MDMwMjIzMTlaFw0yNzA1MDIwMjI4MTlaMDMxMTAvBgNV
BAMTKDRFRjc4OENBNzlFRDQ0MzI3MTk0ODY3MDAyNjZENDgwMkY0RTBBMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX06GNNOIL1F3UEbB5bWRFfDLW
iZImlSpLP6lUdKspWsuS5uXJeu+2V/a/7v54Po7NTSVB3MZy0qw9gYlLgtlJOnEZ
OmqDBiRKNYTArjEGEWTNRdLF5rFB2Te7sQOq+/ierXjMGEJb+mSlYWrw0YXxl/XA
oivrz4suWsStvUG3KXv526+wnCVB//8Z1KVsCOvLmayeL2xLfxI4FNdfWuPn3jJK
/RWcX8bh2uD+01v7h691rl2yPWNLEwM03w6RMWfkWN7XVfKN/prmMrKxe/H4s+ti
3Jmr7ehCw/m+oVsu0muxBwYVfbk9dejECytBHKzdQHXN1dpZ54cmsU+vtLetAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTveIynntRDJxlIZwAmbUgC9OCiAwHwYDVR0j
BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG
RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2
NEYwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05
MzcyLWU2ZTAzOWZjMDZiOS8wLzMxMzAzMzJlMzEzNDM3MmUzNTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5M1MA0GCSqG
SIb3DQEBCwUAA4IBAQCeh9DMGksGPFq+Zp2jnlP6hjO/wzg1/gHaD4qAl9BxVvRZ
UOQ8qOqNQDqbeW3fpQdvXq3qC4B2RG08b9aYiuIhGZeDyLgyu/y+ttZ5ciruHpQH
mg2gjzXNUiJcdJHGE0qwiuWgaRxlZl8ctQYZYmrbkQxde/37QRJphiHUB85XDF4p
ufkcgGPy/sUeAVp3/flMnSZVfKMPDQh+k4KjMph8gfvwksajGJeT6cJoMOON6N8w
kG3ySRbi6mRHFgiq7I2/7Hy+tmENJV6pzWOD5QwFRfCPRpGNoW1/4aKZZy0uw1ra
m7s0hJuv+wn54fpdZYgBHRDZ6PzLi6IbCqjEMcah
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:04 2026 by rpki-client