Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa
File:                     3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (raw, json)
Hash identifier:          sPNvpeDzhWn+6hid5VgHhdrKErvd5aUmBzSDcwGzfnk=
Subject key identifier:   99:B7:F6:33:70:07:25:FB:33:11:20:24:39:BB:91:FA:B9:57:68:5B
Certificate issuer:       /CN=330092B238160780852731102A871D6304465F70
Certificate serial:       04F676D15FC1B36DEB6737C459222DF7E7A07993
Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa
Signing time:             Sun 03 May 2026 02:28:25 +0000
ROA not before:           Sun 03 May 2026 02:23:25 +0000
ROA not after:            Sun 02 May 2027 02:28:25 +0000
asID:                     141056
IP address blocks:        103.155.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
                          rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f6:76:d1:5f:c1:b3:6d:eb:67:37:c4:59:22:2d:f7:e7:a0:79:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330092B238160780852731102A871D6304465F70
        Validity
            Not Before: May  3 02:23:25 2026 GMT
            Not After : May  2 02:28:25 2027 GMT
        Subject: CN=99B7F633700725FB3311202439BB91FAB957685B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:38:2d:24:7c:5f:ba:9e:66:d7:6c:65:13:
                    47:df:41:29:96:dd:94:7e:5e:ce:fb:53:ef:a2:dc:
                    0f:67:8a:d1:7b:e7:9d:1f:e3:11:be:79:a6:30:7d:
                    5f:a4:12:96:b3:ac:da:cd:78:46:50:00:40:dd:d9:
                    63:2e:ae:fb:b3:25:64:77:93:a7:24:29:b5:89:99:
                    ef:8f:97:51:4e:81:0f:60:a0:7f:6d:a4:01:c3:0f:
                    b3:e8:8f:2f:2c:9c:53:c9:65:19:70:dd:71:42:41:
                    8e:8b:f8:2d:c6:f5:0a:36:59:d8:39:05:92:90:0c:
                    e8:e7:af:2e:63:d7:cb:56:5f:11:0e:bb:fb:a6:5d:
                    95:de:58:58:cd:64:2d:f3:a6:f6:af:bb:bb:22:f4:
                    8d:42:52:16:82:a7:bd:c8:1f:b8:22:75:32:a5:65:
                    09:58:f2:a4:bd:3c:58:7e:1d:55:8a:a5:5e:4c:90:
                    59:35:12:92:f4:e9:46:d6:6f:00:df:e9:54:94:f6:
                    70:d0:ca:df:fb:41:4e:6f:82:1a:22:1e:72:25:cd:
                    30:3c:be:ab:b3:91:40:ad:c1:c6:ca:e2:06:7f:13:
                    6b:3d:fa:eb:75:ac:cb:50:c4:2d:5e:61:4e:c1:a0:
                    72:44:e4:4e:26:fd:cb:52:b7:65:19:fe:81:7b:78:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B7:F6:33:70:07:25:FB:33:11:20:24:39:BB:91:FA:B9:57:68:5B
            X509v3 Authority Key Identifier:
                keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:54:5f:bd:80:b7:8d:19:3a:3d:4a:31:5d:7f:cb:86:c1:0d:
         58:aa:ea:9f:56:fb:0c:60:e2:fb:d3:ea:11:7f:c5:e6:5b:d5:
         af:c7:9a:36:f3:53:06:5f:39:81:34:1c:5b:e3:de:7c:f1:15:
         ba:30:45:0d:43:c4:71:a2:3d:de:6a:dc:c8:2b:c8:e4:ff:fb:
         04:01:30:32:61:7d:28:4f:42:f9:7a:38:f8:5d:86:d0:32:29:
         8a:14:a1:ad:e1:3f:97:33:65:c7:e3:d1:b7:c4:59:3e:ab:1a:
         0d:28:02:7e:f5:8e:d8:62:57:29:0d:e8:9d:4b:39:4f:e1:01:
         9c:a1:26:bc:2c:49:25:e0:8f:35:c1:ab:0e:7f:39:e8:46:b3:
         24:d5:fa:8a:cd:df:ac:72:34:2d:e9:69:16:cf:59:05:f8:1e:
         33:4c:b8:22:62:4f:bf:d6:2c:a5:9f:59:90:bd:63:27:1a:9e:
         48:fc:7f:4d:42:35:d5:ca:52:f0:77:dc:50:44:d4:69:83:f4:
         82:50:b4:4d:18:a0:56:9f:23:39:e1:98:78:72:a6:03:98:46:
         05:0c:80:d0:d2:78:da:23:d6:ce:51:c0:ef:b4:d6:52:c5:3e:
         a5:44:07:90:2a:52:26:6c:00:eb:c1:f6:ee:c3:10:98:c9:9d:
         ef:aa:a8:c5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBPZ20V/Bs23rZzfEWSIt9+egeZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMwMDkyQjIzODE2MDc4MDg1MjczMTEwMkE4NzFENjMw
NDQ2NUY3MDAeFw0yNjA1MDMwMjIzMjVaFw0yNzA1MDIwMjI4MjVaMDMxMTAvBgNV
BAMTKDk5QjdGNjMzNzAwNzI1RkIzMzExMjAyNDM5QkI5MUZBQjk1NzY4NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/azgtJHxfup5m12xlE0ffQSmW
3ZR+Xs77U++i3A9nitF7550f4xG+eaYwfV+kEpazrNrNeEZQAEDd2WMurvuzJWR3
k6ckKbWJme+Pl1FOgQ9goH9tpAHDD7Pojy8snFPJZRlw3XFCQY6L+C3G9Qo2Wdg5
BZKQDOjnry5j18tWXxEOu/umXZXeWFjNZC3zpvavu7si9I1CUhaCp73IH7gidTKl
ZQlY8qS9PFh+HVWKpV5MkFk1EpL06UbWbwDf6VSU9nDQyt/7QU5vghoiHnIlzTA8
vquzkUCtwcbK4gZ/E2s9+ut1rMtQxC1eYU7BoHJE5E4m/ctSt2UZ/oF7eGvfAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmbf2M3AHJfszESAkObuR+rlXaFswHwYDVR0j
BBgwFoAUMwCSsjgWB4CFJzEQKocdYwRGX3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2UyYzQ4MTUtYjJkYS00YzIwLWJjMzEtNTAzYWRmNDliNDkwLzAvMzMwMDkyQjIz
ODE2MDc4MDg1MjczMTEwMkE4NzFENjMwNDQ2NUY3MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMzAwOTJCMjM4MTYwNzgwODUyNzMxMTAyQTg3MUQ2MzA0NDY1
RjcwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNlMmM0ODE1LWIyZGEtNGMyMC1i
YzMxLTUwM2FkZjQ5YjQ5MC8wLzMxMzAzMzJlMzEzNTM1MmUzMTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm3UwDQYJ
KoZIhvcNAQELBQADggEBAFJUX72At40ZOj1KMV1/y4bBDViq6p9W+wxg4vvT6hF/
xeZb1a/HmjbzUwZfOYE0HFvj3nzxFbowRQ1DxHGiPd5q3MgryOT/+wQBMDJhfShP
Qvl6OPhdhtAyKYoUoa3hP5czZcfj0bfEWT6rGg0oAn71jthiVykN6J1LOU/hAZyh
JrwsSSXgjzXBqw5/OehGsyTV+orN36xyNC3paRbPWQX4HjNMuCJiT7/WLKWfWZC9
Yycankj8f01CNdXKUvB33FBE1GmD9IJQtE0YoFafIznhmHhypgOYRgUMgNDSeNoj
1s5RwO+01lLFPqVEB5AqUiZsAOvB9u7DEJjJne+qqMU=
-----END CERTIFICATE-----
Generated at Wed May 13 08:10:44 2026 by rpki-client