Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e362e302f32342d3234203d3e20313336313237.roa
File:                     3130332e39372e362e302f32342d3234203d3e20313336313237.roa (raw, json)
Hash identifier:          RQSgO7tNppNvAC3aE8/fyIG2xxaOqC+3ztcNnXjPeng=
Subject key identifier:   53:74:22:B7:BD:88:CF:F9:F0:0B:F5:45:C1:1B:48:E7:62:81:9B:2D
Certificate issuer:       /CN=509D7A005D22B25F29771D4736A9F3273A87402B
Certificate serial:       12219CF5B5AA806E0BBFC636643902ED7A16B012
Authority key identifier: 50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e362e302f32342d3234203d3e20313336313237.roa
Signing time:             Sun 03 May 2026 02:29:54 +0000
ROA not before:           Sun 03 May 2026 02:24:54 +0000
ROA not after:            Sun 02 May 2027 02:29:54 +0000
asID:                     136127
IP address blocks:        103.97.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl
                          rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:21:9c:f5:b5:aa:80:6e:0b:bf:c6:36:64:39:02:ed:7a:16:b0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509D7A005D22B25F29771D4736A9F3273A87402B
        Validity
            Not Before: May  3 02:24:54 2026 GMT
            Not After : May  2 02:29:54 2027 GMT
        Subject: CN=537422B7BD88CFF9F00BF545C11B48E762819B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:f3:36:ea:f9:8e:3e:45:f6:f6:d1:9a:40:
                    d6:86:39:7b:b6:b2:9c:46:82:89:4f:9f:fd:66:b4:
                    95:9d:84:09:e0:80:22:6f:e4:ae:d9:61:8d:93:01:
                    e2:bd:15:06:00:48:78:6f:f7:e6:5f:f8:90:cf:c5:
                    8c:9e:88:75:c0:1a:ff:56:d3:c7:f4:f1:28:97:7e:
                    ee:34:b0:3a:97:2d:18:8d:06:1c:b7:8b:95:d2:3d:
                    cf:a0:5e:60:af:97:13:f1:15:0e:f1:ff:0a:1b:5a:
                    69:f5:93:99:0b:df:7d:24:51:83:0c:a9:9e:17:20:
                    a4:b0:90:80:6e:81:5e:4d:28:86:8a:67:fd:69:ca:
                    ac:87:26:30:04:9a:04:f8:f6:4c:31:37:f2:10:c1:
                    5c:65:21:6c:3d:fd:ea:be:c7:f2:39:52:99:4c:84:
                    6a:a5:c2:71:4d:9a:63:a8:72:ff:b6:4b:ea:a0:69:
                    7e:04:98:0b:43:dd:d6:04:e1:f5:c1:91:c9:e3:60:
                    5c:ca:fa:43:11:52:06:9b:c6:be:83:36:73:5c:e5:
                    e0:33:75:72:c4:c5:9a:25:90:c5:13:fb:90:c8:b0:
                    f4:a3:22:28:3f:9a:cb:77:fd:f0:80:71:d1:85:b6:
                    84:3e:be:26:55:b0:77:07:3c:ab:8d:ef:c1:6a:e6:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:74:22:B7:BD:88:CF:F9:F0:0B:F5:45:C1:1B:48:E7:62:81:9B:2D
            X509v3 Authority Key Identifier:
                keyid:50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e362e302f32342d3234203d3e20313336313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e1:19:24:dd:c7:e3:f4:c2:24:e5:f9:d2:86:09:3d:27:8f:
         ae:d4:4e:da:e7:a4:fb:2a:44:9d:ca:4b:8e:c8:88:fc:e9:b1:
         05:3f:a1:67:6c:3b:b5:22:52:df:34:63:f4:4b:6c:55:6d:98:
         97:1a:a2:a6:d8:2a:59:30:07:5e:36:ce:0c:b2:fe:31:86:fd:
         14:b8:77:79:e4:78:4b:44:34:65:f6:b8:96:fc:d6:6e:db:90:
         db:b0:c5:9c:33:76:10:09:4a:e6:fb:76:d3:6b:55:d7:b0:b8:
         82:1c:c7:c7:3b:85:2f:e1:86:fe:f3:91:01:da:b0:ce:34:0a:
         86:0a:44:33:ec:6f:56:dd:ed:de:02:d7:5d:4d:fe:f8:fc:a6:
         43:cd:00:61:61:f0:a9:ba:80:ea:56:83:b8:a6:9c:b8:ef:42:
         c9:c1:8f:43:32:9c:cb:dc:b9:c2:29:75:c8:ec:af:19:93:5e:
         a9:71:18:4e:26:18:a6:43:ce:d6:2c:4a:7c:fe:06:58:12:61:
         30:6f:d7:6d:9e:09:2a:93:a3:d5:7f:04:a4:9b:46:4e:e1:23:
         a7:26:bb:cb:73:20:fb:6d:3a:c8:1a:17:7e:27:96:c3:4c:8e:
         ba:7d:a1:c2:45:d1:b5:0a:a5:41:b4:05:bb:3a:6b:80:f2:37:
         13:f0:e4:82
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUEiGc9bWqgG4Lv8Y2ZDkC7XoWsBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA5RDdBMDA1RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjcz
QTg3NDAyQjAeFw0yNjA1MDMwMjI0NTRaFw0yNzA1MDIwMjI5NTRaMDMxMTAvBgNV
BAMTKDUzNzQyMkI3QkQ4OENGRjlGMDBCRjU0NUMxMUI0OEU3NjI4MTlCMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDesvM26vmOPkX29tGaQNaGOXu2
spxGgolPn/1mtJWdhAnggCJv5K7ZYY2TAeK9FQYASHhv9+Zf+JDPxYyeiHXAGv9W
08f08SiXfu40sDqXLRiNBhy3i5XSPc+gXmCvlxPxFQ7x/wobWmn1k5kL330kUYMM
qZ4XIKSwkIBugV5NKIaKZ/1pyqyHJjAEmgT49kwxN/IQwVxlIWw9/eq+x/I5UplM
hGqlwnFNmmOocv+2S+qgaX4EmAtD3dYE4fXBkcnjYFzK+kMRUgabxr6DNnNc5eAz
dXLExZolkMUT+5DIsPSjIig/mst3/fCAcdGFtoQ+viZVsHcHPKuN78Fq5ukZAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUU3Qit72Iz/nwC/VFwRtI52KBmy0wHwYDVR0j
BBgwFoAUUJ16AF0isl8pdx1HNqnzJzqHQCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDRiMjczMDMtOWUzZC00ZDQyLWFmMjUtNmEwZjExODA4ZjI3LzAvNTA5RDdBMDA1
RDIyQjI1RjI5NzcxRDQ3MzZBOUYzMjczQTg3NDAyQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MDlEN0EwMDVEMjJCMjVGMjk3NzFENDczNkE5RjMyNzNBODc0
MDJCLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ0YjI3MzAzLTllM2QtNGQ0Mi1h
ZjI1LTZhMGYxMTgwOGYyNy8wLzMxMzAzMzJlMzkzNzJlMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzYzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnYQYwDQYJKoZIhvcN
AQELBQADggEBADnhGSTdx+P0wiTl+dKGCT0nj67UTtrnpPsqRJ3KS47IiPzpsQU/
oWdsO7UiUt80Y/RLbFVtmJcaoqbYKlkwB142zgyy/jGG/RS4d3nkeEtENGX2uJb8
1m7bkNuwxZwzdhAJSub7dtNrVdewuIIcx8c7hS/hhv7zkQHasM40CoYKRDPsb1bd
7d4C111N/vj8pkPNAGFh8Km6gOpWg7imnLjvQsnBj0MynMvcucIpdcjsrxmTXqlx
GE4mGKZDztYsSnz+BlgSYTBv122eCSqTo9V/BKSbRk7hI6cmu8tzIPttOsgaF34n
lsNMjrp9ocJF0bUKpUG0Bbs6a4DyNxPw5II=
-----END CERTIFICATE-----
Generated at Wed May 13 08:27:39 2026 by rpki-client