Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa
File:                     3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (raw, json)
Hash identifier:          HB5+30LBsGIIfrOeoz4NikxPDJ/kMoZQRDczvkwPbL0=
Subject key identifier:   15:F9:97:E4:31:80:09:C7:65:11:E7:54:FF:AF:7C:05:51:8E:B9:7B
Certificate issuer:       /CN=A58E55B7CCE754B9CB71A0C874161981234B001D
Certificate serial:       2D9699CDDFF46CBFBF18FBAF4278E0717FC3AE76
Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa
Signing time:             Sun 03 May 2026 02:30:54 +0000
ROA not before:           Sun 03 May 2026 02:25:54 +0000
ROA not after:            Sun 02 May 2027 02:30:54 +0000
asID:                     141073
IP address blocks:        103.155.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl
                          rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:96:99:cd:df:f4:6c:bf:bf:18:fb:af:42:78:e0:71:7f:c3:ae:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D
        Validity
            Not Before: May  3 02:25:54 2026 GMT
            Not After : May  2 02:30:54 2027 GMT
        Subject: CN=15F997E4318009C76511E754FFAF7C05518EB97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:d1:65:f8:82:fc:27:03:0a:d2:ce:71:83:
                    00:9c:94:0f:5b:7e:5e:fb:bd:10:6e:ec:e3:66:e5:
                    ad:90:ae:28:47:fe:f7:19:70:42:3e:55:2a:ee:48:
                    d5:46:f3:a2:8d:60:f4:21:38:5f:7a:d5:ce:24:6a:
                    d5:76:5e:40:27:ab:27:eb:f6:92:db:d7:8c:77:1f:
                    c0:23:84:8a:d9:be:f7:16:2e:7d:e6:15:54:8b:92:
                    1c:fa:04:7c:f2:42:59:d9:4a:90:42:03:7f:7a:d9:
                    53:08:bb:d8:81:20:38:fa:fe:51:77:42:a8:f2:7c:
                    2e:66:5b:1d:7c:33:7d:a3:31:b5:27:5d:fe:ea:42:
                    27:e5:18:77:57:c1:80:48:df:9b:50:7f:63:c4:c2:
                    a2:34:34:18:bf:a7:6d:06:df:b7:75:9a:af:b9:b4:
                    d7:8d:0f:ab:6f:75:d6:76:8f:f7:67:c9:97:79:64:
                    23:f8:bd:f9:6f:2c:fc:98:10:92:76:4b:19:b0:af:
                    b1:0c:0d:56:fb:35:5e:12:25:cc:b3:64:12:9e:21:
                    72:e1:e0:ec:c6:80:b5:0f:d2:ee:10:c7:86:c4:7b:
                    25:a5:fb:25:ea:d5:7f:14:42:26:0b:62:aa:d5:a5:
                    8e:f5:a2:48:f4:01:a5:7b:0a:d8:55:8a:44:91:e2:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F9:97:E4:31:80:09:C7:65:11:E7:54:FF:AF:7C:05:51:8E:B9:7B
            X509v3 Authority Key Identifier:
                keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:97:51:9f:26:69:cc:7d:42:e9:58:c0:5f:89:78:41:f7:0c:
         1b:fe:45:96:a2:45:16:90:37:72:ba:d2:2e:9a:6b:8b:c4:93:
         de:82:fb:58:5d:18:d0:d3:e0:23:a5:84:92:e4:b8:a1:ba:e4:
         d5:a7:6e:4f:33:93:b3:c8:5a:96:34:4b:58:0e:75:26:91:af:
         e2:41:5c:14:c1:7f:88:5e:00:9c:e9:c4:c5:cf:ce:72:53:7d:
         08:c3:55:53:33:e5:fe:60:df:6c:33:e5:ac:82:58:62:a9:20:
         c0:ea:ef:a8:dd:ab:ea:32:9a:5c:66:96:60:93:68:c9:ff:e0:
         37:c4:af:5a:8c:66:bc:76:00:fe:47:c3:4f:65:cb:35:42:e3:
         23:9c:0d:d9:72:8b:8a:a7:78:34:59:aa:0a:82:a7:b2:5b:b2:
         f9:00:c8:ee:71:92:7e:68:4a:8e:52:66:23:9d:48:96:4c:84:
         24:e0:96:d0:28:15:b0:8b:b0:9e:02:40:8f:c4:a8:e9:7e:73:
         8f:9d:e3:c0:03:87:95:65:c4:90:b2:ec:15:9f:d3:31:9e:3b:
         5a:14:ec:f4:8d:d9:14:68:bb:f2:b6:65:bb:0c:38:79:89:94:
         54:c6:d4:0b:11:6c:d8:9f:56:4b:86:df:91:aa:25:b3:c2:7c:
         9a:64:8d:d4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIULZaZzd/0bL+/GPuvQnjgcX/DrnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU4RTU1QjdDQ0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEy
MzRCMDAxRDAeFw0yNjA1MDMwMjI1NTRaFw0yNzA1MDIwMjMwNTRaMDMxMTAvBgNV
BAMTKDE1Rjk5N0U0MzE4MDA5Qzc2NTExRTc1NEZGQUY3QzA1NTE4RUI5N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUNFl+IL8JwMK0s5xgwCclA9b
fl77vRBu7ONm5a2QrihH/vcZcEI+VSruSNVG86KNYPQhOF961c4katV2XkAnqyfr
9pLb14x3H8AjhIrZvvcWLn3mFVSLkhz6BHzyQlnZSpBCA3962VMIu9iBIDj6/lF3
QqjyfC5mWx18M32jMbUnXf7qQiflGHdXwYBI35tQf2PEwqI0NBi/p20G37d1mq+5
tNeND6tvddZ2j/dnyZd5ZCP4vflvLPyYEJJ2Sxmwr7EMDVb7NV4SJcyzZBKeIXLh
4OzGgLUP0u4Qx4bEeyWl+yXq1X8UQiYLYqrVpY71okj0AaV7CthVikSR4qSlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUFfmX5DGACcdlEedU/698BVGOuXswHwYDVR0j
BBgwFoAUpY5Vt8znVLnLcaDIdBYZgSNLAB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDg1OGY4NWMtYTQ1OC00YTU4LWJiZGUtNGJmYjM0M2RjNGIwLzAvQTU4RTU1QjdD
Q0U3NTRCOUNCNzFBMEM4NzQxNjE5ODEyMzRCMDAxRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNThFNTVCN0NDRTc1NEI5Q0I3MUEwQzg3NDE2MTk4MTIzNEIw
MDFELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ4NThmODVjLWE0NTgtNGE1OC1i
YmRlLTRiZmIzNDNkYzRiMC8wLzMxMzAzMzJlMzEzNTM1MmUzMjMwMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnm8gwDQYJ
KoZIhvcNAQELBQADggEBACGXUZ8macx9QulYwF+JeEH3DBv+RZaiRRaQN3K60i6a
a4vEk96C+1hdGNDT4COlhJLkuKG65NWnbk8zk7PIWpY0S1gOdSaRr+JBXBTBf4he
AJzpxMXPznJTfQjDVVMz5f5g32wz5ayCWGKpIMDq76jdq+oymlxmlmCTaMn/4DfE
r1qMZrx2AP5Hw09lyzVC4yOcDdlyi4qneDRZqgqCp7JbsvkAyO5xkn5oSo5SZiOd
SJZMhCTgltAoFbCLsJ4CQI/EqOl+c4+d48ADh5VlxJCy7BWf0zGeO1oU7PSN2RRo
u/K2ZbsMOHmJlFTG1AsRbNifVkuG35GqJbPCfJpkjdQ=
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:50 2026 by rpki-client