Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36372e302f32342d3234203d3e203539313538.roa
File:                     3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (raw, json)
Hash identifier:          Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=
Subject key identifier:   7F:E5:C2:43:51:CA:09:05:6E:85:02:AC:71:61:5D:AD:D0:32:9D:3C
Certificate issuer:       /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
Certificate serial:       338BB877E84517E3AC714C13180C97F393CC99F2
Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36372e302f32342d3234203d3e203539313538.roa
Signing time:             Sun 03 May 2026 02:31:15 +0000
ROA not before:           Sun 03 May 2026 02:26:15 +0000
ROA not after:            Sun 02 May 2027 02:31:15 +0000
asID:                     59158
IP address blocks:        103.224.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl
                          rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8b:b8:77:e8:45:17:e3:ac:71:4c:13:18:0c:97:f3:93:cc:99:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
        Validity
            Not Before: May  3 02:26:15 2026 GMT
            Not After : May  2 02:31:15 2027 GMT
        Subject: CN=7FE5C24351CA09056E8502AC71615DADD0329D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:b8:1a:d9:22:65:32:a9:48:7b:1e:e7:dd:
                    d0:de:20:93:0d:56:71:77:dc:35:71:ce:76:e9:36:
                    e4:49:1c:89:c8:e2:b6:60:84:83:0d:4f:a5:8a:87:
                    b6:54:56:16:55:f3:04:23:d7:49:c8:3c:80:3a:8f:
                    d4:45:91:c0:64:f0:3f:f7:5b:0e:d2:ea:3f:84:c5:
                    92:c5:24:d7:2d:ec:b5:09:26:fc:89:3c:84:48:13:
                    38:4e:1a:ed:35:15:59:6d:98:70:34:ed:29:00:94:
                    10:3f:1c:39:d2:92:02:17:e7:b0:29:1d:89:f6:2d:
                    64:87:57:56:a3:30:93:0d:d7:14:eb:96:9f:c0:67:
                    89:87:d4:29:8f:8b:86:86:1c:d6:f3:b9:8f:7d:e7:
                    1b:ae:bf:e4:e7:08:6c:2f:d1:2b:8a:ad:eb:b9:23:
                    f2:23:69:d6:62:3b:d6:e4:c2:c5:ef:b2:00:4e:4b:
                    57:21:84:b9:84:a9:78:5e:5a:b3:20:ad:18:e3:f7:
                    59:40:37:a0:f5:d3:bc:a0:4c:eb:f9:a0:40:1b:86:
                    b6:62:4a:11:81:24:e2:94:d1:05:71:79:f5:ca:eb:
                    cb:81:ba:51:06:18:f7:b7:3c:2e:65:bc:72:09:7e:
                    62:6f:ba:82:04:12:2a:a6:e3:72:2a:fc:7a:4f:82:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:C2:43:51:CA:09:05:6E:85:02:AC:71:61:5D:AD:D0:32:9D:3C
            X509v3 Authority Key Identifier:
                keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36372e302f32342d3234203d3e203539313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:0a:45:1c:c4:1b:73:ef:d7:5a:b8:bc:4e:8e:f6:85:33:6c:
         b5:ee:58:22:79:4b:09:b6:7f:d3:b7:31:e2:8c:63:be:a6:61:
         fb:24:e0:b5:42:9d:71:c3:24:65:5e:09:7f:38:da:e8:4f:d4:
         e5:92:24:7e:5d:0a:7a:5f:37:22:c7:8a:40:f8:8d:18:60:b5:
         0d:57:46:8a:28:62:57:20:54:9c:59:79:4a:88:0b:b0:8f:e5:
         a4:d0:f6:ca:69:3d:f0:ef:cc:75:bc:6d:a0:25:ff:ee:55:b1:
         99:34:8e:5c:e8:cb:7c:80:53:19:e7:e8:21:0c:ed:08:4b:40:
         94:e1:7c:eb:8a:b2:f7:0a:c0:59:82:e3:6d:a9:c2:ba:31:98:
         f8:53:2a:2f:53:e8:93:0e:f4:5b:a5:fc:23:2c:df:29:47:a8:
         3a:88:e5:ca:d2:f0:6d:61:03:bf:f2:8b:53:5b:8d:e5:59:1e:
         49:a1:77:d5:67:f1:f3:9a:3a:bc:e6:fe:26:37:7a:15:90:9e:
         dc:f8:88:61:15:b1:73:c9:b6:a7:1b:e4:0d:44:88:3e:5c:72:
         f7:fa:2e:02:b9:eb:13:f3:a7:9e:20:a4:29:80:74:75:5d:c1:
         ee:81:31:6c:7e:59:27:2b:15:b4:d9:49:ae:b7:51:d4:e8:86:
         15:f4:0b:05
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUM4u4d+hFF+OscUwTGAyX85PMmfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENCRThFMDcwQzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNG
Q0Q5QThBRTAeFw0yNjA1MDMwMjI2MTVaFw0yNzA1MDIwMjMxMTVaMDMxMTAvBgNV
BAMTKDdGRTVDMjQzNTFDQTA5MDU2RTg1MDJBQzcxNjE1REFERDAzMjlEM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyurga2SJlMqlIex7n3dDeIJMN
VnF33DVxznbpNuRJHInI4rZghIMNT6WKh7ZUVhZV8wQj10nIPIA6j9RFkcBk8D/3
Ww7S6j+ExZLFJNct7LUJJvyJPIRIEzhOGu01FVltmHA07SkAlBA/HDnSkgIX57Ap
HYn2LWSHV1ajMJMN1xTrlp/AZ4mH1CmPi4aGHNbzuY995xuuv+TnCGwv0SuKreu5
I/IjadZiO9bkwsXvsgBOS1chhLmEqXheWrMgrRjj91lAN6D107ygTOv5oEAbhrZi
ShGBJOKU0QVxefXK68uBulEGGPe3PC5lvHIJfmJvuoIEEiqm43Iq/HpPgj8TAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUf+XCQ1HKCQVuhQKscWFdrdAynTwwHwYDVR0j
BBgwFoAUTL6OBwyTDnsCvlZXxVKObPzZqK4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGE4ZDU0YWUtODcwZC00MzQ4LWFiNTgtMzAwOTBhNzYwYTM2LzAvNENCRThFMDcw
QzkzMEU3QjAyQkU1NjU3QzU1MjhFNkNGQ0Q5QThBRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80Q0JFOEUwNzBDOTMwRTdCMDJCRTU2NTdDNTUyOEU2Q0ZDRDlB
OEFFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRhOGQ1NGFlLTg3MGQtNDM0OC1h
YjU4LTMwMDkwYTc2MGEzNi8wLzMxMzAzMzJlMzIzMjM0MmUzNjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfgQzANBgkqhkiG
9w0BAQsFAAOCAQEADgpFHMQbc+/XWri8To72hTNste5YInlLCbZ/07cx4oxjvqZh
+yTgtUKdccMkZV4Jfzja6E/U5ZIkfl0Kel83IseKQPiNGGC1DVdGiihiVyBUnFl5
SogLsI/lpND2ymk98O/MdbxtoCX/7lWxmTSOXOjLfIBTGefoIQztCEtAlOF864qy
9wrAWYLjbanCujGY+FMqL1Pokw70W6X8IyzfKUeoOojlytLwbWEDv/KLU1uN5Vke
SaF31Wfx85o6vOb+Jjd6FZCe3PiIYRWxc8m2pxvkDUSIPlxy9/ouArnrE/OnniCk
KYB0dV3B7oExbH5ZJysVtNlJrrdR1OiGFfQLBQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:22 2026 by rpki-client