Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa
File:                     3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (raw, json)
Hash identifier:          9YggKsEBGn5Gd1VV4jz9L7TeAWUPUe5ZII5MPpPBGag=
Subject key identifier:   7E:D3:AA:76:56:AB:2F:25:75:30:3B:5E:4C:D1:26:79:76:FB:DE:91
Certificate issuer:       /CN=54569AA4A6C5AB27434FC77EF135D3CB9F3718C4
Certificate serial:       65B22D9366D6E665C4B3A05AB2820947338BA20C
Authority key identifier: 54:56:9A:A4:A6:C5:AB:27:43:4F:C7:7E:F1:35:D3:CB:9F:37:18:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54569AA4A6C5AB27434FC77EF135D3CB9F3718C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa
Signing time:             Sun 03 May 2026 02:36:59 +0000
ROA not before:           Sun 03 May 2026 02:31:59 +0000
ROA not after:            Sun 02 May 2027 02:36:59 +0000
asID:                     139382
IP address blocks:        103.142.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/54569AA4A6C5AB27434FC77EF135D3CB9F3718C4.crl
                          rsync://rpki-rsync.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/54569AA4A6C5AB27434FC77EF135D3CB9F3718C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54569AA4A6C5AB27434FC77EF135D3CB9F3718C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b2:2d:93:66:d6:e6:65:c4:b3:a0:5a:b2:82:09:47:33:8b:a2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54569AA4A6C5AB27434FC77EF135D3CB9F3718C4
        Validity
            Not Before: May  3 02:31:59 2026 GMT
            Not After : May  2 02:36:59 2027 GMT
        Subject: CN=7ED3AA7656AB2F2575303B5E4CD1267976FBDE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:25:d0:4c:fc:55:d0:38:6c:3f:0e:5b:a9:
                    d9:ec:be:bb:dd:a8:58:23:11:e8:0e:9f:46:97:32:
                    f2:ca:1b:3b:2b:62:31:db:6f:f6:8e:9a:01:9a:cc:
                    38:2b:2e:ea:bf:8b:62:ff:55:b7:37:17:5b:fe:93:
                    93:d0:d3:27:ad:68:f9:9f:7a:8e:4f:1a:97:cd:a7:
                    46:19:5a:cc:30:fa:04:c3:10:22:de:be:cd:b8:28:
                    f4:69:83:54:5a:90:bb:a4:c7:07:92:30:63:41:e5:
                    a9:3e:20:72:ed:9d:6e:fa:1e:58:96:71:9c:e4:16:
                    ea:86:3c:97:ea:4f:48:8c:9a:31:14:36:8e:0c:4d:
                    37:7c:9c:4b:78:43:7c:aa:a9:9e:02:ce:65:0e:b0:
                    16:80:c1:20:ab:16:08:0b:ea:e1:dc:06:2e:e4:52:
                    1b:52:9e:32:69:90:b5:0b:a3:60:57:7f:aa:57:9d:
                    d0:8a:38:a8:18:00:9d:c7:e1:22:42:1d:0c:2d:2c:
                    13:46:54:6b:83:66:81:45:46:0c:a9:c9:5a:53:85:
                    c9:67:09:e7:98:65:50:b4:c0:22:94:c4:51:77:c9:
                    54:32:e0:07:c5:95:84:8f:a2:40:88:84:07:5d:5a:
                    dd:63:31:f6:8c:12:c8:3f:9a:23:29:05:85:3a:f4:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D3:AA:76:56:AB:2F:25:75:30:3B:5E:4C:D1:26:79:76:FB:DE:91
            X509v3 Authority Key Identifier:
                keyid:54:56:9A:A4:A6:C5:AB:27:43:4F:C7:7E:F1:35:D3:CB:9F:37:18:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/54569AA4A6C5AB27434FC77EF135D3CB9F3718C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54569AA4A6C5AB27434FC77EF135D3CB9F3718C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:38:80:a7:bf:84:79:21:16:1a:92:d4:fa:1a:0f:46:2f:aa:
         2a:e7:50:76:67:fa:d7:91:0b:88:56:22:4e:08:50:e4:83:a0:
         4a:ca:5b:c8:f2:b1:c8:97:cf:c8:4d:aa:8a:66:5b:a1:83:7e:
         9b:ba:b6:b2:3a:94:fc:11:d7:cc:3a:27:42:8e:ce:12:09:0f:
         ec:60:cd:e3:1b:15:79:eb:0c:90:e6:88:88:46:e1:96:ca:e5:
         45:84:80:93:3e:25:6f:39:19:ea:cf:a1:08:14:32:4e:a9:84:
         1c:a5:8e:8c:38:8c:1f:41:5a:a6:03:43:15:34:4f:fa:e5:8f:
         d6:b2:26:f2:e1:01:a7:4c:31:76:23:97:03:b8:83:12:5c:33:
         0c:7d:87:66:00:b8:90:a7:de:bc:89:f1:d9:fc:5a:a2:c8:b1:
         84:5f:e7:fb:9b:0d:cd:ed:a4:94:6d:a2:e4:4a:15:78:83:ee:
         fb:c6:b8:12:c3:07:5a:65:37:22:b4:69:a4:57:b8:e7:51:a2:
         e2:75:80:1f:02:e1:25:a9:8c:6c:53:07:46:33:bf:7e:ad:d9:
         46:8f:c3:8e:11:d9:e0:50:d9:18:16:a4:ce:8d:ac:6d:bd:55:
         26:61:22:43:79:5f:47:7f:8e:79:a8:5e:aa:d9:bb:a5:4e:1a:
         d3:9b:f7:ee
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZbItk2bW5mXEs6BasoIJRzOLogwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ1NjlBQTRBNkM1QUIyNzQzNEZDNzdFRjEzNUQzQ0I5
RjM3MThDNDAeFw0yNjA1MDMwMjMxNTlaFw0yNzA1MDIwMjM2NTlaMDMxMTAvBgNV
BAMTKDdFRDNBQTc2NTZBQjJGMjU3NTMwM0I1RTRDRDEyNjc5NzZGQkRFOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rSXQTPxV0DhsPw5bqdnsvrvd
qFgjEegOn0aXMvLKGzsrYjHbb/aOmgGazDgrLuq/i2L/Vbc3F1v+k5PQ0yetaPmf
eo5PGpfNp0YZWsww+gTDECLevs24KPRpg1RakLukxweSMGNB5ak+IHLtnW76HliW
cZzkFuqGPJfqT0iMmjEUNo4MTTd8nEt4Q3yqqZ4CzmUOsBaAwSCrFggL6uHcBi7k
UhtSnjJpkLULo2BXf6pXndCKOKgYAJ3H4SJCHQwtLBNGVGuDZoFFRgypyVpThcln
CeeYZVC0wCKUxFF3yVQy4AfFlYSPokCIhAddWt1jMfaMEsg/miMpBYU69IFjAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUftOqdlarLyV1MDteTNEmeXb73pEwHwYDVR0j
BBgwFoAUVFaapKbFqydDT8d+8TXTy583GMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWU0MWJhN2UtNmM0Mi00YzIyLWIxM2MtNTQ4ZmM3MjcyYTNkLzAvNTQ1NjlBQTRB
NkM1QUIyNzQzNEZDNzdFRjEzNUQzQ0I5RjM3MThDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NDU2OUFBNEE2QzVBQjI3NDM0RkM3N0VGMTM1RDNDQjlGMzcx
OEM0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVlNDFiYTdlLTZjNDItNGMyMi1i
MTNjLTU0OGZjNzI3MmEzZC8wLzMxMzAzMzJlMzEzNDMyMmUzMjM0MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjvAwDQYJ
KoZIhvcNAQELBQADggEBAFg4gKe/hHkhFhqS1PoaD0YvqirnUHZn+teRC4hWIk4I
UOSDoErKW8jysciXz8hNqopmW6GDfpu6trI6lPwR18w6J0KOzhIJD+xgzeMbFXnr
DJDmiIhG4ZbK5UWEgJM+JW85GerPoQgUMk6phByljow4jB9BWqYDQxU0T/rlj9ay
JvLhAadMMXYjlwO4gxJcMwx9h2YAuJCn3ryJ8dn8WqLIsYRf5/ubDc3tpJRtouRK
FXiD7vvGuBLDB1plNyK0aaRXuOdRouJ1gB8C4SWpjGxTB0Yzv36t2UaPw44R2eBQ
2RgWpM6NrG29VSZhIkN5X0d/jnmoXqrZu6VOGtOb9+4=
-----END CERTIFICATE-----
Generated at Wed May 13 07:46:04 2026 by rpki-client