Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa
File:                     3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          ToMLJ3pcLgQVHFpR+P36bsRhCIyYQUx5khc4qK2J9zQ=
Subject key identifier:   B5:4A:AD:64:B6:F0:61:A9:E4:C3:F0:04:09:53:F6:8A:48:E9:A0:13
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       528FE0D024F9D5BFEBA95EB842ABB26718DF3825
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa
Signing time:             Sun 03 May 2026 02:39:52 +0000
ROA not before:           Sun 03 May 2026 02:34:52 +0000
ROA not after:            Sun 02 May 2027 02:39:52 +0000
asID:                     45298
IP address blocks:        103.247.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8f:e0:d0:24:f9:d5:bf:eb:a9:5e:b8:42:ab:b2:67:18:df:38:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:52 2026 GMT
            Not After : May  2 02:39:52 2027 GMT
        Subject: CN=B54AAD64B6F061A9E4C3F0040953F68A48E9A013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:5e:57:bd:d8:8e:7f:a7:ef:15:3c:3d:c7:
                    7b:9f:d4:cd:17:e6:71:dc:ad:cb:f4:94:a3:f2:1c:
                    4e:bd:3e:1f:2e:52:a9:04:d3:83:a9:85:a5:d8:33:
                    71:b8:52:a4:c8:de:e3:d6:af:42:ea:fd:ed:f5:7a:
                    40:a0:18:ee:8c:70:15:1f:17:df:f0:d5:3e:23:f5:
                    99:30:cc:59:25:96:e4:2e:74:b1:81:96:b1:2f:29:
                    ff:83:6e:71:43:5e:7e:73:36:9a:a2:18:0a:92:83:
                    1f:33:58:ce:42:72:1e:47:19:23:8e:45:65:8c:21:
                    c8:bf:8f:05:8c:2d:85:26:b5:4a:d2:61:56:70:62:
                    5a:a5:6c:30:35:32:1a:85:48:65:c9:d1:ba:01:6d:
                    e7:0c:6c:af:47:01:34:14:1d:97:4b:e3:c7:9b:8c:
                    98:4a:54:f6:62:80:1b:56:d2:9a:1b:e5:cb:43:f6:
                    5f:69:80:57:0c:77:3e:04:a8:00:60:30:4f:84:63:
                    c1:dc:9b:f2:76:9d:ab:85:21:38:92:78:0d:e2:8b:
                    74:60:60:7f:e4:71:15:67:b6:a8:e7:ad:c9:10:c3:
                    d4:88:86:54:af:64:f2:17:5b:e4:11:91:63:71:02:
                    e4:29:8f:7f:ab:4e:75:ce:de:03:69:2c:1d:24:3e:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4A:AD:64:B6:F0:61:A9:E4:C3:F0:04:09:53:F6:8A:48:E9:A0:13
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:fa:59:7f:9a:ec:54:14:af:76:ab:9e:7d:c3:cc:0d:53:8f:
         3f:c1:8d:8c:91:42:2c:1d:79:e4:cd:9a:05:25:eb:20:85:0d:
         f5:23:e6:8d:78:6c:43:ee:a6:4f:75:85:d8:5e:29:52:29:b3:
         28:73:73:14:b7:be:1d:91:f2:79:1f:8a:fe:c6:ac:01:6b:e1:
         15:85:2d:e4:aa:e2:2e:79:14:4e:bf:04:2d:7e:86:f5:b7:72:
         42:56:09:ff:48:33:11:d0:21:1b:84:b4:b1:0b:9e:09:b0:a7:
         38:39:58:aa:23:da:d2:ac:a2:13:fa:1c:49:c6:37:a3:82:ce:
         b5:80:34:9c:4c:0e:b2:f2:58:92:cd:c5:4c:6f:77:33:c0:37:
         0c:d4:15:22:6e:3f:9e:ed:80:43:c3:b5:fd:20:13:83:19:10:
         82:ff:be:3b:03:15:34:e7:7d:93:28:62:f1:38:39:0b:8c:99:
         59:49:31:6e:93:ea:d9:65:dd:5f:a6:ca:a5:54:c7:fa:fd:6c:
         42:49:f8:48:db:4e:40:b3:09:e9:97:87:7d:2a:83:83:a7:10:
         98:33:40:bb:3f:fb:88:6b:d0:69:ac:fd:66:17:0b:97:af:03:
         ac:38:ca:3e:39:3f:87:4c:41:70:66:c1:18:ea:0a:c7:b0:9a:
         86:34:dd:7b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUo/g0CT51b/rqV64QquyZxjfOCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE0RUFFNkRGN0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NG
MjcwRjdBMDAeFw0yNjA1MDMwMjM0NTJaFw0yNzA1MDIwMjM5NTJaMDMxMTAvBgNV
BAMTKEI1NEFBRDY0QjZGMDYxQTlFNEMzRjAwNDA5NTNGNjhBNDhFOUEwMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDl5XvdiOf6fvFTw9x3uf1M0X
5nHcrcv0lKPyHE69Ph8uUqkE04OphaXYM3G4UqTI3uPWr0Lq/e31ekCgGO6McBUf
F9/w1T4j9ZkwzFklluQudLGBlrEvKf+DbnFDXn5zNpqiGAqSgx8zWM5Cch5HGSOO
RWWMIci/jwWMLYUmtUrSYVZwYlqlbDA1MhqFSGXJ0boBbecMbK9HATQUHZdL48eb
jJhKVPZigBtW0pob5ctD9l9pgFcMdz4EqABgME+EY8Hcm/J2nauFITiSeA3ii3Rg
YH/kcRVntqjnrckQw9SIhlSvZPIXW+QRkWNxAuQpj3+rTnXO3gNpLB0kPqWxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUtUqtZLbwYankw/AECVP2ikjpoBMwHwYDVR0j
BBgwFoAUSk6ubffr+NW0QE265IdIzPJw96AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjVlYzI1ZTQtOWFhOC00YmVmLTkwOTctYzBiZWMwYjI2NmE3LzAvNEE0RUFFNkRG
N0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NGMjcwRjdBMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QTRFQUU2REY3RUJGOEQ1QjQ0MDREQkFFNDg3NDhDQ0YyNzBG
N0EwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05
MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzAzMzJlMzIzNDM3MmUzMjM0MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/f0MA0GCSqG
SIb3DQEBCwUAA4IBAQAv+ll/muxUFK92q559w8wNU48/wY2MkUIsHXnkzZoFJesg
hQ31I+aNeGxD7qZPdYXYXilSKbMoc3MUt74dkfJ5H4r+xqwBa+EVhS3kquIueRRO
vwQtfob1t3JCVgn/SDMR0CEbhLSxC54JsKc4OViqI9rSrKIT+hxJxjejgs61gDSc
TA6y8liSzcVMb3czwDcM1BUibj+e7YBDw7X9IBODGRCC/747AxU0532TKGLxODkL
jJlZSTFuk+rZZd1fpsqlVMf6/WxCSfhI205Aswnpl4d9KoODpxCYM0C7P/uIa9Bp
rP1mFwuXrwOsOMo+OT+HTEFwZsEY6grHsJqGNN17
-----END CERTIFICATE-----
Generated at Wed May 13 09:54:53 2026 by rpki-client