Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa
File:                     3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (raw, json)
Hash identifier:          e88toI0gc+wSaORpU+rtaS/kGFnIHMmHOsK/AC+epi4=
Subject key identifier:   DB:0F:7F:F4:EB:24:B6:E1:EE:28:47:86:44:96:11:8C:EE:EE:11:FD
Certificate issuer:       /CN=6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3
Certificate serial:       13507A15CC8AEDB8E4CBB8D920362F575321AEC9
Authority key identifier: 6B:BA:CF:0D:AC:5B:15:BC:6C:F4:E5:BC:AD:44:67:6C:03:1B:A5:D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa
Signing time:             Sun 03 May 2026 02:40:45 +0000
ROA not before:           Sun 03 May 2026 02:35:45 +0000
ROA not after:            Sun 02 May 2027 02:40:45 +0000
asID:                     138855
IP address blocks:        103.169.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.crl
                          rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:50:7a:15:cc:8a:ed:b8:e4:cb:b8:d9:20:36:2f:57:53:21:ae:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3
        Validity
            Not Before: May  3 02:35:45 2026 GMT
            Not After : May  2 02:40:45 2027 GMT
        Subject: CN=DB0F7FF4EB24B6E1EE2847864496118CEEEE11FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:bf:9e:ac:6c:e4:02:ce:de:bb:e8:9a:13:
                    91:63:ca:8e:60:b7:9a:41:7d:74:9f:10:f4:f0:8d:
                    6f:1b:e4:58:cd:24:af:8c:94:c4:9f:82:08:b4:f2:
                    e2:62:9d:a2:4e:91:99:d8:5b:3f:3f:5d:39:ad:e0:
                    7e:34:21:c8:c7:fb:3b:d4:a2:09:9b:34:83:0e:5a:
                    c4:cc:79:9b:fd:8f:0e:d5:82:b4:42:7e:19:87:e0:
                    15:48:7e:42:1b:50:d6:e2:d4:d1:fd:4f:64:e5:b4:
                    8a:6a:4a:74:10:5a:ca:58:30:e3:61:1a:4d:ac:cb:
                    2d:74:22:e1:62:37:8c:94:28:55:fd:76:35:d8:6e:
                    b0:ce:94:fe:26:35:06:b7:81:b1:1c:e4:da:b0:73:
                    ac:b2:63:cf:ce:a0:5f:00:7a:fa:d2:68:51:ed:f5:
                    44:80:cc:de:45:28:30:bd:1d:58:de:15:2b:fb:e4:
                    b4:77:e5:af:84:cb:10:e8:fb:9e:a5:73:88:7f:3b:
                    90:41:e5:1c:bf:1b:db:49:d0:97:5b:4e:fd:2d:04:
                    de:85:6e:84:20:83:ca:56:3a:e5:99:3a:22:1a:e9:
                    60:77:34:72:b6:62:1d:21:10:d1:ae:45:a7:89:1a:
                    63:cd:4e:3f:63:47:fb:11:90:1e:1e:77:6f:ac:ca:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0F:7F:F4:EB:24:B6:E1:EE:28:47:86:44:96:11:8C:EE:EE:11:FD
            X509v3 Authority Key Identifier:
                keyid:6B:BA:CF:0D:AC:5B:15:BC:6C:F4:E5:BC:AD:44:67:6C:03:1B:A5:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6BBACF0DAC5B15BC6CF4E5BCAD44676C031BA5D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:71:1b:8e:10:fc:00:f9:c9:64:03:c8:42:4b:20:02:bf:c4:
         11:d2:8b:78:ae:0b:62:be:5b:04:b0:06:f2:d6:8e:1d:06:90:
         69:ac:39:0d:07:f0:76:61:ba:9c:74:bb:d6:f5:84:8a:68:d5:
         49:25:c0:6d:0d:50:ff:2b:00:16:cd:73:12:93:49:7e:6f:57:
         66:f2:3a:9e:6d:d7:0d:af:28:ff:9c:88:ef:f2:1f:6b:20:76:
         11:b4:77:77:1c:6f:02:f5:2c:3b:20:41:b0:90:e1:0d:dc:f3:
         ed:ac:49:d0:91:85:77:dc:25:34:d3:00:e8:d4:2d:1b:d2:87:
         f6:cb:5e:0f:af:a9:96:e3:7c:6e:1f:9e:da:65:00:2c:c4:9e:
         71:4e:e4:bd:94:33:c1:f4:72:34:7b:72:fa:50:85:0f:05:20:
         3e:cd:39:5c:e9:63:f0:5d:0f:74:02:a3:85:82:7c:ce:60:0b:
         66:93:df:59:d2:96:68:67:c6:8d:0a:cd:08:c9:0a:d7:d5:fc:
         ce:00:ff:e0:ac:9c:5e:ef:e3:e9:72:ba:9c:cb:e9:d6:08:b4:
         1f:a2:f5:30:0d:e0:d3:c3:46:2a:03:aa:eb:72:26:03:cf:fd:
         f0:3e:7d:3d:61:64:f4:c0:b2:05:b6:41:d9:26:17:ae:c9:2f:
         02:15:34:55
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUE1B6FcyK7bjky7jZIDYvV1MhrskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJCQUNGMERBQzVCMTVCQzZDRjRFNUJDQUQ0NDY3NkMw
MzFCQTVEMzAeFw0yNjA1MDMwMjM1NDVaFw0yNzA1MDIwMjQwNDVaMDMxMTAvBgNV
BAMTKERCMEY3RkY0RUIyNEI2RTFFRTI4NDc4NjQ0OTYxMThDRUVFRTExRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhb+erGzkAs7eu+iaE5Fjyo5g
t5pBfXSfEPTwjW8b5FjNJK+MlMSfggi08uJinaJOkZnYWz8/XTmt4H40IcjH+zvU
ogmbNIMOWsTMeZv9jw7VgrRCfhmH4BVIfkIbUNbi1NH9T2TltIpqSnQQWspYMONh
Gk2syy10IuFiN4yUKFX9djXYbrDOlP4mNQa3gbEc5Nqwc6yyY8/OoF8AevrSaFHt
9USAzN5FKDC9HVjeFSv75LR35a+EyxDo+56lc4h/O5BB5Ry/G9tJ0JdbTv0tBN6F
boQgg8pWOuWZOiIa6WB3NHK2Yh0hENGuRaeJGmPNTj9jR/sRkB4ed2+sykNbAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU2w9/9OsktuHuKEeGRJYRjO7uEf0wHwYDVR0j
BBgwFoAUa7rPDaxbFbxs9OW8rURnbAMbpdMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjlmZWFkOWQtZDdhNy00ODNiLThmMTctMzFiMzIzZDk3ZDhmLzAvNkJCQUNGMERB
QzVCMTVCQzZDRjRFNUJDQUQ0NDY3NkMwMzFCQTVEMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82QkJBQ0YwREFDNUIxNUJDNkNGNEU1QkNBRDQ0Njc2QzAzMUJB
NUQzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5ZmVhZDlkLWQ3YTctNDgzYi04
ZjE3LTMxYjMyM2Q5N2Q4Zi8wLzMxMzAzMzJlMzEzNjM5MmUzMjMyMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqd4wDQYJ
KoZIhvcNAQELBQADggEBAD5xG44Q/AD5yWQDyEJLIAK/xBHSi3iuC2K+WwSwBvLW
jh0GkGmsOQ0H8HZhupx0u9b1hIpo1UklwG0NUP8rABbNcxKTSX5vV2byOp5t1w2v
KP+ciO/yH2sgdhG0d3ccbwL1LDsgQbCQ4Q3c8+2sSdCRhXfcJTTTAOjULRvSh/bL
Xg+vqZbjfG4fntplACzEnnFO5L2UM8H0cjR7cvpQhQ8FID7NOVzpY/BdD3QCo4WC
fM5gC2aT31nSlmhnxo0KzQjJCtfV/M4A/+CsnF7v4+lyupzL6dYItB+i9TAN4NPD
RioDqutyJgPP/fA+fT1hZPTAsgW2QdkmF67JLwIVNFU=
-----END CERTIFICATE-----
Generated at Wed May 13 09:17:38 2026 by rpki-client