Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa
File:                     3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          cUKFA5F04PCCOl3p+R/RfwT0fJqfxISh9qfKau7cspg=
Subject key identifier:   78:6E:F1:B6:D4:18:AA:D0:EE:4F:9C:A3:BB:C2:B9:A1:6A:58:10:E4
Certificate issuer:       /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial:       7A505EF54E0A50CBFC35CD550BDA525F4AE12C9D
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa
Signing time:             Sun 03 May 2026 02:41:08 +0000
ROA not before:           Sun 03 May 2026 02:36:08 +0000
ROA not after:            Sun 02 May 2027 02:41:08 +0000
asID:                     38515
IP address blocks:        103.107.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:50:5e:f5:4e:0a:50:cb:fc:35:cd:55:0b:da:52:5f:4a:e1:2c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
        Validity
            Not Before: May  3 02:36:08 2026 GMT
            Not After : May  2 02:41:08 2027 GMT
        Subject: CN=786EF1B6D418AAD0EE4F9CA3BBC2B9A16A5810E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:2d:ae:d2:a6:8f:d7:1b:2f:78:c9:c6:57:
                    ca:c5:5a:20:8b:4d:bd:5a:89:c3:24:ae:e5:30:2c:
                    54:c1:79:7d:60:23:67:75:be:cd:ca:80:b9:bb:4a:
                    17:de:d9:b4:f6:2f:2c:c4:66:f5:52:91:dc:5d:ad:
                    d4:ea:3a:dd:49:61:f1:76:41:9b:3a:d6:9a:d2:46:
                    b3:34:15:71:5f:cf:4a:1b:e6:23:6b:5f:84:b9:fd:
                    25:67:00:54:4a:ba:ec:ab:53:0e:79:6f:6a:25:3d:
                    df:f5:6e:c1:b2:7c:66:6a:0c:1e:70:5a:8b:04:b8:
                    2f:db:c9:b6:fc:90:07:ef:1f:9a:df:5d:98:ae:79:
                    b7:f0:81:d2:16:bb:ae:c9:32:de:90:22:0d:51:12:
                    24:07:c2:f2:26:b4:6d:fa:38:83:31:fe:a7:d3:c3:
                    7f:0e:bd:b1:9f:52:b5:0c:ae:eb:78:c5:1b:51:a8:
                    5d:3f:b1:95:48:34:c8:d9:7e:3b:14:1e:7a:d9:03:
                    f3:96:6a:7d:56:6e:31:19:0d:be:fb:c0:87:a3:24:
                    70:45:57:14:a1:31:fa:01:c9:25:bd:83:33:b1:13:
                    18:91:1e:25:7b:31:e9:cb:93:d5:af:e8:11:53:22:
                    b0:02:b9:3e:3a:7f:f9:7e:0e:1e:39:fa:50:d4:63:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6E:F1:B6:D4:18:AA:D0:EE:4F:9C:A3:BB:C2:B9:A1:6A:58:10:E4
            X509v3 Authority Key Identifier:
                keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:02:b1:12:95:9c:44:37:2f:46:42:af:ce:c7:ba:df:ec:cc:
         a4:19:76:36:c6:a2:9b:f1:01:e9:ef:4c:f3:be:ba:bd:a4:7f:
         cc:0a:50:d0:b6:db:c0:6a:8d:76:13:0c:ae:e7:4b:b4:df:5a:
         ae:82:b5:a4:d7:14:73:ea:2d:4d:6f:88:e0:dc:ba:fb:13:e4:
         b0:b8:52:c4:0a:ce:2d:ca:a1:fe:b4:a8:ef:a0:bc:fd:4c:69:
         2c:f8:d9:59:1c:32:fd:13:8f:a9:b8:6b:08:09:d1:1c:aa:f6:
         c8:80:9a:0c:40:7e:3e:0f:b0:2d:1e:11:92:5d:d9:a0:7e:aa:
         a1:82:83:b8:77:d9:3b:2c:0d:4e:80:41:16:ce:ce:6d:5e:1a:
         b0:97:c9:d2:80:b8:ea:82:ff:a5:a5:93:41:96:cf:ac:9c:76:
         e6:13:c5:f1:3b:86:41:23:ce:0e:92:cf:90:5a:0e:c4:a5:6f:
         14:6d:a6:6b:ef:5b:f5:d3:4d:fa:0d:17:cd:c9:9c:fb:7a:91:
         47:09:d0:ea:b8:00:72:6e:f7:5b:52:89:96:70:4e:23:fa:2c:
         7a:0b:1a:39:26:88:9d:3e:af:92:ae:5b:34:92:82:2b:f3:a0:
         84:2d:b4:99:22:8d:51:1d:11:26:ee:df:34:fc:82:62:7f:56:
         78:f7:96:8d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUelBe9U4KUMv8Nc1VC9pSX0rhLJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc4NjlCMTc3RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMz
MTQ3M0VFMjAeFw0yNjA1MDMwMjM2MDhaFw0yNzA1MDIwMjQxMDhaMDMxMTAvBgNV
BAMTKDc4NkVGMUI2RDQxOEFBRDBFRTRGOUNBM0JCQzJCOUExNkE1ODEwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPi2u0qaP1xsveMnGV8rFWiCL
Tb1aicMkruUwLFTBeX1gI2d1vs3KgLm7Shfe2bT2LyzEZvVSkdxdrdTqOt1JYfF2
QZs61prSRrM0FXFfz0ob5iNrX4S5/SVnAFRKuuyrUw55b2olPd/1bsGyfGZqDB5w
WosEuC/bybb8kAfvH5rfXZiuebfwgdIWu67JMt6QIg1REiQHwvImtG36OIMx/qfT
w38OvbGfUrUMrut4xRtRqF0/sZVINMjZfjsUHnrZA/OWan1WbjEZDb77wIejJHBF
VxShMfoBySW9gzOxExiRHiV7MenLk9Wv6BFTIrACuT46f/l+Dh45+lDUY92TAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUeG7xttQYqtDuT5yju8K5oWpYEOQwHwYDVR0j
BBgwFoAUZ4abF31kbdCBVj025ul3XDFHPuIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmM0YzY0YTktMzUzNy00YmM3LTg2MTMtOGU5ODE2MjllNGNhLzAvNjc4NjlCMTc3
RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMzMTQ3M0VFMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82Nzg2OUIxNzdENjQ2REQwODE1NjNEMzZFNkU5Nzc1QzMxNDcz
RUUyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04
NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzAzMzJlMzEzMDM3MmUzMjM0MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2v4MA0GCSqG
SIb3DQEBCwUAA4IBAQAzArESlZxENy9GQq/Ox7rf7MykGXY2xqKb8QHp70zzvrq9
pH/MClDQttvAao12Ewyu50u031qugrWk1xRz6i1Nb4jg3Lr7E+SwuFLECs4tyqH+
tKjvoLz9TGks+NlZHDL9E4+puGsICdEcqvbIgJoMQH4+D7AtHhGSXdmgfqqhgoO4
d9k7LA1OgEEWzs5tXhqwl8nSgLjqgv+lpZNBls+snHbmE8XxO4ZBI84Oks+QWg7E
pW8UbaZr71v10036DRfNyZz7epFHCdDquABybvdbUomWcE4j+ix6Cxo5JoidPq+S
rls0koIr86CELbSZIo1RHREm7t80/IJif1Z495aN
-----END CERTIFICATE-----
Generated at Wed May 13 07:39:10 2026 by rpki-client