Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa
File:                     3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa (raw, json)
Hash identifier:          NOFO5rIKz2BY2ps/bHzbjsEH30e9BdQccOspDTn66/M=
Subject key identifier:   0D:29:90:FD:A3:3F:A6:0C:61:3A:FE:28:61:27:FD:D0:13:ED:0C:A1
Certificate issuer:       /CN=6E9E7C02630983CE900C230302BBB85D5049C526
Certificate serial:       2306B4F051983D0085E881EBC8F1FE2620168BAC
Authority key identifier: 6E:9E:7C:02:63:09:83:CE:90:0C:23:03:02:BB:B8:5D:50:49:C5:26
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E9E7C02630983CE900C230302BBB85D5049C526.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa
Signing time:             Sun 03 May 2026 02:42:27 +0000
ROA not before:           Sun 03 May 2026 02:37:27 +0000
ROA not after:            Sun 02 May 2027 02:42:27 +0000
asID:                     150193
IP address blocks:        103.211.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.crl
                          rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E9E7C02630983CE900C230302BBB85D5049C526.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:06:b4:f0:51:98:3d:00:85:e8:81:eb:c8:f1:fe:26:20:16:8b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E9E7C02630983CE900C230302BBB85D5049C526
        Validity
            Not Before: May  3 02:37:27 2026 GMT
            Not After : May  2 02:42:27 2027 GMT
        Subject: CN=0D2990FDA33FA60C613AFE286127FDD013ED0CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:7d:ea:37:8b:33:06:82:81:d0:4c:cc:6d:
                    43:e9:34:04:2f:51:5c:7c:ee:fc:e7:08:dd:e7:98:
                    0f:2d:27:fb:f2:5e:d7:1e:b6:4c:d8:e6:cc:0d:7b:
                    f2:98:7a:f0:e2:5b:f9:61:b2:ae:1e:ee:38:41:4f:
                    f0:d8:49:7f:c8:70:a9:22:e2:0e:61:f9:d8:06:43:
                    86:c2:41:38:65:02:e4:59:53:5e:84:17:91:99:94:
                    e1:6a:b5:4e:44:8d:1e:8d:73:3d:8c:03:63:4d:55:
                    ea:8a:dc:35:bd:6e:1c:9a:62:02:fe:74:97:76:34:
                    d7:2c:12:74:d1:64:55:32:7a:74:3e:c5:91:27:27:
                    8b:24:c7:af:91:9d:84:a8:e9:40:fe:3d:6b:bc:31:
                    a0:18:84:d0:23:e2:a1:37:df:5f:29:8b:81:9c:30:
                    00:51:1f:99:0b:a8:d5:94:0c:28:c8:9b:07:2e:42:
                    86:7c:04:64:36:f9:32:46:66:08:9d:24:1c:bd:89:
                    02:eb:49:d8:2e:7e:d5:b9:53:cb:05:96:35:26:3a:
                    54:3b:1f:e8:70:6d:72:4a:8f:1e:e3:d3:b8:23:2f:
                    d3:ac:42:66:3f:78:cf:dd:56:27:98:da:4f:09:fa:
                    4c:46:6a:d7:c7:57:38:93:b4:02:56:8f:55:98:f1:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:90:FD:A3:3F:A6:0C:61:3A:FE:28:61:27:FD:D0:13:ED:0C:A1
            X509v3 Authority Key Identifier:
                keyid:6E:9E:7C:02:63:09:83:CE:90:0C:23:03:02:BB:B8:5D:50:49:C5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E9E7C02630983CE900C230302BBB85D5049C526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:64:5d:d8:31:f6:ee:4e:0c:79:9f:56:5d:df:84:c9:c8:1a:
         35:aa:5b:43:c4:f2:01:f3:26:8f:c8:28:f6:29:ac:d2:ab:56:
         b5:45:93:bb:13:d5:b4:b7:a8:24:ef:d6:2e:77:df:82:9b:bd:
         a5:70:dc:5c:a4:08:e4:ec:10:a5:c8:fc:17:19:37:09:f0:9c:
         6a:22:ab:64:77:f7:0c:cb:9d:59:72:c5:dd:b4:0f:f2:62:a3:
         08:27:d5:c8:3b:43:0b:67:4d:98:cf:0b:47:7a:3f:11:8b:4f:
         45:3d:a1:07:7d:2c:b6:a5:83:c3:02:6c:2b:de:49:5c:bc:c1:
         9f:d2:f4:5d:d9:0e:41:69:80:87:77:bd:a6:b2:21:c7:54:f5:
         30:a1:85:1e:44:75:a8:2a:f8:e1:bb:64:d9:48:50:1b:4c:6b:
         6e:30:f0:71:55:ab:90:8e:e6:96:f1:c2:11:91:cc:be:0d:57:
         66:a2:c0:8d:8d:94:70:93:a4:43:df:53:cc:a3:09:69:b3:86:
         ae:e6:b5:e4:b5:10:3b:d2:42:2d:c9:4b:6e:5d:b7:08:24:36:
         95:96:e9:2f:07:ec:bd:d9:b3:ef:a3:88:7f:5f:fa:da:c9:2b:
         fe:94:db:9e:7f:11:2a:ff:c7:77:15:d8:97:ba:3d:d3:68:8a:
         1f:16:ee:c4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIwa08FGYPQCF6IHryPH+JiAWi6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU5RTdDMDI2MzA5ODNDRTkwMEMyMzAzMDJCQkI4NUQ1
MDQ5QzUyNjAeFw0yNjA1MDMwMjM3MjdaFw0yNzA1MDIwMjQyMjdaMDMxMTAvBgNV
BAMTKDBEMjk5MEZEQTMzRkE2MEM2MTNBRkUyODYxMjdGREQwMTNFRDBDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHX3qN4szBoKB0EzMbUPpNAQv
UVx87vznCN3nmA8tJ/vyXtcetkzY5swNe/KYevDiW/lhsq4e7jhBT/DYSX/IcKki
4g5h+dgGQ4bCQThlAuRZU16EF5GZlOFqtU5EjR6Ncz2MA2NNVeqK3DW9bhyaYgL+
dJd2NNcsEnTRZFUyenQ+xZEnJ4skx6+RnYSo6UD+PWu8MaAYhNAj4qE3318pi4Gc
MABRH5kLqNWUDCjImwcuQoZ8BGQ2+TJGZgidJBy9iQLrSdguftW5U8sFljUmOlQ7
H+hwbXJKjx7j07gjL9OsQmY/eM/dVieY2k8J+kxGatfHVziTtAJWj1WY8VgNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUDSmQ/aM/pgxhOv4oYSf90BPtDKEwHwYDVR0j
BBgwFoAUbp58AmMJg86QDCMDAru4XVBJxSYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzBkNjZiNjktNzA3YS00ODMwLWEyZDMtYWY2Y2EwZDE1YmNlLzAvNkU5RTdDMDI2
MzA5ODNDRTkwMEMyMzAzMDJCQkI4NUQ1MDQ5QzUyNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RTlFN0MwMjYzMDk4M0NFOTAwQzIzMDMwMkJCQjg1RDUwNDlD
NTI2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzcwZDY2YjY5LTcwN2EtNDgzMC1h
MmQzLWFmNmNhMGQxNWJjZS8wLzMxMzAzMzJlMzIzMTMxMmUzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzEzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9MaMA0GCSqG
SIb3DQEBCwUAA4IBAQAHZF3YMfbuTgx5n1Zd34TJyBo1qltDxPIB8yaPyCj2KazS
q1a1RZO7E9W0t6gk79Yud9+Cm72lcNxcpAjk7BClyPwXGTcJ8JxqIqtkd/cMy51Z
csXdtA/yYqMIJ9XIO0MLZ02YzwtHej8Ri09FPaEHfSy2pYPDAmwr3klcvMGf0vRd
2Q5BaYCHd72msiHHVPUwoYUeRHWoKvjhu2TZSFAbTGtuMPBxVauQjuaW8cIRkcy+
DVdmosCNjZRwk6RD31PMowlps4au5rXktRA70kItyUtuXbcIJDaVlukvB+y92bPv
o4h/X/raySv+lNuefxEq/8d3FdiXuj3TaIofFu7E
-----END CERTIFICATE-----
Generated at Wed May 13 08:00:07 2026 by rpki-client