Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa
File:                     3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa (raw, json)
Hash identifier:          9TeQcqWDARNn53jqbj5jMqu8OaGQOBp3BzElbwHdS0o=
Subject key identifier:   77:1D:98:82:22:50:A3:A9:69:C4:FE:03:38:88:66:BE:1C:DB:B0:FD
Certificate issuer:       /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial:       749BE5B8E4B9AE8A6D61E0C42A1246808F722190
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa
Signing time:             Sun 03 May 2026 02:42:31 +0000
ROA not before:           Sun 03 May 2026 02:37:31 +0000
ROA not after:            Sun 02 May 2027 02:42:31 +0000
asID:                     38750
IP address blocks:        103.213.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
                          rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9b:e5:b8:e4:b9:ae:8a:6d:61:e0:c4:2a:12:46:80:8f:72:21:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
        Validity
            Not Before: May  3 02:37:31 2026 GMT
            Not After : May  2 02:42:31 2027 GMT
        Subject: CN=771D98822250A3A969C4FE03388866BE1CDBB0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:45:61:86:80:5a:b4:24:2c:cb:2d:6c:6a:88:
                    a6:c0:06:2a:16:44:c1:c3:c5:60:32:36:78:23:b8:
                    08:ce:2f:77:d1:cc:ba:63:c5:a4:19:9e:68:b6:f7:
                    2a:f1:6d:84:0b:50:29:f5:43:96:bd:19:31:ed:78:
                    52:04:85:e0:18:2d:83:c6:45:79:4c:ae:b2:6c:69:
                    d9:6f:13:3b:a2:44:7e:ae:f5:11:40:b8:4b:7a:a9:
                    ce:70:0f:c5:9e:fd:74:a1:b3:2c:19:08:d2:0e:38:
                    9f:5a:d9:42:fd:d9:8a:49:9c:2b:ce:d2:ba:81:26:
                    54:18:e3:e2:88:ec:ad:d6:90:8a:78:e6:72:3e:d6:
                    e4:ad:e6:71:a2:56:f7:03:24:77:f5:39:7d:b5:88:
                    5c:26:75:bf:79:a7:69:c8:38:50:60:0f:e9:b5:95:
                    a2:a0:9c:fc:cc:00:00:09:1a:2d:4c:90:69:a4:3f:
                    81:cf:26:87:d2:b6:1e:ce:c8:23:5b:de:d8:25:e7:
                    de:8c:c0:62:f2:1b:4e:28:53:d5:2f:21:92:4c:68:
                    b6:23:ed:ed:a7:0c:7c:64:bb:9b:3b:41:f2:c1:f6:
                    a4:32:d1:c1:b3:7f:78:7c:2a:e9:a6:bd:c6:d8:ab:
                    a7:31:0e:ac:14:bc:ee:d3:eb:6e:a8:35:07:4c:48:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1D:98:82:22:50:A3:A9:69:C4:FE:03:38:88:66:BE:1C:DB:B0:FD
            X509v3 Authority Key Identifier:
                keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:04:df:7b:e4:6b:a3:02:87:ed:a9:3a:cf:e0:55:d5:8b:
         2f:70:e5:e2:13:b9:ac:0b:40:66:7f:92:26:49:29:90:d9:5e:
         38:d9:18:f0:ec:25:f1:6b:63:e5:6b:c8:bb:47:99:42:0f:99:
         78:0e:d1:48:74:68:7e:f5:da:dc:e1:c3:66:d9:13:c0:2e:56:
         1c:bc:f5:ef:7a:1d:8f:f4:de:8f:de:6e:3b:07:e0:91:1d:6f:
         c2:89:13:4f:df:c0:71:8b:38:69:70:91:98:43:45:43:aa:90:
         62:44:dc:8f:8a:e7:26:14:65:c6:30:c5:8f:09:d2:eb:b7:03:
         c7:f8:0d:4b:35:63:ea:33:76:74:1d:be:f8:c6:df:54:ed:c0:
         50:64:54:69:ba:ee:56:70:09:64:17:75:78:b4:bd:c8:fc:91:
         f4:13:5d:50:de:58:58:4b:39:06:b2:3d:3c:c9:d9:87:f9:41:
         1e:8d:9d:c0:4a:b3:a1:80:2c:9d:1d:43:c2:d3:34:b0:68:ed:
         64:15:f8:83:f6:a5:6a:3b:c3:41:e1:ce:8c:c4:0c:07:84:c7:
         3e:cc:4b:7f:de:0f:9d:8e:53:23:0c:43:89:51:b9:e5:b4:ca:
         eb:bb:90:96:e9:05:d1:bc:6e:5f:bf:28:14:f7:a0:c8:58:b1:
         8a:7b:2f:4f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdJvluOS5roptYeDEKhJGgI9yIZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlGMEU2REUwMkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIw
N0QyRDdGODAeFw0yNjA1MDMwMjM3MzFaFw0yNzA1MDIwMjQyMzFaMDMxMTAvBgNV
BAMTKDc3MUQ5ODgyMjI1MEEzQTk2OUM0RkUwMzM4ODg2NkJFMUNEQkIwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtRWGGgFq0JCzLLWxqiKbABioW
RMHDxWAyNngjuAjOL3fRzLpjxaQZnmi29yrxbYQLUCn1Q5a9GTHteFIEheAYLYPG
RXlMrrJsadlvEzuiRH6u9RFAuEt6qc5wD8We/XShsywZCNIOOJ9a2UL92YpJnCvO
0rqBJlQY4+KI7K3WkIp45nI+1uSt5nGiVvcDJHf1OX21iFwmdb95p2nIOFBgD+m1
laKgnPzMAAAJGi1MkGmkP4HPJofSth7OyCNb3tgl596MwGLyG04oU9UvIZJMaLYj
7e2nDHxku5s7QfLB9qQy0cGzf3h8KummvcbYq6cxDqwUvO7T626oNQdMSI9vAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUdx2YgiJQo6lpxP4DOIhmvhzbsP0wHwYDVR0j
BBgwFoAUmfDm3gLGAtHkhUVUdPSyEgfS1/gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzBmNWNmZGItNzk4Ny00MzUxLWJjMmUtNjZjMjRmNDlmNDQwLzAvOTlGMEU2REUw
MkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIwN0QyRDdGOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OUYwRTZERTAyQzYwMkQxRTQ4NTQ1NTQ3NEY0QjIxMjA3RDJE
N0Y4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzcwZjVjZmRiLTc5ODctNDM1MS1i
YzJlLTY2YzI0ZjQ5ZjQ0MC8wLzMxMzAzMzJlMzIzMTMzMmUzMTMxMzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMzM4MzczNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9V2MA0GCSqG
SIb3DQEBCwUAA4IBAQAULgTfe+RrowKH7ak6z+BV1YsvcOXiE7msC0Bmf5ImSSmQ
2V442Rjw7CXxa2Pla8i7R5lCD5l4DtFIdGh+9drc4cNm2RPALlYcvPXveh2P9N6P
3m47B+CRHW/CiRNP38BxizhpcJGYQ0VDqpBiRNyPiucmFGXGMMWPCdLrtwPH+A1L
NWPqM3Z0Hb74xt9U7cBQZFRpuu5WcAlkF3V4tL3I/JH0E11Q3lhYSzkGsj08ydmH
+UEejZ3ASrOhgCydHUPC0zSwaO1kFfiD9qVqO8NB4c6MxAwHhMc+zEt/3g+djlMj
DEOJUbnltMrru5CW6QXRvG5fvygU96DIWLGKey9P
-----END CERTIFICATE-----
Generated at Wed May 13 01:36:50 2026 by rpki-client