Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa
File:                     3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (raw, json)
Hash identifier:          AfcLIhCoxrNIL4gRzBZvaf0VEddtgYfRViPlzgx7Sn0=
Subject key identifier:   E9:2F:A4:D5:08:E5:AF:7F:18:DA:BA:E5:4B:1F:29:7C:0B:AA:2E:E3
Certificate issuer:       /CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE
Certificate serial:       04CD86A63125C592EE33C845B466BA3721E39D8E
Authority key identifier: 68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa
Signing time:             Sun 03 May 2026 02:44:11 +0000
ROA not before:           Sun 03 May 2026 02:39:11 +0000
ROA not after:            Sun 02 May 2027 02:44:11 +0000
asID:                     141067
IP address blocks:        103.155.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl
                          rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cd:86:a6:31:25:c5:92:ee:33:c8:45:b4:66:ba:37:21:e3:9d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE
        Validity
            Not Before: May  3 02:39:11 2026 GMT
            Not After : May  2 02:44:11 2027 GMT
        Subject: CN=E92FA4D508E5AF7F18DABAE54B1F297C0BAA2EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:bb:ca:5c:61:3d:92:b5:9f:b6:05:86:e8:
                    8b:c4:59:98:9a:08:b0:e4:29:ba:f8:13:86:0e:34:
                    43:60:93:04:b5:a5:82:e8:19:67:d4:bf:48:13:35:
                    e8:f5:2f:d7:d2:e9:72:c4:7a:a1:02:c4:ef:7f:53:
                    e6:d6:92:3f:2b:34:6a:07:c6:62:d9:2d:6c:45:2f:
                    0a:43:3e:b3:95:85:4a:1d:82:99:e5:07:07:5c:da:
                    1d:3c:8d:e9:87:e5:de:5a:00:86:e4:d5:75:e7:d1:
                    95:0d:92:a7:73:ea:a1:97:22:93:dd:30:a7:84:50:
                    f2:76:ba:29:30:30:e0:5d:1a:dc:1a:30:66:e5:21:
                    b8:01:df:ef:df:17:9c:27:12:b0:c1:a2:87:9a:e7:
                    4c:25:9f:1c:13:01:46:7c:73:cf:30:ff:73:67:a1:
                    bf:6d:45:ec:37:3a:96:37:e6:43:4c:6b:eb:b1:b0:
                    a0:55:7b:e7:b4:ef:b5:06:21:80:9f:d3:56:7b:2f:
                    47:d2:61:bb:e4:a1:99:21:77:35:32:d0:28:ca:0e:
                    62:18:e1:cb:6f:6e:7a:1e:d4:37:4d:4d:37:bd:30:
                    d2:9b:6c:48:b3:0a:3e:96:ad:aa:cd:d8:c1:84:33:
                    d4:d1:c2:91:40:6c:ff:ca:23:f5:96:ea:51:56:3a:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:A4:D5:08:E5:AF:7F:18:DA:BA:E5:4B:1F:29:7C:0B:AA:2E:E3
            X509v3 Authority Key Identifier:
                keyid:68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:2d:60:e8:d1:db:4b:d9:d9:00:fa:cc:09:3f:42:bc:af:7f:
         51:2a:4a:1c:fc:73:0c:dc:b4:7b:e6:a1:48:53:19:bb:2c:56:
         2a:4e:64:14:75:3f:e8:f5:74:b8:e1:63:85:0e:cb:2f:2c:b6:
         8f:a8:cb:1a:55:a0:4b:18:be:b4:f0:e5:c7:2f:f1:be:f1:69:
         3d:fa:08:fe:7e:31:99:ac:12:79:9d:92:c2:17:83:45:f5:01:
         6f:01:06:9d:7b:25:cb:65:fc:a3:61:c5:b5:9e:8a:05:97:56:
         b5:42:15:d9:ca:5e:c7:ee:ee:1d:dc:4b:46:79:b2:a7:d2:3f:
         bd:7b:37:1c:dc:de:69:b3:e1:b0:40:a5:f5:89:aa:08:72:5e:
         b8:7f:3e:18:0a:58:46:fa:94:e8:e7:85:20:17:e9:43:1e:49:
         35:92:ea:ca:29:fc:44:ab:f5:40:2f:5f:40:87:fe:be:ef:59:
         92:85:6b:f4:8d:cc:c3:59:43:e7:5f:09:27:4f:8e:b7:2a:0a:
         ef:ec:d1:41:27:9a:29:46:04:cc:8b:78:ca:f0:48:1a:6b:47:
         62:3c:0e:69:fb:eb:26:64:dd:11:08:bf:7f:c0:10:03:fa:49:
         97:21:ec:5d:3b:f3:ed:dd:e8:66:5f:57:19:de:fa:bf:c1:c2:
         3c:a2:cc:a6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBM2GpjElxZLuM8hFtGa6NyHjnY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhGMDA3RDcxMDIzMkE0OTlCRUI2OEUzRTNCRjVFN0Ix
MzI1QTlERTAeFw0yNjA1MDMwMjM5MTFaFw0yNzA1MDIwMjQ0MTFaMDMxMTAvBgNV
BAMTKEU5MkZBNEQ1MDhFNUFGN0YxOERBQkFFNTRCMUYyOTdDMEJBQTJFRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzLvKXGE9krWftgWG6IvEWZia
CLDkKbr4E4YONENgkwS1pYLoGWfUv0gTNej1L9fS6XLEeqECxO9/U+bWkj8rNGoH
xmLZLWxFLwpDPrOVhUodgpnlBwdc2h08jemH5d5aAIbk1XXn0ZUNkqdz6qGXIpPd
MKeEUPJ2uikwMOBdGtwaMGblIbgB3+/fF5wnErDBooea50wlnxwTAUZ8c88w/3Nn
ob9tRew3OpY35kNMa+uxsKBVe+e077UGIYCf01Z7L0fSYbvkoZkhdzUy0CjKDmIY
4ctvbnoe1DdNTTe9MNKbbEizCj6WrarN2MGEM9TRwpFAbP/KI/WW6lFWOomdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU6S+k1Qjlr38Y2rrlSx8pfAuqLuMwHwYDVR0j
BBgwFoAUaPAH1xAjKkmb62jj479eexMlqd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzgxOWNkZGYtNmRkOS00ZDljLWI1MzgtOGI3NmI3YzljZTYxLzAvNjhGMDA3RDcx
MDIzMkE0OTlCRUI2OEUzRTNCRjVFN0IxMzI1QTlERS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OEYwMDdENzEwMjMyQTQ5OUJFQjY4RTNFM0JGNUU3QjEzMjVB
OURFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc4MTljZGRmLTZkZDktNGQ5Yy1i
NTM4LThiNzZiN2M5Y2U2MS8wLzMxMzAzMzJlMzEzNTM1MmUzMTM5MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnm74wDQYJ
KoZIhvcNAQELBQADggEBAAotYOjR20vZ2QD6zAk/Qryvf1EqShz8cwzctHvmoUhT
GbssVipOZBR1P+j1dLjhY4UOyy8sto+oyxpVoEsYvrTw5ccv8b7xaT36CP5+MZms
EnmdksIXg0X1AW8BBp17Jctl/KNhxbWeigWXVrVCFdnKXsfu7h3cS0Z5sqfSP717
Nxzc3mmz4bBApfWJqghyXrh/PhgKWEb6lOjnhSAX6UMeSTWS6sop/ESr9UAvX0CH
/r7vWZKFa/SNzMNZQ+dfCSdPjrcqCu/s0UEnmilGBMyLeMrwSBprR2I8Dmn76yZk
3REIv3/AEAP6SZch7F078+3d6GZfVxne+r/BwjyizKY=
-----END CERTIFICATE-----
Generated at Wed May 13 06:38:04 2026 by rpki-client