Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa
File:                     3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (raw, json)
Hash identifier:          Fngj46n5ns0XL17tIcObVP8YgC9Tz2lNna69VH4sqhk=
Subject key identifier:   7C:E5:44:DD:C9:12:9D:66:21:F2:12:06:79:A6:23:2E:96:95:A8:E0
Certificate issuer:       /CN=F24F92FEE32EF3FD89B142D403B664674EC45F20
Certificate serial:       526BE644ACC1906F50A4C1D5CB53CAC3E3C87303
Authority key identifier: F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa
Signing time:             Sun 03 May 2026 02:48:51 +0000
ROA not before:           Sun 03 May 2026 02:43:51 +0000
ROA not after:            Sun 02 May 2027 02:48:51 +0000
asID:                     137351
IP address blocks:        103.114.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl
                          rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6b:e6:44:ac:c1:90:6f:50:a4:c1:d5:cb:53:ca:c3:e3:c8:73:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24F92FEE32EF3FD89B142D403B664674EC45F20
        Validity
            Not Before: May  3 02:43:51 2026 GMT
            Not After : May  2 02:48:51 2027 GMT
        Subject: CN=7CE544DDC9129D6621F2120679A6232E9695A8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c7:c8:38:ce:9f:33:c0:c5:cc:9f:2e:6b:6c:
                    9a:b0:3a:ea:cd:c9:39:c2:9b:77:8a:fc:16:e2:95:
                    35:05:37:03:7c:40:98:96:82:56:f4:34:f8:d3:64:
                    08:1a:89:90:cd:ce:2d:c5:86:b5:c0:34:a5:5e:84:
                    21:81:f1:52:b3:bd:8b:3f:3c:7b:29:c9:73:e9:33:
                    a2:19:cb:f5:44:a7:5d:53:e9:4c:f9:06:c5:71:59:
                    dc:eb:e3:f4:74:2c:cb:96:b7:21:df:0e:c8:73:32:
                    6f:3b:75:da:d3:99:dd:0c:0e:ea:7a:66:59:88:e5:
                    c6:eb:db:bb:c8:29:c0:1c:9d:55:59:8d:61:c4:1b:
                    68:c5:4e:a1:69:3c:8e:7c:03:c4:34:7f:a7:a0:ee:
                    29:ad:90:ff:7f:a2:a9:28:96:e9:58:ee:e8:17:40:
                    ec:a1:8a:a9:c4:76:bc:bd:01:62:e5:15:95:14:97:
                    b2:45:f5:55:c4:10:2c:68:8a:49:9f:c9:8b:93:a7:
                    6f:76:27:97:e7:b2:e0:36:1c:af:e6:f5:78:16:3e:
                    7a:6f:4b:c9:c9:57:aa:9b:af:80:58:f0:26:b1:e5:
                    e7:50:27:79:cd:b8:03:4a:21:28:b7:70:b1:c1:69:
                    f4:2b:99:c7:2f:ed:38:dc:2a:a2:74:0b:6d:29:33:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:44:DD:C9:12:9D:66:21:F2:12:06:79:A6:23:2E:96:95:A8:E0
            X509v3 Authority Key Identifier:
                keyid:F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:9b:02:b2:c7:4d:57:53:22:ba:57:d6:19:a3:4d:81:f1:b9:
         f8:cd:66:79:77:91:31:98:dc:30:4d:2f:62:93:77:3e:a9:85:
         44:e7:e1:b6:ed:87:a8:7b:f7:fc:0d:bd:0b:73:d0:30:91:42:
         15:9d:ab:07:e2:fe:3a:4c:54:04:4f:b9:d4:e6:83:d9:40:59:
         36:4a:ca:54:eb:4e:b6:cd:48:ac:4e:47:fa:84:bb:de:7e:cc:
         b9:7a:7b:ec:df:20:dd:5c:19:f7:49:3f:cb:1e:61:f4:c9:0c:
         00:9d:db:a9:43:db:35:5e:44:c6:ad:73:19:ed:b5:cc:00:10:
         56:10:b3:82:25:d4:2c:23:d2:2d:c8:9d:d9:fc:1d:45:8f:dd:
         af:08:46:e0:72:d2:d5:91:7d:62:0a:ff:71:b4:77:1d:64:8b:
         dd:b2:a6:da:95:36:f9:1d:94:1d:8c:31:5f:94:29:1e:f8:1f:
         93:74:74:84:ed:39:61:eb:5f:29:d2:3f:8e:c2:df:95:79:f7:
         68:a4:aa:2a:7f:01:07:14:22:8d:95:f9:95:c3:f4:a6:0a:8c:
         db:e7:11:b1:8e:68:fb:a4:6f:ce:bb:2c:f4:d2:f5:06:c7:1d:
         b5:c0:a9:ae:f9:8a:8a:be:b6:c5:c7:63:c1:c3:57:82:6e:d2:
         e5:40:1b:6d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUUmvmRKzBkG9QpMHVy1PKw+PIcwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0RjkyRkVFMzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0
RUM0NUYyMDAeFw0yNjA1MDMwMjQzNTFaFw0yNzA1MDIwMjQ4NTFaMDMxMTAvBgNV
BAMTKDdDRTU0NEREQzkxMjlENjYyMUYyMTIwNjc5QTYyMzJFOTY5NUE4RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxx8g4zp8zwMXMny5rbJqwOurN
yTnCm3eK/BbilTUFNwN8QJiWglb0NPjTZAgaiZDNzi3FhrXANKVehCGB8VKzvYs/
PHspyXPpM6IZy/VEp11T6Uz5BsVxWdzr4/R0LMuWtyHfDshzMm87ddrTmd0MDup6
ZlmI5cbr27vIKcAcnVVZjWHEG2jFTqFpPI58A8Q0f6eg7imtkP9/oqkolulY7ugX
QOyhiqnEdry9AWLlFZUUl7JF9VXEECxoikmfyYuTp292J5fnsuA2HK/m9XgWPnpv
S8nJV6qbr4BY8Cax5edQJ3nNuANKISi3cLHBafQrmccv7TjcKqJ0C20pM2qVAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfOVE3ckSnWYh8hIGeaYjLpaVqOAwHwYDVR0j
BBgwFoAU8k+S/uMu8/2JsULUA7ZkZ07EXyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODg3ODhhOGItNTQxYi00Y2JmLWJhYjktOGRjMzc3YmMxMjg0LzAvRjI0RjkyRkVF
MzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0RUM0NUYyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMjRGOTJGRUUzMkVGM0ZEODlCMTQyRDQwM0I2NjQ2NzRFQzQ1
RjIwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg4Nzg4YThiLTU0MWItNGNiZi1i
YWI5LThkYzM3N2JjMTI4NC8wLzMxMzAzMzJlMzEzMTM0MmUzMTM0MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncpAwDQYJ
KoZIhvcNAQELBQADggEBAFCbArLHTVdTIrpX1hmjTYHxufjNZnl3kTGY3DBNL2KT
dz6phUTn4bbth6h79/wNvQtz0DCRQhWdqwfi/jpMVARPudTmg9lAWTZKylTrTrbN
SKxOR/qEu95+zLl6e+zfIN1cGfdJP8seYfTJDACd26lD2zVeRMatcxnttcwAEFYQ
s4Il1Cwj0i3Indn8HUWP3a8IRuBy0tWRfWIK/3G0dx1ki92yptqVNvkdlB2MMV+U
KR74H5N0dITtOWHrXynSP47C35V592ikqip/AQcUIo2V+ZXD9KYKjNvnEbGOaPuk
b867LPTS9QbHHbXAqa75ioq+tsXHY8HDV4Ju0uVAG20=
-----END CERTIFICATE-----
Generated at Wed May 13 02:50:01 2026 by rpki-client