Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa
File:                     3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (raw, json)
Hash identifier:          8luvuUZe/inH3n4D6OyQwwD6mGHctkX0bejCwUaYOvA=
Subject key identifier:   93:3C:8D:28:8D:3D:7F:42:1C:46:9E:C6:29:0C:C6:05:5A:72:87:17
Certificate issuer:       /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C
Certificate serial:       0665C51CE85F0D0B31C8B85E1887558FD34900A2
Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa
Signing time:             Sun 03 May 2026 02:49:08 +0000
ROA not before:           Sun 03 May 2026 02:44:08 +0000
ROA not after:            Sun 02 May 2027 02:49:08 +0000
asID:                     150978
IP address blocks:        103.126.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl
                          rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:65:c5:1c:e8:5f:0d:0b:31:c8:b8:5e:18:87:55:8f:d3:49:00:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C
        Validity
            Not Before: May  3 02:44:08 2026 GMT
            Not After : May  2 02:49:08 2027 GMT
        Subject: CN=933C8D288D3D7F421C469EC6290CC6055A728717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:aa:1f:28:29:2d:d0:d8:56:10:30:35:1e:
                    ff:40:74:cb:3f:d0:f0:ee:b3:85:37:d7:29:d0:23:
                    20:c8:7d:41:bd:6f:b1:1c:47:6e:c2:b1:db:08:0a:
                    78:8e:f4:10:c4:d8:d2:31:4d:3f:a5:73:88:22:7a:
                    3f:81:96:78:f5:f4:73:f1:cf:b8:eb:53:85:5e:38:
                    7b:c8:c0:73:ad:d2:66:60:e3:7b:4a:81:e8:61:27:
                    d7:b0:d0:e4:e9:71:aa:8d:c2:ea:07:f7:a0:4d:90:
                    83:94:26:35:81:ba:67:31:dc:84:78:bc:43:13:24:
                    e9:66:d5:ca:76:96:f4:db:1d:d9:7c:38:14:84:bd:
                    4c:2b:93:6d:96:bb:aa:12:da:72:13:c8:28:28:d0:
                    93:92:8d:bd:ce:99:42:74:dd:aa:9e:c7:4a:e0:87:
                    c2:6c:28:a1:e5:9d:59:87:3f:54:7c:75:ed:d7:b1:
                    fb:3f:92:c4:53:a5:bf:5b:a4:1e:db:77:b9:f9:a1:
                    50:8a:f8:75:44:94:a5:86:ef:d2:d7:f9:df:14:3c:
                    62:d4:eb:2b:f4:6a:70:4c:ed:57:59:63:a1:ab:f3:
                    7d:d5:7a:ce:e0:c0:bc:a0:f1:86:e8:ae:4c:cf:16:
                    0f:d8:f3:ff:16:08:32:1e:1d:b9:75:28:f8:59:be:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:8D:28:8D:3D:7F:42:1C:46:9E:C6:29:0C:C6:05:5A:72:87:17
            X509v3 Authority Key Identifier:
                keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:c2:2b:40:dc:c3:ad:57:e5:27:62:71:60:ed:4f:c7:19:e8:
         11:3f:3e:63:2b:73:5e:d3:60:42:63:b5:69:3b:a4:ad:9a:bd:
         69:09:ef:73:9d:7e:9e:bc:8d:c7:c8:5d:fb:78:c2:c9:cf:bc:
         95:04:d6:90:e9:cb:60:37:b3:f3:bc:75:56:62:b2:b0:36:66:
         37:76:32:39:09:c6:aa:ce:f9:26:c3:37:a1:7f:26:0f:cc:8d:
         e0:22:a8:f6:a6:17:45:ad:2f:37:62:16:65:0c:3e:7f:fe:88:
         22:a2:dd:3d:f3:37:89:6c:7b:5b:77:72:3e:2d:7c:9d:a5:72:
         18:c5:66:61:79:d8:e7:30:66:81:16:02:10:c3:98:4c:1f:aa:
         93:9e:3b:10:58:4b:50:34:79:50:9b:0b:ab:66:ac:19:50:46:
         7a:c5:54:1f:ac:31:22:64:c3:44:9e:57:3d:35:d4:7a:77:77:
         99:14:48:59:7a:c6:94:e4:8e:d8:cc:d7:56:6b:3e:ed:d3:a9:
         f8:fa:63:ad:ea:0c:c1:95:2a:68:c0:bb:31:75:10:44:1a:3a:
         22:19:13:ec:6d:51:d0:da:39:f0:f0:79:ff:3c:2c:2e:3d:0e:
         f4:a9:18:f2:f2:60:de:a5:2c:83:58:ea:cf:72:39:d7:b8:b8:
         51:fb:07:74
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBmXFHOhfDQsxyLheGIdVj9NJAKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0
MUUyQkUxQzAeFw0yNjA1MDMwMjQ0MDhaFw0yNzA1MDIwMjQ5MDhaMDMxMTAvBgNV
BAMTKDkzM0M4RDI4OEQzRDdGNDIxQzQ2OUVDNjI5MENDNjA1NUE3Mjg3MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SaofKCkt0NhWEDA1Hv9AdMs/
0PDus4U31ynQIyDIfUG9b7EcR27CsdsICniO9BDE2NIxTT+lc4giej+Blnj19HPx
z7jrU4VeOHvIwHOt0mZg43tKgehhJ9ew0OTpcaqNwuoH96BNkIOUJjWBumcx3IR4
vEMTJOlm1cp2lvTbHdl8OBSEvUwrk22Wu6oS2nITyCgo0JOSjb3OmUJ03aqex0rg
h8JsKKHlnVmHP1R8de3Xsfs/ksRTpb9bpB7bd7n5oVCK+HVElKWG79LX+d8UPGLU
6yv0anBM7VdZY6Gr833Ves7gwLyg8YborkzPFg/Y8/8WCDIeHbl1KPhZvsaxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUkzyNKI09f0IcRp7GKQzGBVpyhxcwHwYDVR0j
BBgwFoAUiwz4fyNJ/IeH71LjsK2A4UHivhwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODlhNDAwODktNjA0MS00NWVkLThlNDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0Yy
MzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0MUUyQkUxQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QjBDRjg3RjIzNDlGQzg3ODdFRjUyRTNCMEFEODBFMTQxRTJC
RTFDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg5YTQwMDg5LTYwNDEtNDVlZC04
ZTQ0LWE5OTdjOGFjZjQ4MC8wLzMxMzAzMzJlMzEzMjM2MmUzMjMzMzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzAzOTM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnfugwDQYJ
KoZIhvcNAQELBQADggEBABTCK0Dcw61X5SdicWDtT8cZ6BE/PmMrc17TYEJjtWk7
pK2avWkJ73Odfp68jcfIXft4wsnPvJUE1pDpy2A3s/O8dVZisrA2Zjd2MjkJxqrO
+SbDN6F/Jg/MjeAiqPamF0WtLzdiFmUMPn/+iCKi3T3zN4lse1t3cj4tfJ2lchjF
ZmF52OcwZoEWAhDDmEwfqpOeOxBYS1A0eVCbC6tmrBlQRnrFVB+sMSJkw0SeVz01
1Hp3d5kUSFl6xpTkjtjM11ZrPu3Tqfj6Y63qDMGVKmjAuzF1EEQaOiIZE+xtUdDa
OfDwef88LC49DvSpGPLyYN6lLINY6s9yOde4uFH7B3Q=
-----END CERTIFICATE-----
Generated at Wed May 13 03:51:33 2026 by rpki-client