Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa
File:                     3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (raw, json)
Hash identifier:          17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=
Subject key identifier:   C4:86:3A:3F:8D:6B:BB:8B:BB:20:D8:31:10:95:C8:67:41:84:25:FD
Certificate issuer:       /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
Certificate serial:       45474D9DD9E5EAB92D697458E3412450031418AE
Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa
Signing time:             Sun 03 May 2026 02:49:47 +0000
ROA not before:           Sun 03 May 2026 02:44:47 +0000
ROA not after:            Sun 02 May 2027 02:49:47 +0000
asID:                     140421
IP address blocks:        103.148.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl
                          rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:47:4d:9d:d9:e5:ea:b9:2d:69:74:58:e3:41:24:50:03:14:18:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
        Validity
            Not Before: May  3 02:44:47 2026 GMT
            Not After : May  2 02:49:47 2027 GMT
        Subject: CN=C4863A3F8D6BBB8BBB20D8311095C867418425FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:7f:ff:86:47:ef:24:65:5f:f1:15:7d:23:
                    2a:07:48:92:9f:60:f6:80:bc:07:9a:5d:30:55:79:
                    77:59:2a:08:6a:77:78:69:cb:66:a2:dd:32:7c:53:
                    60:8d:fb:09:ef:8a:47:93:a2:51:b9:0f:23:c0:71:
                    f9:e0:00:25:eb:91:01:e7:08:3b:67:b0:f2:7f:f7:
                    4a:30:9c:e1:80:95:eb:cc:f8:2b:93:b0:61:ab:a5:
                    fa:ca:e9:ae:c9:68:ec:e4:98:f3:e8:09:dc:1e:62:
                    91:8f:f0:4b:c6:1b:e1:bf:36:33:32:79:8f:5b:09:
                    38:d6:48:aa:7b:1b:85:5a:f5:2d:d0:74:23:d7:6a:
                    3b:0e:33:c0:62:6d:2c:f2:d5:3b:fe:bf:74:e2:d7:
                    34:67:58:79:79:88:88:aa:c2:49:91:04:41:5f:ff:
                    a6:d1:d8:39:3e:5f:3c:f4:64:65:a3:b6:55:f6:f2:
                    a2:ad:a8:97:5b:c2:d6:a7:f2:36:2e:d2:05:fe:01:
                    63:51:e9:2e:13:2c:ff:95:59:3a:bc:db:61:04:68:
                    8b:e5:b8:ab:95:0a:45:7c:2a:a0:b3:1d:98:ee:43:
                    f1:ee:1e:86:0b:77:04:45:e9:f0:52:0a:c1:74:18:
                    9e:f9:5e:73:c1:27:83:df:66:d1:27:65:dc:86:9f:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:86:3A:3F:8D:6B:BB:8B:BB:20:D8:31:10:95:C8:67:41:84:25:FD
            X509v3 Authority Key Identifier:
                keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:ab:fd:78:88:22:1d:50:08:b3:15:3b:7c:0e:3f:e7:3d:6b:
         a4:bb:b9:7e:c9:e7:c4:52:7c:24:e1:83:04:5a:b1:d6:5f:80:
         5e:47:93:c8:f7:4b:9d:89:2b:9b:c2:d5:27:eb:0b:ed:b6:53:
         db:ae:c1:3e:1d:86:7c:bf:fb:84:67:2e:66:4c:dd:ac:3d:35:
         78:7d:9f:11:9d:2e:b2:b6:a6:91:ac:b5:46:3c:6d:89:2d:31:
         f6:e5:6b:9c:ac:58:77:88:81:d8:de:a1:1e:85:fb:8e:cc:80:
         60:d7:69:64:45:0a:94:76:7c:2a:aa:de:8d:17:c0:59:1f:c4:
         0e:d8:8e:44:2b:65:5a:af:55:18:06:d4:f9:97:98:fa:9d:f9:
         3a:30:84:f3:93:a4:0d:b5:a8:7b:a2:bc:1c:a2:b6:54:93:d3:
         9b:39:fe:e9:4d:f2:bb:75:13:5f:9d:e6:31:75:ad:d7:91:c1:
         e1:17:9e:05:90:39:d5:79:19:7e:e0:9c:18:65:c1:7f:75:40:
         21:49:22:d1:a3:cf:b4:1f:89:43:f5:4a:63:21:38:7e:e6:76:
         81:d6:f6:a8:bf:84:38:1d:84:a9:a3:12:cb:58:be:85:c9:ef:
         ed:8b:f0:cd:2a:e4:b5:11:37:cd:eb:6a:9c:f6:6b:fa:24:cb:
         f0:9b:d4:60
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURUdNndnl6rktaXRY40EkUAMUGK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG
MzgxMkI0NDAeFw0yNjA1MDMwMjQ0NDdaFw0yNzA1MDIwMjQ5NDdaMDMxMTAvBgNV
BAMTKEM0ODYzQTNGOEQ2QkJCOEJCQjIwRDgzMTEwOTVDODY3NDE4NDI1RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsn//hkfvJGVf8RV9IyoHSJKf
YPaAvAeaXTBVeXdZKghqd3hpy2ai3TJ8U2CN+wnvikeTolG5DyPAcfngACXrkQHn
CDtnsPJ/90ownOGAlevM+CuTsGGrpfrK6a7JaOzkmPPoCdweYpGP8EvGG+G/NjMy
eY9bCTjWSKp7G4Va9S3QdCPXajsOM8BibSzy1Tv+v3Ti1zRnWHl5iIiqwkmRBEFf
/6bR2Dk+Xzz0ZGWjtlX28qKtqJdbwtan8jYu0gX+AWNR6S4TLP+VWTq822EEaIvl
uKuVCkV8KqCzHZjuQ/HuHoYLdwRF6fBSCsF0GJ75XnPBJ4PfZtEnZdyGn3+9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUxIY6P41ru4u7INgxEJXIZ0GEJf0wHwYDVR0j
BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC
MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy
QjQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhiNzJlY2E0LTczYWQtNGUwYi1h
NmE2LTdhNjU2OThiNzNiZS8wLzMxMzAzMzJlMzEzNDM4MmUzODM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RYMA0GCSqG
SIb3DQEBCwUAA4IBAQDGq/14iCIdUAizFTt8Dj/nPWuku7l+yefEUnwk4YMEWrHW
X4BeR5PI90udiSubwtUn6wvttlPbrsE+HYZ8v/uEZy5mTN2sPTV4fZ8RnS6ytqaR
rLVGPG2JLTH25WucrFh3iIHY3qEehfuOzIBg12lkRQqUdnwqqt6NF8BZH8QO2I5E
K2Var1UYBtT5l5j6nfk6MITzk6QNtah7orwcorZUk9ObOf7pTfK7dRNfneYxda3X
kcHhF54FkDnVeRl+4JwYZcF/dUAhSSLRo8+0H4lD9UpjITh+5naB1vaov4Q4HYSp
oxLLWL6Fye/ti/DNKuS1ETfN62qc9mv6JMvwm9Rg
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:17 2026 by rpki-client