Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38302e302f32332d3233203d3e20313530323034.roa
File:                     3130332e342e38302e302f32332d3233203d3e20313530323034.roa (raw, json)
Hash identifier:          fX1aquXy3wBHFbm6F7rqURzeTxgvhXC34YY6g9Q0Yc4=
Subject key identifier:   A3:3B:BF:8D:78:FD:D9:1D:C4:FA:70:04:21:1F:B9:8E:B8:7B:F7:7A
Certificate issuer:       /CN=92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1
Certificate serial:       4F29E5C8D540087C044F21843CB2067297EFBEF7
Authority key identifier: 92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38302e302f32332d3233203d3e20313530323034.roa
Signing time:             Sun 03 May 2026 02:51:26 +0000
ROA not before:           Sun 03 May 2026 02:46:26 +0000
ROA not after:            Sun 02 May 2027 02:51:26 +0000
asID:                     150204
IP address blocks:        103.4.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl
                          rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:29:e5:c8:d5:40:08:7c:04:4f:21:84:3c:b2:06:72:97:ef:be:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1
        Validity
            Not Before: May  3 02:46:26 2026 GMT
            Not After : May  2 02:51:26 2027 GMT
        Subject: CN=A33BBF8D78FDD91DC4FA7004211FB98EB87BF77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:51:0d:09:72:ad:cf:34:3c:aa:a9:5a:cf:
                    37:b3:90:5e:b0:38:d7:79:11:97:d1:5a:59:08:03:
                    de:76:3e:10:83:4c:29:c8:ee:d6:3f:cb:7f:bf:07:
                    58:5c:72:1a:6f:21:66:67:48:b8:56:93:0a:ef:46:
                    1f:b2:93:d3:ae:ad:67:c9:36:34:6c:1c:a0:44:4c:
                    f6:3f:45:91:cc:00:f4:e5:fd:68:ee:1d:7e:2a:d2:
                    b0:23:e0:8a:f3:28:8d:6a:d2:ca:be:2c:3f:e8:a6:
                    f6:99:51:8a:97:1f:7d:fc:50:13:b1:0f:88:a6:a4:
                    0a:aa:a5:d2:53:d8:a7:60:3b:d1:65:8c:8d:5c:48:
                    d3:21:cd:72:0e:3b:aa:d6:22:f5:3d:59:04:34:32:
                    28:c6:b9:2d:79:32:fa:74:d5:f3:49:9b:5d:65:e6:
                    92:e3:a2:6a:67:66:ae:09:c1:b0:e7:86:9f:19:d6:
                    45:15:e0:45:e1:ce:71:3c:3a:62:6a:51:05:5d:40:
                    42:eb:b2:86:9a:49:47:b0:fa:26:ce:0e:54:00:03:
                    c8:7a:8f:ae:fc:04:ae:5d:3a:f3:b5:31:f2:8b:07:
                    15:2e:1d:cc:83:9b:85:d9:d7:e1:a8:01:da:8d:16:
                    1a:75:1f:f7:de:9c:06:18:fb:87:05:9d:35:e0:40:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3B:BF:8D:78:FD:D9:1D:C4:FA:70:04:21:1F:B9:8E:B8:7B:F7:7A
            X509v3 Authority Key Identifier:
                keyid:92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38302e302f32332d3233203d3e20313530323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:97:40:ab:f5:68:ef:8a:92:0b:21:eb:90:9e:a0:ea:97:f7:
         97:81:fc:ee:08:60:23:4c:f8:a6:1b:19:1e:1d:8c:79:16:0c:
         27:81:03:af:df:b2:f1:cc:e1:3b:5b:89:74:5f:87:8e:a3:db:
         e1:71:b9:33:97:62:06:7c:e8:c6:18:f9:09:4d:ba:72:48:9b:
         6f:43:63:57:84:6a:b3:6c:0a:c6:3a:af:1f:51:06:1c:0f:bd:
         b1:3a:39:cd:4b:e9:27:34:1b:c8:6d:32:7b:d1:f2:31:7f:3b:
         01:58:f8:b3:52:46:a9:11:37:c1:1f:97:e7:f0:39:d1:12:9f:
         49:23:25:30:29:4f:e9:af:95:56:7c:b1:0f:c9:80:a5:01:76:
         1d:59:6f:63:0e:0d:f3:ec:92:1a:eb:84:0c:7a:63:73:fb:13:
         26:5e:71:19:f9:f1:08:65:85:00:4c:34:29:cd:07:e6:89:25:
         06:2e:ff:7a:48:26:9b:95:b0:38:9b:60:67:e6:c8:6a:16:d1:
         4b:5f:2b:36:5a:0a:36:1a:be:ad:ef:d8:c1:ec:55:57:ad:53:
         6a:7e:cf:9b:4b:df:33:ae:55:57:2c:67:94:4d:5d:62:03:dc:
         35:ce:62:3f:7a:f2:d3:88:fd:e4:9c:36:25:47:6d:39:ad:d9:
         65:d5:71:58
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTynlyNVACHwETyGEPLIGcpfvvvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJFOTVGMEUzQzAxQzg3MUNBMzNENUI0QUY5M0U2MTEy
NEI2REJFMTAeFw0yNjA1MDMwMjQ2MjZaFw0yNzA1MDIwMjUxMjZaMDMxMTAvBgNV
BAMTKEEzM0JCRjhENzhGREQ5MURDNEZBNzAwNDIxMUZCOThFQjg3QkY3N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOAVENCXKtzzQ8qqlazzezkF6w
ONd5EZfRWlkIA952PhCDTCnI7tY/y3+/B1hcchpvIWZnSLhWkwrvRh+yk9OurWfJ
NjRsHKBETPY/RZHMAPTl/WjuHX4q0rAj4IrzKI1q0sq+LD/opvaZUYqXH338UBOx
D4impAqqpdJT2KdgO9FljI1cSNMhzXIOO6rWIvU9WQQ0MijGuS15Mvp01fNJm11l
5pLjompnZq4JwbDnhp8Z1kUV4EXhznE8OmJqUQVdQELrsoaaSUew+ibODlQAA8h6
j678BK5dOvO1MfKLBxUuHcyDm4XZ1+GoAdqNFhp1H/fenAYY+4cFnTXgQBHXAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUozu/jXj92R3E+nAEIR+5jrh793owHwYDVR0j
BBgwFoAUkulfDjwByHHKM9W0r5PmESS22+EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTAxOTU4OWEtZDUyNS00MGZjLTg5NGEtMTJlNDQwMTBlM2U0LzAvOTJFOTVGMEUz
QzAxQzg3MUNBMzNENUI0QUY5M0U2MTEyNEI2REJFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkU5NUYwRTNDMDFDODcxQ0EzM0Q1QjRBRjkzRTYxMTI0QjZE
QkUxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwMTk1ODlhLWQ1MjUtNDBmYy04
OTRhLTEyZTQ0MDEwZTNlNC8wLzMxMzAzMzJlMzQyZTM4MzAyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMTM1MzAzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnBFAwDQYJKoZIhvcN
AQELBQADggEBAHmXQKv1aO+Kkgsh65CeoOqX95eB/O4IYCNM+KYbGR4djHkWDCeB
A6/fsvHM4TtbiXRfh46j2+FxuTOXYgZ86MYY+QlNunJIm29DY1eEarNsCsY6rx9R
BhwPvbE6Oc1L6Sc0G8htMnvR8jF/OwFY+LNSRqkRN8Efl+fwOdESn0kjJTApT+mv
lVZ8sQ/JgKUBdh1Zb2MODfPskhrrhAx6Y3P7EyZecRn58QhlhQBMNCnNB+aJJQYu
/3pIJpuVsDibYGfmyGoW0UtfKzZaCjYavq3v2MHsVVetU2p+z5tL3zOuVVcsZ5RN
XWID3DXOYj968tOI/eScNiVHbTmt2WXVcVg=
-----END CERTIFICATE-----
Generated at Wed May 13 01:36:18 2026 by rpki-client