Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa
File:                     3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier:          cCLPkQchjHWkE+UKdKRA08i0rTrBMXXMvMlke2pO7XI=
Subject key identifier:   87:70:37:16:A6:7D:D3:CF:91:2D:B4:9A:D1:A0:1A:6A:28:25:31:59
Certificate issuer:       /CN=A178C6332DA881B104F0F93428812E41FBC50469
Certificate serial:       0A65D551626AD2BD77854200D7D641355C9180FB
Authority key identifier: A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa
Signing time:             Sun 03 May 2026 02:51:48 +0000
ROA not before:           Sun 03 May 2026 02:46:48 +0000
ROA not after:            Sun 02 May 2027 02:51:48 +0000
asID:                     138079
IP address blocks:        103.130.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl
                          rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:65:d5:51:62:6a:d2:bd:77:85:42:00:d7:d6:41:35:5c:91:80:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A178C6332DA881B104F0F93428812E41FBC50469
        Validity
            Not Before: May  3 02:46:48 2026 GMT
            Not After : May  2 02:51:48 2027 GMT
        Subject: CN=87703716A67DD3CF912DB49AD1A01A6A28253159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:86:82:9a:1d:af:7f:62:ec:8f:db:6b:8c:
                    6d:6c:e1:cc:e0:03:be:b9:d0:83:15:85:a9:cc:a7:
                    1a:93:d8:66:9f:f8:ad:7e:0f:41:4c:8c:41:79:b0:
                    02:e5:c6:79:4c:bd:bd:fb:6f:7b:86:b5:89:8d:2c:
                    fe:93:d9:81:fc:b4:d0:74:61:3c:d5:a9:6e:ca:90:
                    e5:a4:14:b5:f6:fe:b6:e5:3a:68:71:3b:e7:6c:6f:
                    43:3d:62:e8:f1:82:3b:2c:bd:6f:f9:e1:3d:b3:10:
                    c9:58:3b:b2:af:27:21:8f:8d:12:b3:c7:0e:42:4d:
                    54:af:65:4d:d8:4c:9c:48:bc:e7:89:61:95:2d:e2:
                    ec:b1:b8:29:8e:50:79:3f:1b:4d:2c:60:ce:af:ef:
                    b8:13:ef:89:33:33:da:0f:da:2d:2a:3a:46:a6:4f:
                    77:9f:58:ca:19:5d:d9:8d:df:23:20:61:d4:48:38:
                    c3:56:d1:ad:07:4c:b2:df:0e:08:12:36:84:b1:57:
                    e7:a7:df:7c:f5:2b:c0:d4:4d:6d:7e:b9:61:40:c0:
                    49:7f:df:95:0d:43:d8:18:2d:fa:1d:d3:6e:1b:ea:
                    cb:5a:78:d7:6d:8d:05:80:79:ed:39:25:80:48:31:
                    e3:88:6b:bd:72:74:9c:a4:21:c8:e8:aa:63:62:00:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:70:37:16:A6:7D:D3:CF:91:2D:B4:9A:D1:A0:1A:6A:28:25:31:59
            X509v3 Authority Key Identifier:
                keyid:A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:85:51:59:1c:d3:b1:0a:1e:57:de:2f:2c:1a:07:fe:ca:47:
         10:35:23:59:fa:55:56:e0:10:6b:b9:d9:17:3a:07:14:12:66:
         72:ef:51:9b:5b:b2:3a:77:2e:89:84:3c:68:a8:82:32:95:52:
         88:4e:c3:98:7a:8f:e4:aa:81:58:89:e1:70:19:54:4e:e7:99:
         cb:c5:46:9b:49:0f:2b:33:75:54:80:1b:f3:ee:3d:34:20:f7:
         27:01:7e:37:3c:19:89:ad:98:b6:de:2e:1f:51:59:2b:6f:9e:
         d2:3d:e1:1c:80:fc:0c:48:0f:f7:6f:3e:1e:ed:1d:20:5f:73:
         ae:07:a1:ab:70:a8:a5:e1:57:01:1a:80:1c:81:30:5e:e9:c6:
         00:72:1e:ce:eb:1f:8c:ff:21:e6:f7:04:65:0f:3b:b9:52:2e:
         3d:f3:42:3f:cd:88:d0:9d:15:72:73:bc:d2:e8:79:a3:9d:24:
         15:36:08:b0:5f:36:48:56:6d:39:21:5b:b7:ae:08:ad:bb:59:
         32:61:ac:92:10:55:fa:2c:6f:ce:35:36:95:6e:ee:45:7c:33:
         3e:d6:4f:2b:87:83:37:4d:b1:0a:a3:f5:90:19:62:b0:dd:8c:
         8f:da:98:36:68:9d:b7:6e:fa:36:8b:13:1b:24:03:cf:11:d7:
         1c:d3:eb:7f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCmXVUWJq0r13hUIA19ZBNVyRgPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE3OEM2MzMyREE4ODFCMTA0RjBGOTM0Mjg4MTJFNDFG
QkM1MDQ2OTAeFw0yNjA1MDMwMjQ2NDhaFw0yNzA1MDIwMjUxNDhaMDMxMTAvBgNV
BAMTKDg3NzAzNzE2QTY3REQzQ0Y5MTJEQjQ5QUQxQTAxQTZBMjgyNTMxNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUIaCmh2vf2Lsj9trjG1s4czg
A7650IMVhanMpxqT2Gaf+K1+D0FMjEF5sALlxnlMvb37b3uGtYmNLP6T2YH8tNB0
YTzVqW7KkOWkFLX2/rblOmhxO+dsb0M9YujxgjssvW/54T2zEMlYO7KvJyGPjRKz
xw5CTVSvZU3YTJxIvOeJYZUt4uyxuCmOUHk/G00sYM6v77gT74kzM9oP2i0qOkam
T3efWMoZXdmN3yMgYdRIOMNW0a0HTLLfDggSNoSxV+en33z1K8DUTW1+uWFAwEl/
35UNQ9gYLfod024b6staeNdtjQWAee05JYBIMeOIa71ydJykIcjoqmNiACvPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUh3A3FqZ908+RLbSa0aAaaiglMVkwHwYDVR0j
BBgwFoAUoXjGMy2ogbEE8Pk0KIEuQfvFBGkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTEyYTNmMjgtODI3My00ZGQ1LTg3ZmMtMWVmMDBhY2FjOWI2LzAvQTE3OEM2MzMy
REE4ODFCMTA0RjBGOTM0Mjg4MTJFNDFGQkM1MDQ2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMTc4QzYzMzJEQTg4MUIxMDRGMEY5MzQyODgxMkU0MUZCQzUw
NDY5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxMmEzZjI4LTgyNzMtNGRkNS04
N2ZjLTFlZjAwYWNhYzliNi8wLzMxMzAzMzJlMzEzMzMwMmUzNjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4I/MA0GCSqG
SIb3DQEBCwUAA4IBAQByhVFZHNOxCh5X3i8sGgf+ykcQNSNZ+lVW4BBrudkXOgcU
EmZy71GbW7I6dy6JhDxoqIIylVKITsOYeo/kqoFYieFwGVRO55nLxUabSQ8rM3VU
gBvz7j00IPcnAX43PBmJrZi23i4fUVkrb57SPeEcgPwMSA/3bz4e7R0gX3OuB6Gr
cKil4VcBGoAcgTBe6cYAch7O6x+M/yHm9wRlDzu5Ui4980I/zYjQnRVyc7zS6Hmj
nSQVNgiwXzZIVm05IVu3rgitu1kyYaySEFX6LG/ONTaVbu5FfDM+1k8rh4M3TbEK
o/WQGWKw3YyP2pg2aJ23bvo2ixMbJAPPEdcc0+t/
-----END CERTIFICATE-----
Generated at Wed May 13 13:30:33 2026 by rpki-client