Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa
File:                     3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (raw, json)
Hash identifier:          6RDMlBYKz+7bJ5EOXVwDOVFpA9NmUujfNeaVaTSvntE=
Subject key identifier:   B3:D5:22:A7:AB:02:56:01:6D:17:E0:2E:C2:F0:CF:D0:7A:BC:DD:3B
Certificate issuer:       /CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4
Certificate serial:       3FE736ED2B472217EA9F9CFF7B952E53D4E30876
Authority key identifier: 4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa
Signing time:             Sun 03 May 2026 02:53:51 +0000
ROA not before:           Sun 03 May 2026 02:48:51 +0000
ROA not after:            Sun 02 May 2027 02:53:51 +0000
asID:                     149333
IP address blocks:        103.179.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl
                          rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e7:36:ed:2b:47:22:17:ea:9f:9c:ff:7b:95:2e:53:d4:e3:08:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4
        Validity
            Not Before: May  3 02:48:51 2026 GMT
            Not After : May  2 02:53:51 2027 GMT
        Subject: CN=B3D522A7AB0256016D17E02EC2F0CFD07ABCDD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:dc:7a:7e:12:c7:41:2b:62:40:15:f3:93:
                    3b:a5:3d:bb:63:df:03:71:fe:67:07:44:a9:12:35:
                    9f:c6:41:95:17:84:fc:74:ab:bc:ac:e4:42:19:77:
                    8d:56:c2:e2:81:43:76:db:50:50:e6:54:d7:b7:e0:
                    fc:fb:8e:f3:36:f5:21:b8:76:36:25:5b:0e:bb:e5:
                    69:b8:32:58:91:00:d6:d2:da:64:a9:c7:dc:16:88:
                    fb:7f:43:c5:f1:dc:80:94:f2:af:0a:28:f1:15:c9:
                    93:e7:5d:e6:a6:98:52:af:c0:e9:8a:10:14:86:be:
                    23:39:57:4f:ff:97:e4:53:7f:33:a0:b1:ab:79:42:
                    df:89:39:31:df:29:9f:82:e5:7d:d1:83:53:b5:e9:
                    63:b6:b5:ef:87:d7:32:9b:bf:ec:d0:80:03:4f:92:
                    52:e3:43:f6:3d:8e:c0:ec:b1:d6:f0:3e:b1:65:46:
                    72:f3:e7:b2:a9:a6:c3:7c:16:83:cd:74:f4:eb:40:
                    ef:5d:47:c9:74:db:31:d7:93:15:ca:d9:e5:7e:01:
                    2b:3d:6e:12:40:00:5f:7f:89:3d:7f:4a:2d:a1:ef:
                    ec:6a:43:d9:10:64:5e:08:78:c0:a3:dd:d0:1b:68:
                    31:b3:b1:96:12:73:72:00:1a:c4:29:b2:09:45:65:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D5:22:A7:AB:02:56:01:6D:17:E0:2E:C2:F0:CF:D0:7A:BC:DD:3B
            X509v3 Authority Key Identifier:
                keyid:4F:CC:5F:72:C8:4C:03:16:A4:33:3F:A5:DC:1D:8E:50:86:1D:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FCC5F72C84C0316A4333FA5DC1D8E50861DCFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:88:c2:82:d7:35:34:bc:3f:44:d9:ad:73:16:34:91:a8:86:
         97:0f:22:4b:c0:1c:2d:60:bf:18:0f:92:1b:15:60:95:ce:bf:
         2f:bb:30:d3:c6:9e:81:33:7c:ad:6e:81:c9:23:3a:f6:7f:dc:
         8f:83:26:8d:5c:00:5d:ad:7c:5f:82:b6:ec:11:a3:ca:0e:26:
         4e:ae:07:6b:32:74:bc:c3:08:ff:d8:e9:eb:a8:70:b1:95:98:
         81:04:f7:b6:38:c3:8e:7b:d5:71:a3:b6:f3:af:49:0f:49:fb:
         20:a9:b8:d9:b9:82:76:1f:ca:14:bb:68:8c:20:9c:9b:e3:36:
         0d:06:23:8e:bc:17:43:8b:b3:97:a5:c2:2f:3d:01:4a:c0:87:
         a4:b5:2a:3f:3d:d9:f2:b0:5b:10:97:e9:fb:32:fd:97:09:dc:
         7a:81:24:45:b1:dc:26:71:30:73:e8:da:5c:57:c1:c5:eb:87:
         38:6b:8e:63:f0:7c:16:39:60:cf:71:5f:3a:52:be:a9:ea:5e:
         11:6c:7a:bb:a6:1a:5e:a0:a1:03:fc:4e:a4:eb:b9:e4:be:04:
         2d:38:f4:dc:4c:3c:8a:a5:cc:e1:97:db:35:aa:68:b2:fb:ce:
         69:24:4c:b0:75:b3:ea:99:66:54:21:6a:ec:26:47:03:3f:1c:
         29:b4:c1:51
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUP+c27StHIhfqn5z/e5UuU9TjCHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZDQzVGNzJDODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4
NjFEQ0ZCNDAeFw0yNjA1MDMwMjQ4NTFaFw0yNzA1MDIwMjUzNTFaMDMxMTAvBgNV
BAMTKEIzRDUyMkE3QUIwMjU2MDE2RDE3RTAyRUMyRjBDRkQwN0FCQ0REM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKatx6fhLHQStiQBXzkzulPbtj
3wNx/mcHRKkSNZ/GQZUXhPx0q7ys5EIZd41WwuKBQ3bbUFDmVNe34Pz7jvM29SG4
djYlWw675Wm4MliRANbS2mSpx9wWiPt/Q8Xx3ICU8q8KKPEVyZPnXeammFKvwOmK
EBSGviM5V0//l+RTfzOgsat5Qt+JOTHfKZ+C5X3Rg1O16WO2te+H1zKbv+zQgANP
klLjQ/Y9jsDssdbwPrFlRnLz57KppsN8FoPNdPTrQO9dR8l02zHXkxXK2eV+ASs9
bhJAAF9/iT1/Si2h7+xqQ9kQZF4IeMCj3dAbaDGzsZYSc3IAGsQpsglFZRcbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUs9Uip6sCVgFtF+AuwvDP0Hq83TswHwYDVR0j
BBgwFoAUT8xfcshMAxakMz+l3B2OUIYdz7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTk4YjM1NDktZTI1My00ZmQ5LWE3MDQtMjk2OTQ0ZTVhMDYzLzAvNEZDQzVGNzJD
ODRDMDMxNkE0MzMzRkE1REMxRDhFNTA4NjFEQ0ZCNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RkNDNUY3MkM4NEMwMzE2QTQzMzNGQTVEQzFEOEU1MDg2MURD
RkI0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk5OGIzNTQ5LWUyNTMtNGZkOS1h
NzA0LTI5Njk0NGU1YTA2My8wLzMxMzAzMzJlMzEzNzM5MmUzMjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7MbMA0GCSqG
SIb3DQEBCwUAA4IBAQANiMKC1zU0vD9E2a1zFjSRqIaXDyJLwBwtYL8YD5IbFWCV
zr8vuzDTxp6BM3ytboHJIzr2f9yPgyaNXABdrXxfgrbsEaPKDiZOrgdrMnS8wwj/
2OnrqHCxlZiBBPe2OMOOe9Vxo7bzr0kPSfsgqbjZuYJ2H8oUu2iMIJyb4zYNBiOO
vBdDi7OXpcIvPQFKwIektSo/PdnysFsQl+n7Mv2XCdx6gSRFsdwmcTBz6NpcV8HF
64c4a45j8HwWOWDPcV86Ur6p6l4RbHq7phpeoKED/E6k67nkvgQtOPTcTDyKpczh
l9s1qmiy+85pJEywdbPqmWZUIWrsJkcDPxwptMFR
-----END CERTIFICATE-----
Generated at Wed May 13 07:45:52 2026 by rpki-client