Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa
File:                     3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (raw, json)
Hash identifier:          MoFbGw9hVRSVf3DPc/KG0BTNUX5J8EnngaE3zfGzXJk=
Subject key identifier:   1D:46:76:CC:11:DF:27:5F:66:B3:92:49:5A:57:7B:EE:20:DB:BA:97
Certificate issuer:       /CN=72B5B7AD5B62DED550889B15909739A2F336730F
Certificate serial:       51A2DEEF53E279AEF2C4799382E8100AC16728FB
Authority key identifier: 72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa
Signing time:             Sun 03 May 2026 02:54:03 +0000
ROA not before:           Sun 03 May 2026 02:49:03 +0000
ROA not after:            Sun 02 May 2027 02:54:03 +0000
asID:                     150926
IP address blocks:        103.203.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl
                          rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a2:de:ef:53:e2:79:ae:f2:c4:79:93:82:e8:10:0a:c1:67:28:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B5B7AD5B62DED550889B15909739A2F336730F
        Validity
            Not Before: May  3 02:49:03 2026 GMT
            Not After : May  2 02:54:03 2027 GMT
        Subject: CN=1D4676CC11DF275F66B392495A577BEE20DBBA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a7:47:9d:50:f3:43:b9:eb:09:5a:4d:34:df:
                    e5:77:63:fc:ed:b2:6d:eb:f1:55:76:88:83:a1:47:
                    27:3e:a5:c5:2d:87:00:04:91:2d:b2:63:b4:11:be:
                    20:bf:1a:34:99:93:cd:19:d2:16:89:ce:2e:36:35:
                    ac:fb:7d:c7:37:ab:e3:f8:7b:9f:57:fc:fa:8b:02:
                    4f:50:89:10:c8:d3:50:b2:4d:f1:69:79:1f:08:19:
                    d4:f8:75:aa:8b:37:bc:f0:a2:64:9f:a4:68:45:4a:
                    f5:ba:96:21:11:2e:02:6c:a7:a8:da:83:3d:9f:e3:
                    0b:fb:bc:c8:b0:ce:40:0b:3c:8b:99:5a:93:08:6f:
                    84:1d:63:7e:c8:17:36:32:40:4a:67:12:9a:18:0b:
                    2c:5c:cd:05:fe:92:5f:ea:fb:f6:75:89:f4:7c:9b:
                    a7:0e:a0:b9:b2:f1:9d:20:95:5d:19:28:22:11:37:
                    c5:0d:9f:0e:79:76:e7:4b:a8:16:68:e0:e8:26:fb:
                    9a:74:a3:ba:c2:00:65:2c:74:20:18:f7:a7:96:5c:
                    19:00:06:9e:94:b0:0b:b8:7c:33:99:15:ca:b1:cb:
                    35:88:59:8b:2f:b7:8b:b0:cc:dc:b3:3c:b3:1b:d0:
                    a4:76:6a:03:c5:17:6f:be:f4:6b:bc:06:12:1a:67:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:46:76:CC:11:DF:27:5F:66:B3:92:49:5A:57:7B:EE:20:DB:BA:97
            X509v3 Authority Key Identifier:
                keyid:72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:97:ba:5a:24:e2:9c:93:e8:aa:6f:10:6f:cf:e7:e7:b9:
         ab:ba:5c:7d:dd:1d:0e:5e:4d:cb:b4:9a:dd:29:63:1c:56:ee:
         91:86:7e:4a:65:ad:cf:4f:36:73:5c:a1:15:0a:d0:58:85:5e:
         28:90:55:4b:96:58:65:06:93:b7:7d:81:d5:6c:ee:ac:94:73:
         4e:94:aa:a9:0e:84:e0:26:af:9e:60:8f:2b:82:d8:31:8c:75:
         6d:9d:b3:1c:93:76:5f:06:42:70:be:7c:4a:1a:21:a0:da:d9:
         c2:b1:08:15:10:db:c8:f0:d7:ed:9c:f0:20:db:74:56:e4:c1:
         e5:09:f0:1a:cf:86:3a:f8:af:65:6f:1e:a9:75:c7:62:47:4c:
         c8:83:40:19:60:7e:51:96:be:2e:cd:e7:80:96:60:4d:98:c4:
         ca:3f:60:84:aa:7c:d5:e6:79:18:d3:76:ad:71:04:2e:76:26:
         10:23:d8:a1:b6:dd:8b:bb:ac:b3:3c:26:b8:59:70:d7:fb:37:
         6b:2b:49:ee:13:76:2b:94:27:77:58:0c:66:2f:47:ad:39:cd:
         61:f8:94:8f:ae:bf:8d:18:0e:3b:42:64:0a:2b:76:b8:8e:19:
         05:c6:46:0e:4b:56:0f:f6:3e:2f:60:60:fc:37:a5:c2:66:6b:
         ff:d8:d3:39
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUaLe71Piea7yxHmTgugQCsFnKPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCNUI3QUQ1QjYyREVENTUwODg5QjE1OTA5NzM5QTJG
MzM2NzMwRjAeFw0yNjA1MDMwMjQ5MDNaFw0yNzA1MDIwMjU0MDNaMDMxMTAvBgNV
BAMTKDFENDY3NkNDMTFERjI3NUY2NkIzOTI0OTVBNTc3QkVFMjBEQkJBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrp0edUPNDuesJWk003+V3Y/zt
sm3r8VV2iIOhRyc+pcUthwAEkS2yY7QRviC/GjSZk80Z0haJzi42Naz7fcc3q+P4
e59X/PqLAk9QiRDI01CyTfFpeR8IGdT4daqLN7zwomSfpGhFSvW6liERLgJsp6ja
gz2f4wv7vMiwzkALPIuZWpMIb4QdY37IFzYyQEpnEpoYCyxczQX+kl/q+/Z1ifR8
m6cOoLmy8Z0glV0ZKCIRN8UNnw55dudLqBZo4Ogm+5p0o7rCAGUsdCAY96eWXBkA
Bp6UsAu4fDOZFcqxyzWIWYsvt4uwzNyzPLMb0KR2agPFF2++9Gu8BhIaZ8kTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUHUZ2zBHfJ19ms5JJWld77iDbupcwHwYDVR0j
BBgwFoAUcrW3rVti3tVQiJsVkJc5ovM2cw8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWEwMTI5YTgtMjdlOC00MDQ2LTg5ODktODY1YjI1N2VhNmNhLzAvNzJCNUI3QUQ1
QjYyREVENTUwODg5QjE1OTA5NzM5QTJGMzM2NzMwRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MkI1QjdBRDVCNjJERUQ1NTA4ODlCMTU5MDk3MzlBMkYzMzY3
MzBGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlhMDEyOWE4LTI3ZTgtNDA0Ni04
OTg5LTg2NWIyNTdlYTZjYS8wLzMxMzAzMzJlMzIzMDMzMmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8taMA0GCSqG
SIb3DQEBCwUAA4IBAQAHyJe6WiTinJPoqm8Qb8/n57mrulx93R0OXk3LtJrdKWMc
Vu6Rhn5KZa3PTzZzXKEVCtBYhV4okFVLllhlBpO3fYHVbO6slHNOlKqpDoTgJq+e
YI8rgtgxjHVtnbMck3ZfBkJwvnxKGiGg2tnCsQgVENvI8NftnPAg23RW5MHlCfAa
z4Y6+K9lbx6pdcdiR0zIg0AZYH5Rlr4uzeeAlmBNmMTKP2CEqnzV5nkY03atcQQu
diYQI9ihtt2Lu6yzPCa4WXDX+zdrK0nuE3YrlCd3WAxmL0etOc1h+JSPrr+NGA47
QmQKK3a4jhkFxkYOS1YP9j4vYGD8N6XCZmv/2NM5
-----END CERTIFICATE-----
Generated at Wed May 13 04:08:55 2026 by rpki-client