Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa
File:                     3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (raw, json)
Hash identifier:          6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=
Subject key identifier:   EA:22:B8:B2:0C:3A:A9:2B:6E:DF:7A:02:F2:DF:42:48:81:B9:60:F6
Certificate issuer:       /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Certificate serial:       329AFAC1D14566979B807B72604E84AF5766F5CF
Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa
Signing time:             Sun 03 May 2026 02:54:59 +0000
ROA not before:           Sun 03 May 2026 02:49:59 +0000
ROA not after:            Sun 02 May 2027 02:54:59 +0000
asID:                     142340
IP address blocks:        103.169.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
                          rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9a:fa:c1:d1:45:66:97:9b:80:7b:72:60:4e:84:af:57:66:f5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
        Validity
            Not Before: May  3 02:49:59 2026 GMT
            Not After : May  2 02:54:59 2027 GMT
        Subject: CN=EA22B8B20C3AA92B6EDF7A02F2DF424881B960F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:0b:de:be:38:8f:e6:e7:a0:7c:12:28:e3:
                    76:42:8d:b2:1a:60:1a:15:bf:8c:7c:04:d8:c9:59:
                    bf:69:86:01:1e:00:7d:09:a8:d4:bc:e6:ae:6e:ab:
                    a2:74:e6:c3:03:2f:44:79:86:24:ba:ef:93:62:ca:
                    e6:29:de:17:6f:1d:34:c1:48:9d:b4:af:ad:61:d2:
                    d1:df:3e:c3:48:59:e1:e0:a3:68:5b:3c:28:69:d5:
                    1f:45:fa:04:01:80:39:8d:5e:be:ef:fb:12:7b:a4:
                    f6:89:31:64:29:a3:e6:af:3c:62:c3:63:d4:88:99:
                    b8:25:ca:7f:b4:f6:c4:9a:de:a9:6f:da:29:a2:8c:
                    0c:ae:4a:05:f5:41:01:b6:67:e4:e7:bf:63:86:d2:
                    ce:b9:f2:0b:e7:27:25:09:21:14:f2:4f:a1:6a:95:
                    f2:54:fd:cd:83:e5:7f:ca:70:0c:4c:4d:72:b4:fb:
                    f8:30:d9:1b:93:da:6e:7e:d7:a0:ff:76:f3:e0:dc:
                    44:2c:5a:eb:a8:05:fd:37:52:6e:0b:62:0e:a8:a3:
                    8c:6a:2c:ad:f0:f2:a7:bf:25:72:8e:55:ea:9c:a7:
                    c0:0f:52:d2:cb:48:ce:68:6b:68:0b:25:32:38:9b:
                    5f:f2:e2:ad:15:c1:27:97:d0:de:01:02:a1:bb:82:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:22:B8:B2:0C:3A:A9:2B:6E:DF:7A:02:F2:DF:42:48:81:B9:60:F6
            X509v3 Authority Key Identifier:
                keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:ee:be:4a:2f:44:eb:f4:6d:b2:83:6c:13:82:fd:f1:9c:13:
         0b:8f:25:b1:d6:ce:b8:82:c1:29:9a:59:23:87:e6:32:5a:0d:
         e4:92:62:95:87:b0:b5:c4:13:6e:c1:a8:a2:57:52:57:3a:72:
         c6:ea:ad:33:bf:7c:00:36:3e:58:34:2a:b2:71:e5:96:e0:9e:
         74:30:d8:79:41:9e:11:be:9d:59:77:e0:0f:b3:01:79:05:a7:
         cd:69:31:d9:21:79:1e:50:5e:db:e9:5a:76:c8:27:69:df:7e:
         ef:4d:75:e5:8e:9c:2d:26:d9:80:19:fc:1b:a2:53:8c:20:1a:
         58:b3:c7:18:d3:5b:14:cf:a1:78:48:21:bc:b5:e7:72:d1:8e:
         f0:ef:62:68:b7:2a:c3:ce:ec:3f:6d:8c:23:13:f3:ce:4b:a2:
         e3:ba:1b:a4:db:fb:84:35:63:65:13:ec:23:76:a8:09:f0:f7:
         e4:20:60:25:08:3b:08:a5:7f:1d:62:12:2f:e6:b9:0b:6c:f2:
         a7:75:f2:59:01:96:1d:b0:a8:30:03:9b:8b:09:3e:d5:cf:f7:
         1e:ac:03:87:16:91:ff:cc:cc:72:17:e3:49:96:ee:13:9d:0d:
         67:af:30:fb:29:d3:55:5f:f2:93:3d:99:c3:9e:4e:aa:76:27:
         17:24:a2:8b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMpr6wdFFZpebgHtyYE6Er1dm9c8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMwQjY0N0MxREY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2
M0QxMEY1ODAeFw0yNjA1MDMwMjQ5NTlaFw0yNzA1MDIwMjU0NTlaMDMxMTAvBgNV
BAMTKEVBMjJCOEIyMEMzQUE5MkI2RURGN0EwMkYyREY0MjQ4ODFCOTYwRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5QvevjiP5uegfBIo43ZCjbIa
YBoVv4x8BNjJWb9phgEeAH0JqNS85q5uq6J05sMDL0R5hiS675NiyuYp3hdvHTTB
SJ20r61h0tHfPsNIWeHgo2hbPChp1R9F+gQBgDmNXr7v+xJ7pPaJMWQpo+avPGLD
Y9SImbglyn+09sSa3qlv2imijAyuSgX1QQG2Z+Tnv2OG0s658gvnJyUJIRTyT6Fq
lfJU/c2D5X/KcAxMTXK0+/gw2RuT2m5+16D/dvPg3EQsWuuoBf03Um4LYg6oo4xq
LK3w8qe/JXKOVeqcp8APUtLLSM5oa2gLJTI4m1/y4q0VwSeX0N4BAqG7gq0XAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU6iK4sgw6qStu33oC8t9CSIG5YPYwHwYDVR0j
BBgwFoAUTAtkfB333OIgEGvaEcHX0WPRD1gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWUzZjY2YTgtYTBmZi00NGZhLWJkYTYtOGU1ZjI3ZDYxYjNmLzAvNEMwQjY0N0Mx
REY3RENFMjIwMTA2QkRBMTFDMUQ3RDE2M0QxMEY1OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzBCNjQ3QzFERjdEQ0UyMjAxMDZCREExMUMxRDdEMTYzRDEw
RjU4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzllM2Y2NmE4LWEwZmYtNDRmYS1i
ZGE2LThlNWYyN2Q2MWIzZi8wLzMxMzAzMzJlMzEzNjM5MmUzMTMzMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqYIwDQYJ
KoZIhvcNAQELBQADggEBAIfuvkovROv0bbKDbBOC/fGcEwuPJbHWzriCwSmaWSOH
5jJaDeSSYpWHsLXEE27BqKJXUlc6csbqrTO/fAA2Plg0KrJx5ZbgnnQw2HlBnhG+
nVl34A+zAXkFp81pMdkheR5QXtvpWnbIJ2nffu9NdeWOnC0m2YAZ/BuiU4wgGliz
xxjTWxTPoXhIIby153LRjvDvYmi3KsPO7D9tjCMT885LouO6G6Tb+4Q1Y2UT7CN2
qAnw9+QgYCUIOwilfx1iEi/muQts8qd18lkBlh2wqDADm4sJPtXP9x6sA4cWkf/M
zHIX40mW7hOdDWevMPsp01Vf8pM9mcOeTqp2Jxckoos=
-----END CERTIFICATE-----
Generated at Wed May 13 04:26:13 2026 by rpki-client