Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa
File:                     3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          CyXCnh6Eu/KCDGsGPBvecfzZa94iTRYuLOf5EOeQnK4=
Subject key identifier:   EA:24:82:14:C2:E1:F6:E8:90:35:DA:28:68:FE:B1:40:A6:95:81:8E
Certificate issuer:       /CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
Certificate serial:       4AE1A94121597CE9FF8B071E08FC9ED05EEB9746
Authority key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa
Signing time:             Sun 03 May 2026 02:55:54 +0000
ROA not before:           Sun 03 May 2026 02:50:54 +0000
ROA not after:            Sun 02 May 2027 02:55:54 +0000
asID:                     63497
IP address blocks:        103.232.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl
                          rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e1:a9:41:21:59:7c:e9:ff:8b:07:1e:08:fc:9e:d0:5e:eb:97:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
        Validity
            Not Before: May  3 02:50:54 2026 GMT
            Not After : May  2 02:55:54 2027 GMT
        Subject: CN=EA248214C2E1F6E89035DA2868FEB140A695818E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:31:c8:6d:0a:6c:5e:10:1d:15:3c:7d:8f:0e:
                    4d:4d:d8:7a:8e:9d:72:8b:7c:37:d7:20:0d:a0:8b:
                    89:1e:c1:93:dd:2c:69:8a:3f:35:db:33:71:73:6d:
                    14:2a:3c:39:ad:07:6a:f9:88:09:3d:69:bd:47:a4:
                    d5:3b:c1:16:f5:4b:74:d6:f5:f5:b7:c7:7d:63:e8:
                    3d:3f:dc:1a:ba:ee:54:fe:6e:eb:bc:e4:bc:f6:30:
                    36:1b:7d:c6:ce:c5:fe:31:9c:a2:ed:37:9a:fd:ce:
                    36:85:98:c2:ff:b9:bd:1c:a3:e8:e0:eb:5c:84:01:
                    e2:2e:70:b8:dd:2d:90:f0:71:ad:78:fb:42:74:a5:
                    02:7c:af:5d:c7:23:fb:d6:32:10:91:44:80:bc:a2:
                    a0:42:9b:94:5d:30:e6:bb:60:88:03:7d:48:e3:bd:
                    a5:2d:93:07:1d:fa:52:bc:99:a6:24:47:37:5a:58:
                    77:a4:78:91:f1:28:37:93:44:2f:ec:8b:a6:8d:50:
                    0d:64:37:d0:2e:89:da:02:e7:fb:bd:7c:a2:03:ee:
                    2a:48:48:36:45:5e:e9:30:de:66:8e:3c:f7:c5:a9:
                    d8:ce:16:63:65:22:02:e8:c4:44:db:23:02:4f:a5:
                    ed:70:15:10:97:c3:05:7d:f9:90:ca:21:76:75:da:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:24:82:14:C2:E1:F6:E8:90:35:DA:28:68:FE:B1:40:A6:95:81:8E
            X509v3 Authority Key Identifier:
                keyid:97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:98:ad:1c:f1:0c:f3:d9:7b:f8:08:02:09:27:cd:25:8b:79:
         36:8e:24:f9:6e:0b:d2:dd:bb:63:15:da:50:37:a9:4e:f4:e7:
         e0:eb:53:e3:21:69:86:fc:96:76:d9:b6:71:1f:f9:8f:2e:78:
         3a:a6:7c:ac:40:75:6f:7d:d0:c8:65:95:71:c3:00:66:e7:df:
         28:91:9c:0f:ff:03:5d:ec:94:05:7d:b3:86:0a:76:52:6a:d9:
         7a:9c:2a:4b:dd:c4:da:34:8a:99:a0:f7:26:8e:d0:13:87:1b:
         f7:90:69:08:e7:9e:31:d9:69:ae:68:2c:81:5a:1a:7b:2e:ab:
         ca:ad:34:52:c8:37:e5:2f:85:35:4a:5a:50:cf:17:73:66:1b:
         5f:c6:6c:25:54:50:ea:1c:e6:eb:bc:28:36:6d:fd:67:d3:23:
         47:b9:9f:3b:75:10:58:ab:dd:d5:c1:36:38:8d:21:a5:89:e8:
         34:94:01:8d:2f:71:dd:29:85:aa:cf:57:98:43:92:a4:23:db:
         26:3e:db:98:63:d3:2f:e2:bc:90:40:93:8a:9a:c0:e2:8a:a8:
         bf:54:5e:a0:3f:73:b6:db:51:9c:cb:50:de:45:18:df:f1:e7:
         8f:56:7b:13:2a:69:34:c7:ef:fe:58:6a:d5:c9:11:74:05:73:
         91:08:12:2c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSuGpQSFZfOn/iwceCPye0F7rl0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5NjkzNENFOTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZG
MDMzOTcxMjAeFw0yNjA1MDMwMjUwNTRaFw0yNzA1MDIwMjU1NTRaMDMxMTAvBgNV
BAMTKEVBMjQ4MjE0QzJFMUY2RTg5MDM1REEyODY4RkVCMTQwQTY5NTgxOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMchtCmxeEB0VPH2PDk1N2HqO
nXKLfDfXIA2gi4kewZPdLGmKPzXbM3FzbRQqPDmtB2r5iAk9ab1HpNU7wRb1S3TW
9fW3x31j6D0/3Bq67lT+buu85Lz2MDYbfcbOxf4xnKLtN5r9zjaFmML/ub0co+jg
61yEAeIucLjdLZDwca14+0J0pQJ8r13HI/vWMhCRRIC8oqBCm5RdMOa7YIgDfUjj
vaUtkwcd+lK8maYkRzdaWHekeJHxKDeTRC/si6aNUA1kN9AuidoC5/u9fKID7ipI
SDZFXukw3maOPPfFqdjOFmNlIgLoxETbIwJPpe1wFRCXwwV9+ZDKIXZ12pkDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6iSCFMLh9uiQNdooaP6xQKaVgY4wHwYDVR0j
BBgwFoAUl5aTTOmD4y/hasjsCWj7b/AzlxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTE2MzNiOGUtMGRmOS00NGFjLTljYWUtZDZmNjc2NWE1MmM5LzAvOTc5NjkzNENF
OTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZGMDMzOTcxMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85Nzk2OTM0Q0U5ODNFMzJGRTE2QUM4RUMwOTY4RkI2RkYwMzM5
NzEyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhlLTBkZjktNDRhYy05
Y2FlLWQ2ZjY3NjVhNTJjOS8wLzMxMzAzMzJlMzIzMzMyMmUzMjM0MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+jyMA0GCSqG
SIb3DQEBCwUAA4IBAQCFmK0c8Qzz2Xv4CAIJJ80li3k2jiT5bgvS3btjFdpQN6lO
9Ofg61PjIWmG/JZ22bZxH/mPLng6pnysQHVvfdDIZZVxwwBm598okZwP/wNd7JQF
fbOGCnZSatl6nCpL3cTaNIqZoPcmjtAThxv3kGkI554x2WmuaCyBWhp7LqvKrTRS
yDflL4U1SlpQzxdzZhtfxmwlVFDqHObrvCg2bf1n0yNHuZ87dRBYq93VwTY4jSGl
ieg0lAGNL3HdKYWqz1eYQ5KkI9smPtuYY9Mv4ryQQJOKmsDiiqi/VF6gP3O221Gc
y1DeRRjf8eePVnsTKmk0x+/+WGrVyRF0BXORCBIs
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:43 2026 by rpki-client