Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa
File:                     3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (raw, json)
Hash identifier:          uA8oOUmwBAgrgbzVE7TBrqVu5fFTSKpBcYjOkH1eMWI=
Subject key identifier:   7C:D0:C7:AA:52:34:0A:72:A5:69:38:C7:5B:FB:32:D4:2F:33:D6:0B
Certificate issuer:       /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9
Certificate serial:       52630687806F01FA6895494CE907A74E7CC94237
Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa
Signing time:             Sun 03 May 2026 02:57:12 +0000
ROA not before:           Sun 03 May 2026 02:52:12 +0000
ROA not after:            Sun 02 May 2027 02:57:12 +0000
asID:                     138876
IP address blocks:        103.140.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl
                          rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:63:06:87:80:6f:01:fa:68:95:49:4c:e9:07:a7:4e:7c:c9:42:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9
        Validity
            Not Before: May  3 02:52:12 2026 GMT
            Not After : May  2 02:57:12 2027 GMT
        Subject: CN=7CD0C7AA52340A72A56938C75BFB32D42F33D60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:5c:1a:d9:3e:69:d5:a6:c6:f1:ff:7f:bc:
                    43:0f:c9:b5:a0:a4:84:a9:93:03:a7:f2:9e:f6:7f:
                    43:f2:0a:90:9e:ec:92:d3:f1:d5:3d:a0:fb:84:20:
                    07:b4:05:f2:45:15:2a:00:5c:98:bc:cd:e6:a8:a7:
                    d1:ed:2b:04:58:87:b6:c3:bb:80:1a:14:fe:f6:a9:
                    f9:6b:53:68:38:ff:1e:d9:44:2a:ae:ca:7e:f7:c6:
                    82:c1:ad:1a:3d:f4:22:9c:ff:2f:02:eb:26:f9:39:
                    ef:78:ef:b5:ec:c0:8f:cd:05:00:59:67:10:0e:71:
                    e1:11:43:e5:a5:ec:75:dd:26:b4:da:74:d1:c2:8a:
                    a2:07:73:90:32:89:2d:cb:35:af:2a:ed:25:42:5e:
                    9b:d7:ac:9d:b8:61:7c:b8:26:87:6f:50:9c:7b:ff:
                    d5:62:c0:6a:5d:f3:f1:78:79:19:33:7b:5a:2e:b1:
                    54:4e:31:6f:6a:96:13:bd:58:57:73:30:05:dd:a1:
                    56:34:e4:74:34:76:db:4e:79:30:b4:1b:df:86:af:
                    52:56:57:62:d3:dc:a5:99:54:b2:c8:b7:cc:47:29:
                    73:5d:45:54:c0:38:03:7d:86:6d:fa:c4:d3:fc:21:
                    f0:78:4a:c9:7a:ee:e7:9e:4e:ec:d5:90:2e:91:cd:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D0:C7:AA:52:34:0A:72:A5:69:38:C7:5B:FB:32:D4:2F:33:D6:0B
            X509v3 Authority Key Identifier:
                keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:17:dd:48:49:a6:ac:7d:2b:f0:da:a7:22:53:26:78:c0:
         cf:a6:69:04:03:a5:66:2a:f6:42:63:88:47:87:2d:94:50:00:
         de:87:ef:69:19:a9:ab:02:ff:7b:89:ce:bd:44:56:4a:ad:72:
         2d:92:80:91:d2:4e:74:b4:2e:72:67:bd:fb:2e:9f:be:70:a5:
         c7:73:06:fb:be:06:a8:e0:ef:3a:b1:5a:1b:b8:a8:16:a8:75:
         67:24:70:5c:a5:50:36:0a:a5:56:5d:8d:dc:a1:18:7f:25:c3:
         7a:f4:88:f6:00:98:a4:da:b4:cd:78:99:14:c9:20:04:c0:60:
         b8:42:a7:77:d5:cc:fd:28:f3:9e:be:9c:c3:a2:07:af:fc:d7:
         f0:ce:26:b9:43:a3:74:33:43:e0:26:e9:90:6b:ad:6e:30:a1:
         67:6c:6f:54:20:c1:8b:25:23:29:3e:d6:49:cb:e8:9a:92:53:
         cc:66:7b:96:c3:24:01:70:70:11:97:36:8a:1e:f9:9b:47:c9:
         ab:95:ef:f2:c2:71:e3:23:d4:3c:92:03:b0:4c:86:06:b6:00:
         cc:3d:41:1d:e9:50:ba:ac:c4:e4:8d:9e:09:f5:42:ea:a4:4a:
         b4:15:9b:e8:1d:f0:4e:70:0c:b3:01:b1:d5:be:4a:ca:4a:29:
         61:d8:80:69
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUmMGh4BvAfpolUlM6QenTnzJQjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3
MUU2MDhFOTAeFw0yNjA1MDMwMjUyMTJaFw0yNzA1MDIwMjU3MTJaMDMxMTAvBgNV
BAMTKDdDRDBDN0FBNTIzNDBBNzJBNTY5MzhDNzVCRkIzMkQ0MkYzM0Q2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7lwa2T5p1abG8f9/vEMPybWg
pISpkwOn8p72f0PyCpCe7JLT8dU9oPuEIAe0BfJFFSoAXJi8zeaop9HtKwRYh7bD
u4AaFP72qflrU2g4/x7ZRCquyn73xoLBrRo99CKc/y8C6yb5Oe9477XswI/NBQBZ
ZxAOceERQ+Wl7HXdJrTadNHCiqIHc5AyiS3LNa8q7SVCXpvXrJ24YXy4JodvUJx7
/9ViwGpd8/F4eRkze1ousVROMW9qlhO9WFdzMAXdoVY05HQ0dttOeTC0G9+Gr1JW
V2LT3KWZVLLIt8xHKXNdRVTAOAN9hm36xNP8IfB4Ssl67ueeTuzVkC6RzfFXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfNDHqlI0CnKlaTjHW/sy1C8z1gswHwYDVR0j
BBgwFoAUGQRfho4J6MxuCWOaunscFHHmCOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTZhOWRkZjctNTc2YS00YTU4LTg5YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4
RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3MUU2MDhFOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xOTA0NUY4NjhFMDlFOENDNkUwOTYzOUFCQTdCMUMxNDcxRTYw
OEU5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2YTlkZGY3LTU3NmEtNGE1OC04
OWJiLTdlODkyODkwMjI3MC8wLzMxMzAzMzJlMzEzNDMwMmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4xaMA0GCSqG
SIb3DQEBCwUAA4IBAQANlBfdSEmmrH0r8NqnIlMmeMDPpmkEA6VmKvZCY4hHhy2U
UADeh+9pGamrAv97ic69RFZKrXItkoCR0k50tC5yZ737Lp++cKXHcwb7vgao4O86
sVobuKgWqHVnJHBcpVA2CqVWXY3coRh/JcN69Ij2AJik2rTNeJkUySAEwGC4Qqd3
1cz9KPOevpzDogev/Nfwzia5Q6N0M0PgJumQa61uMKFnbG9UIMGLJSMpPtZJy+ia
klPMZnuWwyQBcHARlzaKHvmbR8mrle/ywnHjI9Q8kgOwTIYGtgDMPUEd6VC6rMTk
jZ4J9ULqpEq0FZvoHfBOcAyzAbHVvkrKSilh2IBp
-----END CERTIFICATE-----
Generated at Wed May 13 08:27:47 2026 by rpki-client