Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          8F99VevvPnC2SR7w+F2wdLh67GSWSbbQHmOucM9JJac=
Subject key identifier:   D9:B0:4D:C0:66:EE:E4:53:C5:70:F8:7A:97:A3:30:24:24:34:10:3B
Certificate issuer:       /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E
Certificate serial:       2E6D5424A2773B272034016AFB6926C6436C1277
Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 02:57:17 +0000
ROA not before:           Sun 03 May 2026 02:52:17 +0000
ROA not after:            Sun 02 May 2027 02:57:17 +0000
asID:                     154410
IP address blocks:        103.169.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl
                          rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6d:54:24:a2:77:3b:27:20:34:01:6a:fb:69:26:c6:43:6c:12:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E
        Validity
            Not Before: May  3 02:52:17 2026 GMT
            Not After : May  2 02:57:17 2027 GMT
        Subject: CN=D9B04DC066EEE453C570F87A97A330242434103B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:58:2a:1a:a5:d7:5f:2a:52:da:a0:1e:50:
                    ad:44:4a:dc:d2:cd:d2:8e:7e:05:ae:ba:2a:82:4a:
                    70:f7:bc:ee:24:dd:fc:91:f0:63:b7:e9:4a:75:e5:
                    d5:02:dd:ca:1c:82:18:ee:54:59:59:62:c8:7e:cc:
                    4f:15:e4:b8:a1:ca:6f:dd:72:9a:0a:3b:09:6a:99:
                    d1:d5:04:c0:eb:59:97:98:d0:7f:89:34:e9:63:97:
                    77:2b:fc:f2:5e:93:93:34:59:53:c9:65:16:58:1f:
                    69:67:2d:d0:4e:fa:14:0b:b3:0c:81:47:12:7e:c2:
                    a8:44:42:d3:bf:ad:27:ee:08:0e:4e:34:8b:df:26:
                    50:04:c9:09:af:5b:22:c9:25:7e:88:7c:c7:dc:03:
                    f4:d6:6a:98:cc:b4:02:ce:b4:81:d1:e2:4a:63:41:
                    88:6f:f6:f5:cb:54:c3:00:2f:6d:b1:10:45:bb:4b:
                    f8:de:9d:b6:29:0a:f0:26:c4:10:e9:b6:d7:05:a9:
                    87:d6:0f:fd:97:c1:37:9b:1e:98:fe:e8:4c:fd:9e:
                    31:61:43:3d:a7:2e:78:75:56:d2:8e:6a:45:ad:b4:
                    53:49:dd:3b:94:6b:fb:87:7d:5d:12:d9:2f:2f:b6:
                    c4:e6:83:11:f8:5c:6c:b0:5d:07:0f:29:d5:cc:95:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B0:4D:C0:66:EE:E4:53:C5:70:F8:7A:97:A3:30:24:24:34:10:3B
            X509v3 Authority Key Identifier:
                keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1c:3a:5f:27:6d:3e:1e:0d:c2:b5:e2:07:a9:9f:2b:28:b7:
         09:96:9c:38:3a:13:d9:6f:c3:e1:3a:ca:57:7e:66:a0:7f:23:
         8b:76:14:70:1f:c4:b7:1f:dc:4e:d2:00:c1:72:80:19:36:5e:
         43:42:b1:16:ed:a0:8b:ee:21:17:6a:3c:32:ac:09:fd:cc:64:
         0e:08:1b:bc:e9:5a:95:c4:d1:00:e0:92:8a:cd:f3:e8:7f:21:
         e4:89:e4:b1:cb:a5:3d:72:ce:cb:71:48:03:c5:86:2e:7a:1d:
         f8:0e:4d:2b:41:15:7a:db:1c:ab:2c:88:e1:65:a4:c3:35:f7:
         ce:32:39:e0:06:cc:e7:81:5e:fc:3a:bb:b2:96:a9:51:eb:96:
         e6:32:fa:9f:49:ae:db:ae:84:55:c8:89:d6:1e:c3:56:f2:c1:
         f6:e9:45:97:47:ea:4b:7f:95:ff:e3:ed:b8:0e:ed:34:c9:14:
         cc:55:53:27:f4:72:95:0d:d4:5a:2a:eb:03:aa:92:ff:7d:cc:
         90:ec:e1:52:94:5c:38:b2:0c:67:eb:d9:b7:56:ba:8d:87:ef:
         83:80:79:ba:24:9c:39:76:6d:53:33:68:4f:ae:ff:f5:4b:25:
         de:12:be:fb:f8:bc:12:5e:2b:b6:c7:71:91:ba:1f:1d:60:c5:
         e4:d0:18:75
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIULm1UJKJ3OycgNAFq+2kmxkNsEncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBF
Mjk5MUY1RTAeFw0yNjA1MDMwMjUyMTdaFw0yNzA1MDIwMjU3MTdaMDMxMTAvBgNV
BAMTKEQ5QjA0REMwNjZFRUU0NTNDNTcwRjg3QTk3QTMzMDI0MjQzNDEwM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7FgqGqXXXypS2qAeUK1EStzS
zdKOfgWuuiqCSnD3vO4k3fyR8GO36Up15dUC3cocghjuVFlZYsh+zE8V5Lihym/d
cpoKOwlqmdHVBMDrWZeY0H+JNOljl3cr/PJek5M0WVPJZRZYH2lnLdBO+hQLswyB
RxJ+wqhEQtO/rSfuCA5ONIvfJlAEyQmvWyLJJX6IfMfcA/TWapjMtALOtIHR4kpj
QYhv9vXLVMMAL22xEEW7S/jenbYpCvAmxBDpttcFqYfWD/2XwTebHpj+6Ez9njFh
Qz2nLnh1VtKOakWttFNJ3TuUa/uHfV0S2S8vtsTmgxH4XGywXQcPKdXMlXadAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU2bBNwGbu5FPFcPh6l6MwJCQ0EDswHwYDVR0j
BBgwFoAUyFXwoHv+ppkBxTRdeZMrcOKZH14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTZkZTFhOGUtYzJiOC00OTk2LTk0OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3
QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBFMjk5MUY1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DODU1RjBBMDdCRkVBNjk5MDFDNTM0NUQ3OTkzMkI3MEUyOTkx
RjVFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2ZGUxYThlLWMyYjgtNDk5Ni05
NDkyLTZmOTJjMmRmZWM3YS8wLzMxMzAzMzJlMzEzNjM5MmUzMTM0MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzQzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqY8wDQYJ
KoZIhvcNAQELBQADggEBAFgcOl8nbT4eDcK14gepnysotwmWnDg6E9lvw+E6yld+
ZqB/I4t2FHAfxLcf3E7SAMFygBk2XkNCsRbtoIvuIRdqPDKsCf3MZA4IG7zpWpXE
0QDgkorN8+h/IeSJ5LHLpT1yzstxSAPFhi56HfgOTStBFXrbHKssiOFlpMM1984y
OeAGzOeBXvw6u7KWqVHrluYy+p9JrtuuhFXIidYew1bywfbpRZdH6kt/lf/j7bgO
7TTJFMxVUyf0cpUN1Foq6wOqkv99zJDs4VKUXDiyDGfr2bdWuo2H74OAeboknDl2
bVMzaE+u//VLJd4Svvv4vBJeK7bHcZG6Hx1gxeTQGHU=
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:02 2026 by rpki-client