Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa
File:                     3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (raw, json)
Hash identifier:          viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=
Subject key identifier:   84:68:CE:67:B3:2E:6D:F2:89:8E:E9:2D:2F:6F:30:18:04:55:4F:2D
Certificate issuer:       /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Certificate serial:       60B95019AE86ED050773DBB4B745B8D57FE5760B
Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa
Signing time:             Sun 03 May 2026 02:58:23 +0000
ROA not before:           Sun 03 May 2026 02:53:23 +0000
ROA not after:            Sun 02 May 2027 02:58:23 +0000
asID:                     141669
IP address blocks:        103.162.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
                          rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b9:50:19:ae:86:ed:05:07:73:db:b4:b7:45:b8:d5:7f:e5:76:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
        Validity
            Not Before: May  3 02:53:23 2026 GMT
            Not After : May  2 02:58:23 2027 GMT
        Subject: CN=8468CE67B32E6DF2898EE92D2F6F301804554F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:9b:ce:cf:8a:03:28:14:53:56:9c:73:db:
                    93:5c:e8:d0:40:b4:97:83:e5:91:27:91:44:be:8d:
                    d8:cd:c8:9e:1b:00:2a:a9:8d:d2:57:d5:16:fc:a3:
                    3b:5c:d1:2f:55:58:8a:5e:d3:e2:a3:77:9d:53:e6:
                    a1:28:76:dd:c4:7d:70:7e:e8:2f:d8:e0:47:52:e2:
                    31:4c:97:68:a9:67:b0:e7:d9:ba:76:0d:b8:57:60:
                    33:df:39:5a:80:f2:88:29:25:52:c1:39:97:42:ce:
                    ab:5c:bf:53:69:ea:37:57:ba:1d:e2:bc:d6:85:3a:
                    41:85:ee:5c:b4:8f:d9:7c:29:ab:e0:17:23:00:ee:
                    b2:07:23:cc:38:83:de:87:9a:d3:4f:b8:2c:ca:bd:
                    f6:29:f6:e5:ce:a8:29:9e:2b:0e:f6:df:75:cc:b3:
                    7c:0f:8b:87:4e:73:6c:e1:4c:e7:ef:f1:c3:d1:06:
                    3b:2b:9d:6d:23:c2:e4:de:c3:9a:b0:f0:1c:3b:f4:
                    16:24:77:d3:bf:a3:6a:83:e7:52:0b:91:dd:db:eb:
                    5b:35:0a:a6:fd:02:f4:80:42:d1:1d:81:f5:78:0b:
                    ad:5a:b9:0f:5c:c6:86:37:9a:b3:4a:ac:6f:44:65:
                    06:09:b5:e0:18:e6:bd:44:e2:0f:07:bf:f3:a3:5d:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:68:CE:67:B3:2E:6D:F2:89:8E:E9:2D:2F:6F:30:18:04:55:4F:2D
            X509v3 Authority Key Identifier:
                keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:b7:25:44:67:b5:55:b3:4b:ad:1e:6f:d0:2b:fc:13:56:ca:
         8c:db:ca:ff:10:1b:3e:c3:49:e1:16:c5:f3:f3:ef:66:2f:20:
         44:7a:75:f8:f1:af:a9:0e:6f:db:6f:7c:79:63:26:b8:89:9e:
         cb:a1:26:f0:c0:5b:84:21:16:21:85:fb:c6:d6:c3:c3:b1:5d:
         67:62:f7:df:c0:c2:15:bd:6e:7e:14:4f:b7:2f:14:ff:30:78:
         cc:71:31:04:3c:e8:8a:71:66:7f:e9:f1:3d:dc:14:e9:aa:c8:
         2c:26:ba:87:f3:20:dc:6c:74:ae:f4:e4:fc:7b:42:0a:08:e4:
         ca:1d:ae:7a:35:87:36:96:ef:78:db:2e:76:51:3e:30:97:c9:
         d0:85:a9:fb:20:36:dc:5e:8d:c2:1c:dd:55:b3:c3:08:99:90:
         10:94:a5:a4:58:ff:c1:4a:20:28:e0:f2:64:34:f9:6f:7d:85:
         18:66:61:6c:37:88:38:ef:65:22:0c:3a:42:9f:b7:7f:f1:cb:
         3e:76:71:7e:6d:d4:a8:9a:76:0b:3e:fe:27:34:6e:a0:34:d5:
         ad:1f:59:b6:2b:60:72:95:c0:77:76:31:d3:89:bf:2a:b8:e6:
         1b:15:8b:06:22:82:27:47:46:f1:86:16:b9:bb:b0:0d:aa:f3:
         37:38:4a:82
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUYLlQGa6G7QUHc9u0t0W41X/ldgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJB
Q0E4Rjc1MTAeFw0yNjA1MDMwMjUzMjNaFw0yNzA1MDIwMjU4MjNaMDMxMTAvBgNV
BAMTKDg0NjhDRTY3QjMyRTZERjI4OThFRTkyRDJGNkYzMDE4MDQ1NTRGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTC5vOz4oDKBRTVpxz25Nc6NBA
tJeD5ZEnkUS+jdjNyJ4bACqpjdJX1Rb8oztc0S9VWIpe0+Kjd51T5qEodt3EfXB+
6C/Y4EdS4jFMl2ipZ7Dn2bp2DbhXYDPfOVqA8ogpJVLBOZdCzqtcv1Np6jdXuh3i
vNaFOkGF7ly0j9l8KavgFyMA7rIHI8w4g96HmtNPuCzKvfYp9uXOqCmeKw7233XM
s3wPi4dOc2zhTOfv8cPRBjsrnW0jwuTew5qw8Bw79BYkd9O/o2qD51ILkd3b61s1
Cqb9AvSAQtEdgfV4C61auQ9cxoY3mrNKrG9EZQYJteAY5r1E4g8Hv/OjXa5xAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUhGjOZ7MubfKJjuktL28wGARVTy0wHwYDVR0j
BBgwFoAUlQvK61GeUcmXQyo80+X7K6yo91EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWFmNjk4NGYtY2NmOS00YzQwLWIxMTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1
MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJBQ0E4Rjc1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NTBCQ0FFQjUxOUU1MUM5OTc0MzJBM0NEM0U1RkIyQkFDQThG
NzUxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FhZjY5ODRmLWNjZjktNGM0MC1i
MTE0LTM4MDM1NmE4Y2Q4OC8wLzMxMzAzMzJlMzEzNjMyMmUzMjMzMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnou4wDQYJ
KoZIhvcNAQELBQADggEBAMi3JURntVWzS60eb9Ar/BNWyozbyv8QGz7DSeEWxfPz
72YvIER6dfjxr6kOb9tvfHljJriJnsuhJvDAW4QhFiGF+8bWw8OxXWdi99/AwhW9
bn4UT7cvFP8weMxxMQQ86IpxZn/p8T3cFOmqyCwmuofzINxsdK705Px7QgoI5Mod
rno1hzaW73jbLnZRPjCXydCFqfsgNtxejcIc3VWzwwiZkBCUpaRY/8FKICjg8mQ0
+W99hRhmYWw3iDjvZSIMOkKft3/xyz52cX5t1Kiadgs+/ic0bqA01a0fWbYrYHKV
wHd2MdOJvyq45hsViwYigidHRvGGFrm7sA2q8zc4SoI=
-----END CERTIFICATE-----
Generated at Wed May 13 10:44:04 2026 by rpki-client