Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa
File:                     3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (raw, json)
Hash identifier:          1w+lHciz1g+OQhhivgPPNI1UUThYYbymT06vuiGhBaA=
Subject key identifier:   7A:E9:EF:EF:F5:03:BB:49:22:05:E7:8C:42:CD:B4:1E:7F:5A:03:AF
Certificate issuer:       /CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392
Certificate serial:       78FCBD072082E11B49829DC25C0963BC2EF47030
Authority key identifier: AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa
Signing time:             Sun 03 May 2026 03:00:11 +0000
ROA not before:           Sun 03 May 2026 02:55:11 +0000
ROA not after:            Sun 02 May 2027 03:00:11 +0000
asID:                     149907
IP address blocks:        103.190.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl
                          rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fc:bd:07:20:82:e1:1b:49:82:9d:c2:5c:09:63:bc:2e:f4:70:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392
        Validity
            Not Before: May  3 02:55:11 2026 GMT
            Not After : May  2 03:00:11 2027 GMT
        Subject: CN=7AE9EFEFF503BB492205E78C42CDB41E7F5A03AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:cd:76:d5:dd:a9:08:00:41:b4:4d:fb:a4:
                    88:37:d5:65:ef:e1:85:22:0e:0a:1d:12:1e:d7:89:
                    2f:51:33:f4:62:f1:89:99:2e:fc:e1:e5:13:4d:0f:
                    8b:a2:55:9a:04:58:2f:17:c0:d2:d2:e8:03:f8:07:
                    e5:81:d5:32:f9:16:4a:5e:aa:c5:5a:a6:d9:94:4f:
                    28:d4:10:d6:91:d9:fc:f1:c3:93:02:e5:eb:2c:70:
                    03:25:68:14:ed:83:88:f2:af:a6:53:58:3f:ab:a0:
                    60:17:f2:69:a7:e7:4b:85:29:6a:82:03:8b:05:ed:
                    fb:e3:ae:8d:ca:e9:e7:66:40:37:a6:70:b1:d5:46:
                    1e:e1:a8:54:9b:7b:f2:ab:fa:75:a2:b1:15:ad:42:
                    ea:97:b8:3f:31:f1:ac:ca:1a:21:ae:29:bb:22:8c:
                    da:9c:9a:0c:ba:16:6e:0b:4b:42:b0:af:00:1c:de:
                    d0:b9:a9:20:57:39:bd:2a:a1:d1:35:4d:d2:98:51:
                    37:12:51:c6:75:5c:e5:b9:70:cc:3c:ef:f9:d8:9f:
                    46:83:14:95:ea:9f:1f:7c:6e:61:7f:d2:e7:e3:2f:
                    96:65:c9:a4:81:c3:6b:d0:d1:db:8a:1a:aa:5b:18:
                    83:19:6d:e8:7e:86:0a:7f:c0:5b:e0:f8:39:00:d1:
                    2a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E9:EF:EF:F5:03:BB:49:22:05:E7:8C:42:CD:B4:1E:7F:5A:03:AF
            X509v3 Authority Key Identifier:
                keyid:AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:34:8f:41:d1:59:ea:e2:70:a3:d9:38:46:51:71:aa:a9:52:
         9b:15:73:d4:a4:e7:cb:98:20:f3:97:77:e0:e9:ac:4c:a8:74:
         77:6e:52:86:95:99:af:43:59:ee:71:4e:70:c9:c4:3b:70:29:
         0f:65:bb:c4:3a:f1:50:89:10:02:8e:be:1f:5d:42:c9:b4:0d:
         1f:a3:09:7b:f2:0d:15:e6:72:af:81:40:37:a7:d3:30:fe:77:
         22:75:c8:08:a9:e6:2b:e8:8a:ac:e2:0a:ad:82:be:cc:c9:5b:
         d6:d2:09:62:2c:97:a1:9f:c1:f3:3d:cd:92:bd:04:6f:26:86:
         75:0c:64:12:0e:0a:b3:52:61:bd:7a:4b:16:aa:1d:a2:9d:fe:
         71:27:a9:0e:34:62:37:61:99:9d:62:57:1f:d0:43:42:bc:15:
         e8:f7:b0:4e:ac:db:af:2d:74:e7:c7:56:54:ef:bb:49:6d:38:
         fd:fa:ce:a5:86:23:fb:cf:19:2b:a4:31:c4:6d:1d:83:a0:54:
         e7:d8:2a:71:6e:31:34:28:ef:f7:e3:f1:3f:30:bb:a1:91:d1:
         c4:5e:1f:40:07:f0:df:a0:10:34:68:90:77:e7:1a:ec:41:74:
         4e:be:28:e7:e9:ef:3c:c5:a4:c4:fb:61:48:e3:84:21:dc:38:
         06:dd:38:cf
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUePy9ByCC4RtJgp3CXAljvC70cDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNE
QkNCNzM5MjAeFw0yNjA1MDMwMjU1MTFaFw0yNzA1MDIwMzAwMTFaMDMxMTAvBgNV
BAMTKDdBRTlFRkVGRjUwM0JCNDkyMjA1RTc4QzQyQ0RCNDFFN0Y1QTAzQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yM121d2pCABBtE37pIg31WXv
4YUiDgodEh7XiS9RM/Ri8YmZLvzh5RNND4uiVZoEWC8XwNLS6AP4B+WB1TL5Fkpe
qsVaptmUTyjUENaR2fzxw5MC5esscAMlaBTtg4jyr6ZTWD+roGAX8mmn50uFKWqC
A4sF7fvjro3K6edmQDemcLHVRh7hqFSbe/Kr+nWisRWtQuqXuD8x8azKGiGuKbsi
jNqcmgy6Fm4LS0KwrwAc3tC5qSBXOb0qodE1TdKYUTcSUcZ1XOW5cMw87/nYn0aD
FJXqnx98bmF/0ufjL5ZlyaSBw2vQ0duKGqpbGIMZbeh+hgp/wFvg+DkA0SoNAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUeunv7/UDu0kiBeeMQs20Hn9aA68wHwYDVR0j
BBgwFoAUrCy59sjL/VSenvziLyLxvNvLc5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA1MTZhN2EtNDE5NS00NGIzLWEyNGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZD
OENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNEQkNCNzM5Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQzJDQjlGNkM4Q0JGRDU0OUU5RUZDRTIyRjIyRjFCQ0RCQ0I3
MzkyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNTE2YTdhLTQxOTUtNDRiMy1h
MjRlLWNmOGVkNTc4ZDc5MS8wLzMxMzAzMzJlMzEzOTMwMmUzMTMxMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvnAwDQYJ
KoZIhvcNAQELBQADggEBAFk0j0HRWericKPZOEZRcaqpUpsVc9Sk58uYIPOXd+Dp
rEyodHduUoaVma9DWe5xTnDJxDtwKQ9lu8Q68VCJEAKOvh9dQsm0DR+jCXvyDRXm
cq+BQDen0zD+dyJ1yAip5ivoiqziCq2CvszJW9bSCWIsl6GfwfM9zZK9BG8mhnUM
ZBIOCrNSYb16SxaqHaKd/nEnqQ40YjdhmZ1iVx/QQ0K8Fej3sE6s268tdOfHVlTv
u0ltOP36zqWGI/vPGSukMcRtHYOgVOfYKnFuMTQo7/fj8T8wu6GR0cReH0AH8N+g
EDRokHfnGuxBdE6+KOfp7zzFpMT7YUjjhCHcOAbdOM8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:17:54 2026 by rpki-client