Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa
File:                     3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (raw, json)
Hash identifier:          iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=
Subject key identifier:   1D:0C:2C:09:0C:47:BF:6D:22:6C:0B:EA:57:52:C1:51:46:C6:8D:05
Certificate issuer:       /CN=D69827B97765F94998CEA76A23999571F2BDA426
Certificate serial:       1FE787CF466463823A79AA02183801D73EB55500
Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa
Signing time:             Sun 03 May 2026 03:01:50 +0000
ROA not before:           Sun 03 May 2026 02:56:50 +0000
ROA not after:            Sun 02 May 2027 03:01:50 +0000
asID:                     139978
IP address blocks:        103.148.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl
                          rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e7:87:cf:46:64:63:82:3a:79:aa:02:18:38:01:d7:3e:b5:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426
        Validity
            Not Before: May  3 02:56:50 2026 GMT
            Not After : May  2 03:01:50 2027 GMT
        Subject: CN=1D0C2C090C47BF6D226C0BEA5752C15146C68D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:07:b7:aa:70:c6:2a:56:dc:16:d7:cd:b1:
                    12:8b:c5:1c:1f:00:49:bf:93:fe:9b:49:81:93:62:
                    cc:c3:c4:77:7f:5d:3f:90:04:5a:08:9d:ae:5d:2e:
                    7d:07:db:67:9c:55:12:ec:df:57:c6:89:b9:3d:ce:
                    8c:5b:4d:f8:d0:b9:8f:d7:02:6b:5f:3c:ae:72:f4:
                    91:dc:ae:3c:b1:cd:08:f1:f3:44:45:15:c7:48:bc:
                    66:82:98:df:98:fa:a7:5d:d2:7b:d5:f5:59:18:dd:
                    de:e9:d2:75:fe:32:87:fe:ec:02:a4:ae:71:96:ca:
                    cf:d3:67:ca:ea:09:33:15:1e:02:b2:7b:9a:f9:f1:
                    9e:e3:de:3b:96:92:b1:4c:7d:26:78:f4:e2:31:8d:
                    2c:75:8e:a0:e7:df:d4:76:b4:28:a6:e3:3c:df:e5:
                    fc:5c:8a:ab:f3:05:a1:ab:43:89:91:a0:b2:a7:64:
                    26:6b:60:57:da:81:45:59:ca:04:b6:67:f1:f0:38:
                    53:c0:93:0a:18:57:d8:c6:cc:4d:e3:ca:3e:94:aa:
                    d0:d5:78:3a:2f:fc:26:18:b2:05:94:ae:01:f6:b9:
                    e2:bf:24:65:e8:e2:71:dd:6e:f7:8e:b6:53:eb:a4:
                    5a:32:81:ed:05:c8:50:ee:8f:7d:41:0f:49:2b:ce:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0C:2C:09:0C:47:BF:6D:22:6C:0B:EA:57:52:C1:51:46:C6:8D:05
            X509v3 Authority Key Identifier:
                keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:5d:ad:24:1b:7b:c1:01:34:1e:fd:c7:70:aa:8c:c8:7d:bf:
         90:d7:48:00:19:2e:3c:36:92:d4:37:bc:5b:6d:66:ef:80:4c:
         17:bd:34:b7:7d:f0:f2:5a:98:0d:82:3f:6e:88:d8:0b:51:12:
         28:bd:c7:8a:55:b4:b7:ae:ec:88:66:5c:27:ce:4d:b5:6c:dc:
         02:84:fb:bd:67:ff:9f:59:3f:f9:07:fc:d3:62:83:9b:91:1b:
         67:a0:06:5f:c4:7b:74:9b:56:9a:7a:9d:a4:06:bf:1f:71:8b:
         58:c1:21:52:cb:45:c5:bf:6e:91:d9:a5:19:31:10:f9:9e:21:
         c2:c5:13:c9:43:ec:b3:76:c4:68:97:39:2f:02:4a:4b:25:6b:
         3b:a2:30:be:08:88:70:00:04:7f:99:3a:f3:18:e2:11:e1:d8:
         d4:e5:0f:0a:d2:f4:bc:55:41:9a:38:77:50:5f:3e:1a:85:57:
         57:b1:ee:07:cb:2f:b1:97:97:16:31:df:97:eb:0a:2c:f7:f8:
         e9:b0:f1:8c:bb:80:25:e9:bc:ca:28:85:ed:6f:2d:42:d2:fc:
         0d:9d:8e:a1:28:4b:b4:a4:f2:48:91:23:8e:5d:ef:e7:98:43:
         9a:16:a3:09:15:39:54:37:50:df:49:7c:41:f6:29:a5:21:ca:
         6c:28:cc:b9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUH+eHz0ZkY4I6eaoCGDgB1z61VQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG
MkJEQTQyNjAeFw0yNjA1MDMwMjU2NTBaFw0yNzA1MDIwMzAxNTBaMDMxMTAvBgNV
BAMTKDFEMEMyQzA5MEM0N0JGNkQyMjZDMEJFQTU3NTJDMTUxNDZDNjhEMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvge3qnDGKlbcFtfNsRKLxRwf
AEm/k/6bSYGTYszDxHd/XT+QBFoIna5dLn0H22ecVRLs31fGibk9zoxbTfjQuY/X
AmtfPK5y9JHcrjyxzQjx80RFFcdIvGaCmN+Y+qdd0nvV9VkY3d7p0nX+Mof+7AKk
rnGWys/TZ8rqCTMVHgKye5r58Z7j3juWkrFMfSZ49OIxjSx1jqDn39R2tCim4zzf
5fxciqvzBaGrQ4mRoLKnZCZrYFfagUVZygS2Z/HwOFPAkwoYV9jGzE3jyj6UqtDV
eDov/CYYsgWUrgH2ueK/JGXo4nHdbveOtlPrpFoyge0FyFDuj31BD0krznYvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUHQwsCQxHv20ibAvqV1LBUUbGjQUwHwYDVR0j
BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3
NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB
NDI2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I3Yjg3ZjZkLTI5YTctNGI0Yy04
MWM3LTViNGNiZGIyY2I2YS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5QSMA0GCSqG
SIb3DQEBCwUAA4IBAQDDXa0kG3vBATQe/cdwqozIfb+Q10gAGS48NpLUN7xbbWbv
gEwXvTS3ffDyWpgNgj9uiNgLURIovceKVbS3ruyIZlwnzk21bNwChPu9Z/+fWT/5
B/zTYoObkRtnoAZfxHt0m1aaep2kBr8fcYtYwSFSy0XFv26R2aUZMRD5niHCxRPJ
Q+yzdsRolzkvAkpLJWs7ojC+CIhwAAR/mTrzGOIR4djU5Q8K0vS8VUGaOHdQXz4a
hVdXse4Hyy+xl5cWMd+X6wos9/jpsPGMu4Al6bzKKIXtby1C0vwNnY6hKEu0pPJI
kSOOXe/nmEOaFqMJFTlUN1DfSXxB9imlIcpsKMy5
-----END CERTIFICATE-----
Generated at Wed May 13 02:50:29 2026 by rpki-client