Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          2jTqkZUMM6RgBn0H5+b2a8SLrtyFxeMaWfySgcjTtJg=
Subject key identifier:   A3:D2:7A:D1:3C:A7:F2:A7:92:8E:55:96:1A:18:A8:03:B9:AB:6D:C5
Certificate issuer:       /CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9
Certificate serial:       256922003573EB2BB8A2126B3D71EDA65C67475E
Authority key identifier: B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa
Signing time:             Sun 03 May 2026 03:03:01 +0000
ROA not before:           Sun 03 May 2026 02:58:01 +0000
ROA not after:            Sun 02 May 2027 03:03:01 +0000
asID:                     136052
IP address blocks:        103.242.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl
                          rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:69:22:00:35:73:eb:2b:b8:a2:12:6b:3d:71:ed:a6:5c:67:47:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9
        Validity
            Not Before: May  3 02:58:01 2026 GMT
            Not After : May  2 03:03:01 2027 GMT
        Subject: CN=A3D27AD13CA7F2A7928E55961A18A803B9AB6DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:e2:f7:68:99:c8:01:b5:c5:f8:39:ff:46:
                    d4:cc:a0:58:63:97:11:fa:e8:d6:0b:af:d2:25:77:
                    2d:6c:29:e9:21:6a:d4:57:4f:05:7a:60:87:ad:02:
                    95:45:a8:0d:5f:92:7d:e6:e1:8a:e3:3b:13:ee:22:
                    bd:32:12:ab:aa:80:0d:00:9b:09:6f:f5:71:02:f5:
                    28:d8:26:bd:a8:98:1c:ad:e5:13:46:80:73:76:12:
                    8d:7d:41:af:9e:4d:a7:12:9c:a5:91:0c:17:7f:ee:
                    3f:44:ce:41:b5:32:0d:19:ff:c3:16:2d:ad:f6:3b:
                    1b:36:d8:d1:aa:be:e1:fb:19:1a:44:8b:d9:f5:2b:
                    c7:ba:c1:cc:22:a9:e7:77:dd:d3:bf:a6:3e:38:e3:
                    66:f9:3a:36:ac:05:16:14:bd:59:a8:66:c2:b6:39:
                    78:6e:9d:a8:ac:96:f4:27:b2:1e:7e:91:3d:7b:49:
                    d1:ee:d0:c3:60:c1:f6:73:e0:25:8b:a8:11:3f:31:
                    8a:7e:4d:36:f5:bb:4b:20:58:7c:e1:cc:c1:f7:ad:
                    6d:c5:2b:1e:1b:e4:b6:81:1d:78:22:0d:8b:20:32:
                    cb:37:c4:95:6c:e3:c5:0f:de:1d:65:ff:83:f4:95:
                    90:7d:ef:76:ba:0e:1e:9c:eb:09:9b:ef:78:a1:1e:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D2:7A:D1:3C:A7:F2:A7:92:8E:55:96:1A:18:A8:03:B9:AB:6D:C5
            X509v3 Authority Key Identifier:
                keyid:B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:e5:ca:14:a2:bd:f6:89:21:51:25:3f:7f:13:7b:14:22:34:
         69:2c:f1:f1:ff:de:29:b6:b4:df:d6:12:18:53:8b:39:11:0a:
         d0:01:5d:a0:74:8f:a3:ec:66:6a:46:58:4b:66:82:c7:c7:07:
         14:f2:a0:ef:42:37:b2:cb:a0:8a:3c:37:f5:e3:9c:50:bf:f1:
         25:8e:cc:5c:68:76:ad:65:c4:d4:c9:6c:50:a1:bd:f1:51:20:
         52:c6:7f:e6:68:2c:bc:7d:61:b8:88:19:e9:15:fb:da:f4:6b:
         31:b5:6d:d8:af:63:c6:77:a9:0f:0b:fa:0d:31:4d:2c:57:83:
         d6:a6:69:2e:11:6e:6e:51:ab:0c:19:70:60:c4:6b:f6:59:41:
         5c:74:07:4f:34:40:4b:04:c7:47:58:94:ff:bc:0f:35:eb:6d:
         db:8a:fc:c0:f8:ff:59:d6:33:83:75:d2:f9:c6:7a:9d:61:fa:
         be:3b:75:e7:19:17:5a:05:df:85:2f:99:79:8e:00:4d:4a:b0:
         34:a8:e9:6b:0d:67:82:43:04:9d:ca:ce:89:c4:8e:e5:8b:a6:
         b7:96:a4:a2:6f:be:cf:da:a5:80:d5:30:4c:e1:63:19:0a:e2:
         4c:79:02:77:c5:cc:0e:91:0d:4a:dd:1a:4a:21:79:6b:e3:dd:
         9f:0c:0c:2f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJWkiADVz6yu4ohJrPXHtplxnR14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2
MTQxOEFGOTAeFw0yNjA1MDMwMjU4MDFaFw0yNzA1MDIwMzAzMDFaMDMxMTAvBgNV
BAMTKEEzRDI3QUQxM0NBN0YyQTc5MjhFNTU5NjFBMThBODAzQjlBQjZEQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDK+L3aJnIAbXF+Dn/RtTMoFhj
lxH66NYLr9Ildy1sKekhatRXTwV6YIetApVFqA1fkn3m4YrjOxPuIr0yEquqgA0A
mwlv9XEC9SjYJr2omByt5RNGgHN2Eo19Qa+eTacSnKWRDBd/7j9EzkG1Mg0Z/8MW
La32Oxs22NGqvuH7GRpEi9n1K8e6wcwiqed33dO/pj4442b5OjasBRYUvVmoZsK2
OXhunaislvQnsh5+kT17SdHu0MNgwfZz4CWLqBE/MYp+TTb1u0sgWHzhzMH3rW3F
Kx4b5LaBHXgiDYsgMss3xJVs48UP3h1l/4P0lZB973a6Dh6c6wmb73ihHiTDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUo9J60Tyn8qeSjlWWGhioA7mrbcUwHwYDVR0j
BBgwFoAUtQZ+eALXsZkovfqT5tW6VmFBivkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmYwYzdhMzctNWQxOS00YzVjLTkzMDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgw
MkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2MTQxOEFGOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNTA2N0U3ODAyRDdCMTk5MjhCREZBOTNFNkQ1QkE1NjYxNDE4
QUY5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JmMGM3YTM3LTVkMTktNGM1Yy05
MzAxLWExNGE3ZjE4NWM5Mi8wLzMxMzAzMzJlMzIzNDMyMmUzMTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/IKMA0GCSqG
SIb3DQEBCwUAA4IBAQCL5coUor32iSFRJT9/E3sUIjRpLPHx/94ptrTf1hIYU4s5
EQrQAV2gdI+j7GZqRlhLZoLHxwcU8qDvQjeyy6CKPDf145xQv/EljsxcaHatZcTU
yWxQob3xUSBSxn/maCy8fWG4iBnpFfva9GsxtW3Yr2PGd6kPC/oNMU0sV4PWpmku
EW5uUasMGXBgxGv2WUFcdAdPNEBLBMdHWJT/vA81623bivzA+P9Z1jODddL5xnqd
Yfq+O3XnGRdaBd+FL5l5jgBNSrA0qOlrDWeCQwSdys6JxI7li6a3lqSib77P2qWA
1TBM4WMZCuJMeQJ3xcwOkQ1K3RpKIXlr492fDAwv
-----END CERTIFICATE-----
Generated at Wed May 13 06:11:38 2026 by rpki-client