Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa
File:                     3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (raw, json)
Hash identifier:          WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=
Subject key identifier:   01:15:3B:CD:B3:C3:A2:CF:6F:BE:08:CC:A6:F6:FF:61:99:D0:6E:78
Certificate issuer:       /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3
Certificate serial:       6A068F30716F2EBADDF462CF409198FBEAB2A3B4
Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa
Signing time:             Sun 03 May 2026 03:04:01 +0000
ROA not before:           Sun 03 May 2026 02:59:01 +0000
ROA not after:            Sun 02 May 2027 03:04:01 +0000
asID:                     136111
IP address blocks:        103.94.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl
                          rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:06:8f:30:71:6f:2e:ba:dd:f4:62:cf:40:91:98:fb:ea:b2:a3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3
        Validity
            Not Before: May  3 02:59:01 2026 GMT
            Not After : May  2 03:04:01 2027 GMT
        Subject: CN=01153BCDB3C3A2CF6FBE08CCA6F6FF6199D06E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:fc:96:98:ca:c1:62:cd:a3:84:0c:1c:50:
                    83:91:f4:b0:04:90:53:a9:c3:d7:d5:fe:a7:cb:72:
                    2d:9a:14:52:f5:ec:0e:ab:3b:24:12:09:59:33:23:
                    ce:6b:7a:d2:26:0b:c5:f1:bc:d1:4f:d1:f3:03:d1:
                    1f:45:43:ec:65:15:41:25:20:e5:50:0b:2a:0c:25:
                    28:13:19:7b:c4:ca:9a:ff:7a:28:8f:16:58:f0:be:
                    04:73:93:27:65:a8:d9:8b:7d:b5:75:93:90:b6:40:
                    0f:1c:a3:c9:4d:d1:6a:a5:d5:4f:48:b6:68:70:e3:
                    b1:0f:7d:9c:f5:e5:82:0e:08:b1:6a:7e:3e:d9:75:
                    20:6c:64:09:b2:20:d6:1c:4b:64:08:6f:e3:5b:95:
                    ed:ee:44:99:55:bd:e4:b7:22:a4:07:8a:79:f3:42:
                    3d:25:22:ea:5a:9a:41:c6:da:cd:aa:7c:98:31:fb:
                    af:81:8c:1d:d0:43:5c:15:26:93:89:3c:1e:fa:83:
                    37:4e:ef:b1:58:ec:da:38:a0:76:82:64:68:68:7d:
                    e5:78:87:46:50:bf:61:9a:74:04:92:f0:05:9b:b2:
                    a5:a8:16:f8:9b:0c:8d:4b:d3:79:5b:96:2d:d7:c8:
                    4c:92:bb:8f:b5:7b:b1:b6:ad:df:a5:39:44:61:20:
                    58:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:15:3B:CD:B3:C3:A2:CF:6F:BE:08:CC:A6:F6:FF:61:99:D0:6E:78
            X509v3 Authority Key Identifier:
                keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b1:49:51:be:63:07:f1:c7:36:b3:c2:dd:ad:90:5f:a1:b1:
         5c:7b:47:7a:1d:8d:7a:ad:06:15:dd:59:fb:25:39:b1:cf:86:
         23:36:2c:ec:d5:e2:46:f3:9f:f3:8b:a8:a0:8d:1a:f6:2d:a6:
         77:d9:75:3e:0d:77:e4:64:48:bc:33:e5:76:4d:1f:92:7a:82:
         53:ee:96:e0:f3:ed:93:a7:e5:3d:e4:06:4c:54:39:61:04:39:
         8a:f5:83:ce:86:c9:f8:7d:dc:6c:7a:41:75:ac:5f:5d:de:99:
         3b:cf:36:63:f4:36:c5:ed:38:50:54:2d:fe:2c:16:df:ca:57:
         82:36:46:77:62:18:6a:b1:ac:42:83:93:a2:55:a0:75:39:95:
         cc:ee:10:e0:86:ec:bf:af:53:94:01:4d:b9:89:58:fb:3b:fa:
         5f:e5:84:b8:1e:c4:3d:1c:f6:f3:1d:a4:09:fb:44:8c:83:0f:
         7e:73:9b:73:19:82:2d:38:2f:9d:82:b3:ab:f1:41:26:d2:54:
         d0:2c:21:64:d9:a2:72:8d:e1:96:6e:2a:fd:58:2c:71:4c:6d:
         ae:37:bf:55:ec:31:d0:79:01:eb:4b:75:96:a9:0d:93:3d:de:
         93:1e:26:b0:9e:39:4f:41:74:c3:c5:c8:98:1d:0a:04:bd:03:
         46:f3:4a:7e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUagaPMHFvLrrd9GLPQJGY++qyo7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz
OUE4M0ZGMzAeFw0yNjA1MDMwMjU5MDFaFw0yNzA1MDIwMzA0MDFaMDMxMTAvBgNV
BAMTKDAxMTUzQkNEQjNDM0EyQ0Y2RkJFMDhDQ0E2RjZGRjYxOTlEMDZFNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT2/yWmMrBYs2jhAwcUIOR9LAE
kFOpw9fV/qfLci2aFFL17A6rOyQSCVkzI85retImC8XxvNFP0fMD0R9FQ+xlFUEl
IOVQCyoMJSgTGXvEypr/eiiPFljwvgRzkydlqNmLfbV1k5C2QA8co8lN0Wql1U9I
tmhw47EPfZz15YIOCLFqfj7ZdSBsZAmyINYcS2QIb+Nble3uRJlVveS3IqQHinnz
Qj0lIupamkHG2s2qfJgx+6+BjB3QQ1wVJpOJPB76gzdO77FY7No4oHaCZGhofeV4
h0ZQv2GadASS8AWbsqWoFvibDI1L03lbli3XyEySu4+1e7G2rd+lOURhIFiRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUARU7zbPDos9vvgjMpvb/YZnQbngwHwYDVR0j
BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2
MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz
RkYzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyZjI4ODc5LTQ4NDQtNDJkZS1i
MmQ5LWE5NjY2ZGUyODJlYS8wLzMxMzAzMzJlMzkzNDJlMzIzMTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ17UMA0GCSqG
SIb3DQEBCwUAA4IBAQCCsUlRvmMH8cc2s8LdrZBfobFce0d6HY16rQYV3Vn7JTmx
z4YjNizs1eJG85/zi6igjRr2LaZ32XU+DXfkZEi8M+V2TR+SeoJT7pbg8+2Tp+U9
5AZMVDlhBDmK9YPOhsn4fdxsekF1rF9d3pk7zzZj9DbF7ThQVC3+LBbfyleCNkZ3
YhhqsaxCg5OiVaB1OZXM7hDghuy/r1OUAU25iVj7O/pf5YS4HsQ9HPbzHaQJ+0SM
gw9+c5tzGYItOC+dgrOr8UEm0lTQLCFk2aJyjeGWbir9WCxxTG2uN79V7DHQeQHr
S3WWqQ2TPd6THiawnjlPQXTDxciYHQoEvQNG80p+
-----END CERTIFICATE-----
Generated at Wed May 13 04:15:55 2026 by rpki-client