Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa
File:                     3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          bdfb+GsmDl+t56+VeA32lX6LBYSedZIz5DSbvJygLVc=
Subject key identifier:   10:92:F8:E0:97:27:98:4C:17:1D:7F:7B:6E:38:EF:79:1D:94:C2:9C
Certificate issuer:       /CN=ECE455F1182576E06A3CB3EC6393E193B5C28B83
Certificate serial:       0C0E7645E975AA569FD8E60FE7945281F3DF2E62
Authority key identifier: EC:E4:55:F1:18:25:76:E0:6A:3C:B3:EC:63:93:E1:93:B5:C2:8B:83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ECE455F1182576E06A3CB3EC6393E193B5C28B83.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa
Signing time:             Sun 03 May 2026 03:06:04 +0000
ROA not before:           Sun 03 May 2026 03:01:04 +0000
ROA not after:            Sun 02 May 2027 03:06:04 +0000
asID:                     58821
IP address blocks:        103.193.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ECE455F1182576E06A3CB3EC6393E193B5C28B83.crl
                          rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ECE455F1182576E06A3CB3EC6393E193B5C28B83.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ECE455F1182576E06A3CB3EC6393E193B5C28B83.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0e:76:45:e9:75:aa:56:9f:d8:e6:0f:e7:94:52:81:f3:df:2e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECE455F1182576E06A3CB3EC6393E193B5C28B83
        Validity
            Not Before: May  3 03:01:04 2026 GMT
            Not After : May  2 03:06:04 2027 GMT
        Subject: CN=1092F8E09727984C171D7F7B6E38EF791D94C29C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:3a:ee:bc:4f:e9:ab:ff:e6:c7:84:9f:b7:
                    db:dd:cf:22:11:e6:7e:9d:0d:d5:65:bf:f6:a1:af:
                    f0:d7:4d:e2:23:94:e3:b5:b5:9f:d8:ec:f7:e8:5d:
                    fb:98:ab:08:db:85:1e:b0:99:07:f6:be:16:5a:60:
                    19:77:1d:d8:91:66:af:0c:ba:96:be:f7:0a:8f:e7:
                    37:51:a5:4d:a5:6c:e6:f7:d7:be:a6:8b:60:87:de:
                    d3:2c:ed:e9:b1:74:21:c4:6d:4d:66:ca:e2:80:bb:
                    6e:95:7a:85:b5:11:34:bf:e5:e6:5d:a1:b6:46:57:
                    52:79:f0:9e:9c:b6:7d:b2:1c:81:4a:ab:2e:70:a5:
                    aa:74:36:e6:ba:e0:d0:06:bf:11:e1:00:0c:68:9c:
                    d7:c3:0e:e4:1b:57:f9:75:a7:b2:2f:b3:81:9f:65:
                    fd:d5:cf:d8:f6:19:54:57:c4:d3:4e:6f:0c:21:7a:
                    e5:6c:8e:e2:9a:24:e5:30:c6:9f:98:63:72:00:39:
                    97:cf:33:65:97:30:01:9a:02:67:46:59:87:49:51:
                    e0:50:f0:28:46:36:8e:e7:12:74:a9:72:40:5d:a4:
                    bb:5a:34:0a:9e:71:09:a1:b3:9c:44:b6:b1:62:fd:
                    d0:e6:12:f2:60:82:6f:98:46:9c:ba:f4:7c:83:5e:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:92:F8:E0:97:27:98:4C:17:1D:7F:7B:6E:38:EF:79:1D:94:C2:9C
            X509v3 Authority Key Identifier:
                keyid:EC:E4:55:F1:18:25:76:E0:6A:3C:B3:EC:63:93:E1:93:B5:C2:8B:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/ECE455F1182576E06A3CB3EC6393E193B5C28B83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ECE455F1182576E06A3CB3EC6393E193B5C28B83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:fb:63:20:9f:a2:42:81:a3:e5:d4:40:55:f1:08:fa:61:fd:
         8f:86:f9:e6:b1:ec:fc:98:77:3d:13:88:69:21:a2:0e:61:2b:
         33:38:74:df:f2:e9:bf:7c:f3:88:2d:71:74:d8:bf:c7:bf:ad:
         ed:ae:46:c6:ca:f5:ef:86:bf:eb:0b:87:b1:fe:0e:85:28:9c:
         5d:71:d3:ce:f5:c3:81:8b:db:34:03:1c:de:d7:24:c8:fc:f3:
         1d:71:11:2c:05:9c:f4:19:da:3f:ec:cd:e1:61:43:98:60:34:
         28:c9:bb:3f:3e:b3:55:46:56:fc:40:b2:0f:2d:84:e8:dd:46:
         9e:de:01:64:23:3d:aa:c5:1e:06:b7:79:ea:33:a0:13:7f:a7:
         8d:06:a6:5d:66:04:00:c4:2e:8a:81:8b:eb:db:7f:6f:b7:9d:
         2e:8e:fb:d8:b5:90:80:7c:c2:9b:dd:68:69:d4:96:3e:d1:59:
         6f:10:93:d1:9d:7a:c8:11:0f:c0:d7:77:c7:6f:0b:52:fc:12:
         52:08:83:44:47:98:8d:18:ea:1b:4f:ff:26:f3:3b:7c:b4:e7:
         c9:9b:a9:11:7e:f0:86:5c:c1:ee:eb:75:b9:a3:1c:56:db:1e:
         9d:65:8d:fc:01:f0:9b:94:aa:ce:16:46:59:f3:ef:f8:02:12:
         9b:f9:da:41
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDA52Rel1qlaf2OYP55RSgfPfLmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFNDU1RjExODI1NzZFMDZBM0NCM0VDNjM5M0UxOTNC
NUMyOEI4MzAeFw0yNjA1MDMwMzAxMDRaFw0yNzA1MDIwMzA2MDRaMDMxMTAvBgNV
BAMTKDEwOTJGOEUwOTcyNzk4NEMxNzFEN0Y3QjZFMzhFRjc5MUQ5NEMyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LTruvE/pq//mx4Sft9vdzyIR
5n6dDdVlv/ahr/DXTeIjlOO1tZ/Y7PfoXfuYqwjbhR6wmQf2vhZaYBl3HdiRZq8M
upa+9wqP5zdRpU2lbOb3176mi2CH3tMs7emxdCHEbU1myuKAu26VeoW1ETS/5eZd
obZGV1J58J6ctn2yHIFKqy5wpap0Nua64NAGvxHhAAxonNfDDuQbV/l1p7Ivs4Gf
Zf3Vz9j2GVRXxNNObwwheuVsjuKaJOUwxp+YY3IAOZfPM2WXMAGaAmdGWYdJUeBQ
8ChGNo7nEnSpckBdpLtaNAqecQmhs5xEtrFi/dDmEvJggm+YRpy69HyDXi0TAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUEJL44JcnmEwXHX97bjjveR2UwpwwHwYDVR0j
BBgwFoAU7ORV8RglduBqPLPsY5Phk7XCi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yzg4M2ZlNzUtOTFlNC00OTg5LWJjNWUtNmEyNjA4MmRjMzM0LzAvRUNFNDU1RjEx
ODI1NzZFMDZBM0NCM0VDNjM5M0UxOTNCNUMyOEI4My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQ0U0NTVGMTE4MjU3NkUwNkEzQ0IzRUM2MzkzRTE5M0I1QzI4
QjgzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4ODNmZTc1LTkxZTQtNDk4OS1i
YzVlLTZhMjYwODJkYzMzNC8wLzMxMzAzMzJlMzEzOTMzMmUzMTM0MzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNTM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ8GQMA0GCSqG
SIb3DQEBCwUAA4IBAQAD+2Mgn6JCgaPl1EBV8Qj6Yf2Phvnmsez8mHc9E4hpIaIO
YSszOHTf8um/fPOILXF02L/Hv63trkbGyvXvhr/rC4ex/g6FKJxdcdPO9cOBi9s0
Axze1yTI/PMdcREsBZz0Gdo/7M3hYUOYYDQoybs/PrNVRlb8QLIPLYTo3Uae3gFk
Iz2qxR4Gt3nqM6ATf6eNBqZdZgQAxC6KgYvr239vt50ujvvYtZCAfMKb3Whp1JY+
0VlvEJPRnXrIEQ/A13fHbwtS/BJSCINER5iNGOobT/8m8zt8tOfJm6kRfvCGXMHu
63W5oxxW2x6dZY38AfCblKrOFkZZ8+/4AhKb+dpB
-----END CERTIFICATE-----
Generated at Wed May 13 05:36:20 2026 by rpki-client