Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa
File:                     3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (raw, json)
Hash identifier:          HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=
Subject key identifier:   98:8C:ED:87:47:48:C3:45:1B:83:B6:62:25:2C:42:D7:0E:8B:75:DD
Certificate issuer:       /CN=67EFB834694FDF326541D90AA7679322947189B3
Certificate serial:       5CC8AA6CBEB40DC43DFABBFBF4B720000925E13A
Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa
Signing time:             Sun 03 May 2026 03:06:10 +0000
ROA not before:           Sun 03 May 2026 03:01:10 +0000
ROA not after:            Sun 02 May 2027 03:06:10 +0000
asID:                     7713
IP address blocks:        103.149.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
                          rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c8:aa:6c:be:b4:0d:c4:3d:fa:bb:fb:f4:b7:20:00:09:25:e1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3
        Validity
            Not Before: May  3 03:01:10 2026 GMT
            Not After : May  2 03:06:10 2027 GMT
        Subject: CN=988CED874748C3451B83B662252C42D70E8B75DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:c2:fa:dc:f4:5e:6d:5e:00:1b:81:ac:ee:
                    ba:5d:5b:d8:fb:ba:30:9f:17:27:66:c7:54:bd:28:
                    80:25:43:6f:69:de:88:82:7a:40:fb:2e:81:9a:10:
                    ff:54:71:bb:5d:ad:5f:b2:c3:55:8e:8a:af:41:9c:
                    27:6a:db:3d:de:de:f8:3c:da:08:92:75:46:bc:ab:
                    6b:6c:bf:10:59:de:b8:c1:c6:8f:11:16:ab:6a:ed:
                    9a:0f:c2:db:b3:5a:17:53:e6:3d:14:16:11:d8:81:
                    8c:67:63:f7:45:d5:06:f8:73:01:4a:15:12:42:34:
                    b9:1f:44:a6:91:5f:0d:0f:ef:c0:10:40:c0:bb:2c:
                    33:df:e5:08:c2:6d:e4:cb:c6:5e:ae:18:61:16:79:
                    d9:92:60:eb:0e:8d:59:ef:41:04:7c:fd:c4:c4:5b:
                    8b:89:7d:3f:61:61:8a:f9:8a:37:88:64:08:64:9f:
                    c2:c7:99:8a:c3:a3:9c:3d:26:b9:d1:7a:cd:e5:64:
                    10:04:ad:9a:c7:73:6f:2b:d5:6d:58:ea:65:c1:1d:
                    11:ba:83:4e:76:af:2a:51:4b:d2:70:63:57:fd:1c:
                    62:c1:ae:c8:8e:7a:bf:61:22:97:9a:f4:3b:be:08:
                    39:3f:85:32:ae:4f:cd:3b:90:4b:6b:61:ba:49:3a:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8C:ED:87:47:48:C3:45:1B:83:B6:62:25:2C:42:D7:0E:8B:75:DD
            X509v3 Authority Key Identifier:
                keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:11:fe:0f:9b:45:ad:0f:b3:c4:3f:d5:a4:71:f6:27:17:c4:
         0f:83:4e:d4:a8:56:a4:9e:fc:79:ba:b0:5f:0a:f0:96:18:a9:
         4a:5c:72:6d:77:06:c2:a9:db:30:4b:e4:dc:70:47:22:4e:54:
         35:32:81:0b:a5:80:3f:e3:7c:8b:ac:ce:42:ba:30:6e:1a:3e:
         2b:f5:9e:eb:67:25:8a:a6:8f:86:80:77:ef:67:82:27:d0:1c:
         55:76:46:8b:33:c7:7b:60:4f:c4:39:7a:b1:7b:f6:e3:b9:9a:
         fb:4f:d7:78:b0:65:99:38:c2:58:a9:c8:95:9a:46:0a:cb:ec:
         ba:3e:45:e2:c6:57:ce:0a:6e:59:cd:92:e9:1b:a9:ec:7d:77:
         51:ff:44:e3:09:39:f0:47:11:5c:e5:40:25:53:5d:82:a1:47:
         7f:17:96:d5:ac:47:80:7c:02:b4:cd:5d:d6:3f:8f:14:19:dd:
         42:27:60:56:28:ae:33:33:cc:68:11:9a:f3:40:a7:97:7a:2d:
         62:0a:6c:80:26:6e:1f:71:40:47:0e:f0:0e:92:df:e4:5a:20:
         e0:11:90:0d:b8:6e:11:54:c5:5c:bd:c9:d6:6a:63:04:70:6b:
         db:b0:39:ff:7b:c4:a8:5a:0b:e7:e5:8e:41:e9:59:26:c0:40:
         5e:7e:78:f4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXMiqbL60DcQ9+rv79LcgAAkl4TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5
NDcxODlCMzAeFw0yNjA1MDMwMzAxMTBaFw0yNzA1MDIwMzA2MTBaMDMxMTAvBgNV
BAMTKDk4OENFRDg3NDc0OEMzNDUxQjgzQjY2MjI1MkM0MkQ3MEU4Qjc1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9cL63PRebV4AG4Gs7rpdW9j7
ujCfFydmx1S9KIAlQ29p3oiCekD7LoGaEP9UcbtdrV+yw1WOiq9BnCdq2z3e3vg8
2giSdUa8q2tsvxBZ3rjBxo8RFqtq7ZoPwtuzWhdT5j0UFhHYgYxnY/dF1Qb4cwFK
FRJCNLkfRKaRXw0P78AQQMC7LDPf5QjCbeTLxl6uGGEWedmSYOsOjVnvQQR8/cTE
W4uJfT9hYYr5ijeIZAhkn8LHmYrDo5w9JrnRes3lZBAErZrHc28r1W1Y6mXBHRG6
g052rypRS9JwY1f9HGLBrsiOer9hIpea9Du+CDk/hTKuT807kEtrYbpJOoi7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmIzth0dIw0Ubg7ZiJSxC1w6Ldd0wHwYDVR0j
BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2
OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4
OUIzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4ZDBlNjQwLTIyZTktNDQxYy04
NjM0LWY5NTI1MzA3ZGE3Ni8wLzMxMzAzMzJlMzEzNDM5MmUzMTMyMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNzM3MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeVeTANBgkqhkiG
9w0BAQsFAAOCAQEAbBH+D5tFrQ+zxD/VpHH2JxfED4NO1KhWpJ78ebqwXwrwlhip
SlxybXcGwqnbMEvk3HBHIk5UNTKBC6WAP+N8i6zOQrowbho+K/We62cliqaPhoB3
72eCJ9AcVXZGizPHe2BPxDl6sXv247ma+0/XeLBlmTjCWKnIlZpGCsvsuj5F4sZX
zgpuWc2S6Rup7H13Uf9E4wk58EcRXOVAJVNdgqFHfxeW1axHgHwCtM1d1j+PFBnd
QidgViiuMzPMaBGa80Cnl3otYgpsgCZuH3FARw7wDpLf5Fog4BGQDbhuEVTFXL3J
1mpjBHBr27A5/3vEqFoL5+WOQelZJsBAXn549A==
-----END CERTIFICATE-----
Generated at Wed May 13 10:54:53 2026 by rpki-client