Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa
File:                     3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=
Subject key identifier:   26:35:C6:67:D4:47:95:47:BD:91:FA:F4:7A:BA:4F:53:D4:37:40:06
Certificate issuer:       /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED
Certificate serial:       0B7F72536F066CC2235C2A3FC2B3A260A4C28A9C
Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 03:07:51 +0000
ROA not before:           Sun 03 May 2026 03:02:51 +0000
ROA not after:            Sun 02 May 2027 03:07:51 +0000
asID:                     45305
IP address blocks:        103.130.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl
                          rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7f:72:53:6f:06:6c:c2:23:5c:2a:3f:c2:b3:a2:60:a4:c2:8a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED
        Validity
            Not Before: May  3 03:02:51 2026 GMT
            Not After : May  2 03:07:51 2027 GMT
        Subject: CN=2635C667D4479547BD91FAF47ABA4F53D4374006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:ba:42:bd:99:73:d0:1a:6d:f7:e5:9f:58:
                    ee:52:62:94:96:a3:22:a5:46:82:f2:15:3c:99:9d:
                    62:64:06:a0:d5:bf:10:64:54:9d:83:fe:fa:07:5c:
                    b4:5b:20:61:d0:75:1f:05:fa:cd:bd:b6:59:60:a4:
                    e3:03:a9:46:8a:80:90:93:8c:92:ab:fb:d0:dc:90:
                    35:4f:ab:25:36:b2:ea:b8:75:7e:fe:2e:2e:a5:d8:
                    dd:a2:2f:3f:e8:29:77:ee:ec:71:64:f3:cc:67:d6:
                    ff:7d:e0:62:df:e9:2c:f6:63:f1:bd:20:b2:04:82:
                    72:ab:21:9c:68:95:5b:57:b1:3a:55:6c:0e:cc:45:
                    c6:e3:f0:56:55:89:07:cd:d1:27:64:13:67:6b:94:
                    b3:d5:77:d5:21:88:c5:1d:7d:d9:16:a1:62:3e:e0:
                    6a:ea:24:69:2d:9b:c4:62:b7:7a:46:2c:fd:b0:c7:
                    dc:ca:76:c5:de:6f:fb:17:27:d9:12:1e:37:d0:21:
                    7a:14:12:69:23:61:b9:98:79:f9:57:2d:9d:f7:b7:
                    61:87:49:71:7d:26:df:ee:b9:d2:4d:05:86:ef:d4:
                    38:34:84:52:9c:ca:99:f2:0a:64:08:a2:00:58:42:
                    c2:94:7d:c1:0a:1d:f6:ab:df:41:a2:1a:9e:24:1f:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:35:C6:67:D4:47:95:47:BD:91:FA:F4:7A:BA:4F:53:D4:37:40:06
            X509v3 Authority Key Identifier:
                keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:2d:6f:78:23:03:c0:12:a7:db:db:87:dd:cf:d6:d7:99:
         0a:60:47:d7:be:b1:41:2d:93:c5:1f:45:d2:79:ca:89:f9:cf:
         11:79:fb:d9:9a:1f:9a:73:93:d1:3b:74:73:20:1c:ed:21:2a:
         31:43:b3:45:e8:52:5e:12:62:6e:e2:96:02:a0:e6:9d:5b:5f:
         50:64:25:b9:3e:54:b8:a9:33:8c:f2:3f:c7:eb:e1:3e:70:0c:
         7c:ce:32:ea:4e:9a:80:63:dd:f3:f7:24:77:f8:da:26:00:00:
         03:65:58:0e:01:af:ce:df:e1:ff:50:ee:d0:95:5b:64:09:93:
         5d:f9:bc:0d:b0:d0:8b:4e:d5:b9:bb:21:11:3a:1a:0c:05:d7:
         96:11:2c:e1:6c:a1:cd:06:d2:82:bb:8f:d6:51:6a:33:df:3f:
         ea:eb:ed:67:06:47:c9:0b:67:de:22:4b:9f:3b:9a:fe:12:7c:
         52:36:52:3b:6a:c0:9a:94:27:93:2d:73:89:d0:50:b4:5f:83:
         47:e1:af:6c:7a:e8:7e:d4:ed:e8:fd:49:4e:81:9e:b4:79:2b:
         c7:aa:f0:ae:2b:d0:bb:4e:6f:ec:a3:67:cc:24:f4:72:3e:ae:
         fc:a9:25:94:f8:7d:3b:d0:18:27:6d:53:3d:cf:d7:57:15:d7:
         a7:59:cc:33
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUC39yU28GbMIjXCo/wrOiYKTCipwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBD
NDQ5NDZFRDAeFw0yNjA1MDMwMzAyNTFaFw0yNzA1MDIwMzA3NTFaMDMxMTAvBgNV
BAMTKDI2MzVDNjY3RDQ0Nzk1NDdCRDkxRkFGNDdBQkE0RjUzRDQzNzQwMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQELpCvZlz0Bpt9+WfWO5SYpSW
oyKlRoLyFTyZnWJkBqDVvxBkVJ2D/voHXLRbIGHQdR8F+s29tllgpOMDqUaKgJCT
jJKr+9DckDVPqyU2suq4dX7+Li6l2N2iLz/oKXfu7HFk88xn1v994GLf6Sz2Y/G9
ILIEgnKrIZxolVtXsTpVbA7MRcbj8FZViQfN0SdkE2drlLPVd9UhiMUdfdkWoWI+
4GrqJGktm8Rit3pGLP2wx9zKdsXeb/sXJ9kSHjfQIXoUEmkjYbmYeflXLZ33t2GH
SXF9Jt/uudJNBYbv1Dg0hFKcypnyCmQIogBYQsKUfcEKHfar30GiGp4kH+gLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUJjXGZ9RHlUe9kfr0erpPU9Q3QAYwHwYDVR0j
BBgwFoAUJW4DvC8dpPkDHnHGgU0BkMRJRu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2ZmZGMyYjctZjMwNS00ZTA3LWFhYzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMy
RjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBDNDQ5NDZFRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNTZFMDNCQzJGMURBNEY5MDMxRTcxQzY4MTREMDE5MEM0NDk0
NkVELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NmZmRjMmI3LWYzMDUtNGUwNy1h
YWM1LTQ2OWU5MTEzYjBiNC8wLzMxMzAzMzJlMzEzMzMwMmUzMTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4J1MA0GCSqG
SIb3DQEBCwUAA4IBAQAU1i1veCMDwBKn29uH3c/W15kKYEfXvrFBLZPFH0XSecqJ
+c8RefvZmh+ac5PRO3RzIBztISoxQ7NF6FJeEmJu4pYCoOadW19QZCW5PlS4qTOM
8j/H6+E+cAx8zjLqTpqAY93z9yR3+NomAAADZVgOAa/O3+H/UO7QlVtkCZNd+bwN
sNCLTtW5uyEROhoMBdeWESzhbKHNBtKCu4/WUWoz3z/q6+1nBkfJC2feIkufO5r+
EnxSNlI7asCalCeTLXOJ0FC0X4NH4a9seuh+1O3o/UlOgZ60eSvHqvCuK9C7Tm/s
o2fMJPRyPq78qSWU+H070BgnbVM9z9dXFdenWcwz
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:22 2026 by rpki-client