Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa
File:                     3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (raw, json)
Hash identifier:          mP6KDhXtXACfDnyPSe3QyvooBjz+fxsWyqqYwJxWxso=
Subject key identifier:   EF:14:79:67:82:12:41:9A:EB:EE:63:36:29:74:F7:26:D8:CD:CB:DD
Certificate issuer:       /CN=4916565C52234EF87B2101E4B733E4674131F669
Certificate serial:       089C05A1F9D82B4F78BD03B24B329F8DBA8A9861
Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa
Signing time:             Sun 03 May 2026 03:11:07 +0000
ROA not before:           Sun 03 May 2026 03:06:07 +0000
ROA not after:            Sun 02 May 2027 03:11:07 +0000
asID:                     138070
IP address blocks:        103.123.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
                          rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9c:05:a1:f9:d8:2b:4f:78:bd:03:b2:4b:32:9f:8d:ba:8a:98:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669
        Validity
            Not Before: May  3 03:06:07 2026 GMT
            Not After : May  2 03:11:07 2027 GMT
        Subject: CN=EF1479678212419AEBEE63362974F726D8CDCBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:39:0e:25:59:3a:e5:b7:95:b5:cc:8e:12:
                    3e:ec:f0:3b:29:25:47:e7:bd:43:48:c5:fa:41:aa:
                    e3:5e:7d:4c:ec:d9:d5:ad:58:5a:b2:ae:35:ab:5f:
                    a6:42:21:72:a9:0d:97:7a:70:37:17:a3:59:f0:21:
                    ad:c9:04:a8:a7:e1:6d:eb:d6:34:c3:78:70:34:1b:
                    00:2f:d2:14:e9:4c:5d:57:2a:28:83:b8:0c:56:4c:
                    b5:46:7c:b7:c4:b1:c5:b2:82:d6:1e:53:db:0a:01:
                    ce:67:cd:f2:9f:0d:64:9d:52:2a:38:b7:31:e7:e9:
                    2a:cc:9f:c2:a1:f9:ed:cb:2d:1d:31:ac:3e:9f:a5:
                    14:b6:79:20:96:a9:8f:d2:53:d0:6a:12:c6:5e:4d:
                    dc:92:9d:93:ed:1c:ea:70:81:a6:2f:ec:73:7f:07:
                    2f:7d:8f:79:d7:39:bb:28:0f:36:c7:a2:8b:32:0c:
                    aa:3c:d3:70:ad:93:c7:a7:8d:33:a8:c6:42:6d:58:
                    51:d9:12:e0:18:24:6e:a2:9a:49:55:bf:85:c2:fa:
                    f1:c9:60:74:73:c7:be:1a:28:d8:6e:11:89:f8:32:
                    40:d7:32:d2:a1:d3:f8:c8:e6:e7:c2:ad:1a:b1:8b:
                    ac:85:9b:37:1f:f6:94:b8:68:fc:97:25:a0:5d:19:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:14:79:67:82:12:41:9A:EB:EE:63:36:29:74:F7:26:D8:CD:CB:DD
            X509v3 Authority Key Identifier:
                keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:bd:68:94:df:d4:c6:82:84:eb:dc:eb:5b:c0:c1:56:ec:5a:
         0b:29:e2:60:a9:eb:5c:f6:b3:93:16:30:35:51:8c:bc:3b:51:
         ba:01:8e:88:d8:41:75:b4:db:0a:23:ef:ac:75:c2:d0:6a:3e:
         42:d4:d0:71:c0:10:8a:88:14:6c:d6:92:cc:c7:c3:23:13:e7:
         65:4c:2b:49:12:bb:ce:c2:29:78:7e:76:53:e3:2c:2f:f6:a0:
         af:05:72:1b:14:a2:45:de:ca:2e:79:4b:c5:13:d9:0a:94:4b:
         15:4e:36:f2:2a:0d:8e:96:1a:b4:fb:2f:53:da:53:76:9a:c1:
         8b:5e:27:7a:40:06:dc:7f:43:0d:b8:2d:32:b2:dc:93:30:05:
         ff:3f:99:f3:52:bb:50:af:b5:9d:58:93:15:c1:72:d5:ac:7f:
         08:6b:a5:2e:64:7b:15:25:e6:7a:1b:f3:92:d9:81:07:db:3a:
         e2:95:94:ee:0e:ac:73:5a:7c:d3:52:a1:a8:b9:69:34:ca:93:
         39:f6:e1:44:8f:0c:c2:a3:a3:17:95:c9:58:ec:1e:74:3f:10:
         2e:93:c3:ad:51:df:c8:3f:03:92:88:68:87:9f:11:9b:17:9f:
         1d:76:d9:11:2a:f1:28:c2:d3:ae:1a:62:60:4e:fe:ba:ef:79:
         db:9d:26:93
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUCJwFofnYK094vQOySzKfjbqKmGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0
MTMxRjY2OTAeFw0yNjA1MDMwMzA2MDdaFw0yNzA1MDIwMzExMDdaMDMxMTAvBgNV
BAMTKEVGMTQ3OTY3ODIxMjQxOUFFQkVFNjMzNjI5NzRGNzI2RDhDRENCREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc8jkOJVk65beVtcyOEj7s8Dsp
JUfnvUNIxfpBquNefUzs2dWtWFqyrjWrX6ZCIXKpDZd6cDcXo1nwIa3JBKin4W3r
1jTDeHA0GwAv0hTpTF1XKiiDuAxWTLVGfLfEscWygtYeU9sKAc5nzfKfDWSdUio4
tzHn6SrMn8Kh+e3LLR0xrD6fpRS2eSCWqY/SU9BqEsZeTdySnZPtHOpwgaYv7HN/
By99j3nXObsoDzbHoosyDKo803Ctk8enjTOoxkJtWFHZEuAYJG6imklVv4XC+vHJ
YHRzx74aKNhuEYn4MkDXMtKh0/jI5ufCrRqxi6yFmzcf9pS4aPyXJaBdGXGHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU7xR5Z4ISQZrr7mM2KXT3JtjNy90wHwYDVR0j
BBgwFoAUSRZWXFIjTvh7IQHktzPkZ0Ex9mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGFkNjdkNWYtNTcxMy00MTUzLTg3MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1
MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0MTMxRjY2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80OTE2NTY1QzUyMjM0RUY4N0IyMTAxRTRCNzMzRTQ2NzQxMzFG
NjY5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RhZDY3ZDVmLTU3MTMtNDE1My04
NzFiLTFiMDA4ZjdmZmRkMi8wLzMxMzAzMzJlMzEzMjMzMmUzMTMwMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABne2swDQYJ
KoZIhvcNAQELBQADggEBAEO9aJTf1MaChOvc61vAwVbsWgsp4mCp61z2s5MWMDVR
jLw7UboBjojYQXW02woj76x1wtBqPkLU0HHAEIqIFGzWkszHwyMT52VMK0kSu87C
KXh+dlPjLC/2oK8FchsUokXeyi55S8UT2QqUSxVONvIqDY6WGrT7L1PaU3aawYte
J3pABtx/Qw24LTKy3JMwBf8/mfNSu1CvtZ1YkxXBctWsfwhrpS5kexUl5nob85LZ
gQfbOuKVlO4OrHNafNNSoai5aTTKkzn24USPDMKjoxeVyVjsHnQ/EC6Tw61R38g/
A5KIaIefEZsXnx122REq8SjC064aYmBO/rrvedudJpM=
-----END CERTIFICATE-----
Generated at Wed May 13 10:43:07 2026 by rpki-client