Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa
File:                     3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (raw, json)
Hash identifier:          TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=
Subject key identifier:   39:14:2E:C8:35:D7:74:6C:E8:F0:52:8D:CC:ED:B0:88:6B:C3:A3:44
Certificate issuer:       /CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Certificate serial:       1160241F802DBFF49C9E5D90067951B2518233BB
Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa
Signing time:             Sun 03 May 2026 03:12:30 +0000
ROA not before:           Sun 03 May 2026 03:07:30 +0000
ROA not after:            Sun 02 May 2027 03:12:30 +0000
asID:                     141618
IP address blocks:        103.174.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
                          rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:60:24:1f:80:2d:bf:f4:9c:9e:5d:90:06:79:51:b2:51:82:33:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB
        Validity
            Not Before: May  3 03:07:30 2026 GMT
            Not After : May  2 03:12:30 2027 GMT
        Subject: CN=39142EC835D7746CE8F0528DCCEDB0886BC3A344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d5:e6:03:2c:af:eb:0d:f2:60:5b:28:bd:16:
                    95:34:b5:ad:63:fa:78:e2:f0:15:9b:71:46:e7:2a:
                    be:59:4d:f4:a3:6d:a4:ef:75:a4:6a:f1:3a:8a:ce:
                    96:61:cd:44:e9:f6:95:02:60:ab:96:9d:99:47:ec:
                    8e:e4:a0:aa:e4:58:d6:4f:ed:7e:33:5c:e1:a8:3e:
                    1c:21:9e:5a:7c:db:c9:db:b6:88:73:8e:d7:b1:4c:
                    4c:1f:8a:50:11:05:23:6b:b4:f8:48:3c:b1:ea:00:
                    70:91:a4:8b:88:98:75:fb:23:fd:dc:d6:7c:00:a9:
                    04:dd:62:9d:e7:3f:7d:65:9e:db:65:b7:cc:a9:42:
                    a6:8f:75:0d:10:6c:3c:bb:55:37:c7:ba:7f:0e:d4:
                    ad:3d:35:83:96:29:fe:8f:58:1d:2d:db:d5:6d:86:
                    d5:79:df:25:af:63:a7:4c:40:6c:dd:3d:6f:80:f9:
                    f2:a4:2d:04:8f:65:67:45:7f:86:b1:cf:98:97:61:
                    e4:fa:a7:20:7d:44:3d:8c:8c:6d:45:e3:3c:b0:de:
                    ee:90:9a:0f:7b:67:40:42:e7:1c:06:ea:ff:a6:c3:
                    e8:0d:d7:b3:40:c9:bb:a1:5c:21:5e:47:96:53:5c:
                    0a:b1:f4:5b:d9:1a:d4:f3:32:26:0a:20:5b:5d:7c:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:14:2E:C8:35:D7:74:6C:E8:F0:52:8D:CC:ED:B0:88:6B:C3:A3:44
            X509v3 Authority Key Identifier:
                keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:6f:9f:b3:d5:41:be:38:3c:ae:a6:53:b7:11:26:0f:30:
         b2:71:55:12:db:1d:d1:f3:5b:f2:19:c4:5d:27:b3:12:d8:4d:
         1d:fb:41:95:22:6b:bf:12:d0:e9:93:7e:b3:af:e3:b9:d0:ae:
         55:cb:6c:c1:b3:16:ce:79:67:82:56:c4:ac:9d:9e:95:17:25:
         de:d1:6f:8c:d2:c0:c9:1b:d4:c4:db:d6:75:4f:36:9f:2d:46:
         f2:64:e3:13:70:1b:d1:73:94:50:fd:af:25:d5:f4:da:1d:dc:
         9d:40:99:f7:69:c8:43:b5:06:31:26:df:39:ff:8e:ee:01:2a:
         49:67:5c:32:d5:a2:60:7b:d7:8c:ea:9d:95:94:1e:61:a6:03:
         a9:5f:88:78:17:c5:32:34:af:4f:26:72:65:84:b1:ab:9d:28:
         22:11:38:1e:5f:d7:e5:cb:cb:93:7d:13:ec:54:65:62:2f:df:
         5d:15:45:cf:0a:51:f4:ef:f2:92:b8:b3:e3:38:6c:88:e5:fe:
         2a:32:f0:29:31:c3:95:b3:b4:55:5d:3b:d6:92:c7:13:2f:89:
         e9:c5:66:83:5b:af:21:e4:f4:b9:bb:15:be:42:d5:a3:c2:a4:
         7b:45:cb:77:b0:79:f0:48:bb:03:64:10:a3:f7:5c:74:9e:28:
         dc:56:ea:d8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEWAkH4Atv/Scnl2QBnlRslGCM7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVEQjcyM0ZGRTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5
MzY4MTdGQjAeFw0yNjA1MDMwMzA3MzBaFw0yNzA1MDIwMzEyMzBaMDMxMTAvBgNV
BAMTKDM5MTQyRUM4MzVENzc0NkNFOEYwNTI4RENDRURCMDg4NkJDM0EzNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1eYDLK/rDfJgWyi9FpU0ta1j
+nji8BWbcUbnKr5ZTfSjbaTvdaRq8TqKzpZhzUTp9pUCYKuWnZlH7I7koKrkWNZP
7X4zXOGoPhwhnlp828nbtohzjtexTEwfilARBSNrtPhIPLHqAHCRpIuImHX7I/3c
1nwAqQTdYp3nP31lnttlt8ypQqaPdQ0QbDy7VTfHun8O1K09NYOWKf6PWB0t29Vt
htV53yWvY6dMQGzdPW+A+fKkLQSPZWdFf4axz5iXYeT6pyB9RD2MjG1F4zyw3u6Q
mg97Z0BC5xwG6v+mw+gN17NAybuhXCFeR5ZTXAqx9FvZGtTzMiYKIFtdfHjlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUORQuyDXXdGzo8FKNzO2wiGvDo0QwHwYDVR0j
BBgwFoAUnttyP/4IS5uHtbChCFdDNZNoF/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTBiYTk3ZWYtN2JjOC00NWI4LTgyYWItZjg1NTMzY2FlZGY0LzAvOUVEQjcyM0ZG
RTA4NEI5Qjg3QjVCMEExMDg1NzQzMzU5MzY4MTdGQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RURCNzIzRkZFMDg0QjlCODdCNUIwQTEwODU3NDMzNTkzNjgx
N0ZCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UwYmE5N2VmLTdiYzgtNDViOC04
MmFiLWY4NTUzM2NhZWRmNC8wLzMxMzAzMzJlMzEzNzM0MmUzNjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ65CMA0GCSqG
SIb3DQEBCwUAA4IBAQBtC2+fs9VBvjg8rqZTtxEmDzCycVUS2x3R81vyGcRdJ7MS
2E0d+0GVImu/EtDpk36zr+O50K5Vy2zBsxbOeWeCVsSsnZ6VFyXe0W+M0sDJG9TE
29Z1TzafLUbyZOMTcBvRc5RQ/a8l1fTaHdydQJn3achDtQYxJt85/47uASpJZ1wy
1aJge9eM6p2VlB5hpgOpX4h4F8UyNK9PJnJlhLGrnSgiETgeX9fly8uTfRPsVGVi
L99dFUXPClH07/KSuLPjOGyI5f4qMvApMcOVs7RVXTvWkscTL4npxWaDW68h5PS5
uxW+QtWjwqR7Rct3sHnwSLsDZBCj91x0nijcVurY
-----END CERTIFICATE-----
Generated at Wed May 13 08:45:17 2026 by rpki-client