Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa
File:                     3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa (raw, json)
Hash identifier:          DZdEpRAWcsI7f8n4mCyKxhMlIoUVYsYswNDL3OJeS2g=
Subject key identifier:   C2:3F:09:98:2B:FE:BB:19:37:8F:83:A8:9E:8C:D1:0C:8E:93:C6:FC
Certificate issuer:       /CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Certificate serial:       140C01F0013CBEC7D91AA3DC998A5E754E577E0B
Authority key identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa
Signing time:             Sun 03 May 2026 03:12:45 +0000
ROA not before:           Sun 03 May 2026 03:07:45 +0000
ROA not after:            Sun 02 May 2027 03:12:45 +0000
asID:                     137329
IP address blocks:        103.106.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
                          rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0c:01:f0:01:3c:be:c7:d9:1a:a3:dc:99:8a:5e:75:4e:57:7e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
        Validity
            Not Before: May  3 03:07:45 2026 GMT
            Not After : May  2 03:12:45 2027 GMT
        Subject: CN=C23F09982BFEBB19378F83A89E8CD10C8E93C6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:ce:4f:80:49:6b:f0:7e:42:eb:0e:d6:cb:
                    6f:d6:34:d0:6d:b7:bf:41:6f:56:ce:09:e6:69:63:
                    e0:66:fc:73:9e:2f:e9:ba:5a:64:31:93:c2:ea:23:
                    06:3c:c5:89:0e:ae:f5:7b:44:71:5c:c9:ec:c1:d4:
                    eb:8c:bc:46:ae:8b:60:0d:37:6b:52:88:fd:38:ae:
                    10:26:9a:fe:e0:ff:d7:df:89:18:3e:7e:30:72:8c:
                    2a:a7:ff:e6:fc:cb:46:3a:d3:e7:18:d8:0e:c9:b5:
                    f9:b0:ec:6a:8f:42:18:fa:a3:e6:35:db:c5:28:82:
                    2e:2d:a8:3e:a9:75:dd:d2:35:ca:79:1c:e6:6d:f0:
                    1f:1a:5c:c7:84:17:bf:82:60:41:78:a1:bd:d6:08:
                    b5:68:ff:d6:0d:9e:4a:28:09:f8:2b:b0:27:7a:25:
                    86:17:18:c9:16:e3:b9:e9:f2:e7:94:d1:51:fd:e0:
                    35:1e:88:69:fc:a2:37:2e:52:1c:9b:bd:d7:82:bc:
                    ba:f6:c8:28:c4:d0:6c:e8:08:c1:6f:7d:f1:3e:98:
                    4d:28:df:d6:69:19:9e:46:bd:9f:27:1a:f7:e5:4d:
                    fb:7d:8a:4f:e4:ee:52:cb:10:3c:94:e5:dc:0d:09:
                    26:f6:81:5d:34:d6:20:7a:02:83:be:b0:fb:54:76:
                    2e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3F:09:98:2B:FE:BB:19:37:8F:83:A8:9E:8C:D1:0C:8E:93:C6:FC
            X509v3 Authority Key Identifier:
                keyid:C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:a7:da:fa:c1:62:e9:71:20:e7:64:6c:6c:db:cd:ad:ac:
         38:52:72:2c:44:5a:ca:71:ff:89:42:f8:86:f6:95:66:ae:c0:
         07:dd:00:d6:9a:b2:dd:c5:f8:40:80:c0:45:98:25:be:75:a9:
         47:96:92:10:36:79:b6:f7:c1:dc:5e:b5:74:4d:a4:76:da:16:
         0f:ef:1c:11:25:b6:61:02:bc:09:82:35:10:73:66:ef:96:d6:
         0d:7f:a2:4f:18:04:0b:ac:2e:78:c3:4c:39:85:94:87:c6:b9:
         8a:17:91:f8:dc:f7:af:9d:a5:e1:27:27:7f:a9:91:b2:1a:29:
         05:8d:b4:55:89:a8:b3:4a:1b:da:a7:d9:74:f7:c9:8a:bf:e1:
         71:b7:76:75:f6:05:2c:1b:7e:30:2f:5d:cf:ab:bd:64:e8:40:
         4d:22:a6:d0:91:52:43:80:7c:5f:40:6f:53:3e:1c:57:ad:1e:
         77:e5:49:b2:3d:44:23:7a:d3:c0:75:dd:95:3b:b1:53:b9:83:
         2f:f9:8f:cd:a2:09:b8:21:16:b4:0c:30:58:70:46:c1:85:2f:
         10:2a:00:b1:df:a8:f3:af:3e:78:ca:a6:fd:c6:1a:98:d5:5d:
         cd:9c:cf:9f:f8:b6:8f:a3:4b:f9:6b:71:b8:fd:c4:f1:dc:23:
         8d:35:34:55
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUFAwB8AE8vsfZGqPcmYpedU5XfgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGMEVBM0Y0OTg5NjVDNzM2MUI1RUJDMkU4OTE2MzBB
RDJGMzlCQTAeFw0yNjA1MDMwMzA3NDVaFw0yNzA1MDIwMzEyNDVaMDMxMTAvBgNV
BAMTKEMyM0YwOTk4MkJGRUJCMTkzNzhGODNBODlFOENEMTBDOEU5M0M2RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1s5PgElr8H5C6w7Wy2/WNNBt
t79Bb1bOCeZpY+Bm/HOeL+m6WmQxk8LqIwY8xYkOrvV7RHFcyezB1OuMvEaui2AN
N2tSiP04rhAmmv7g/9ffiRg+fjByjCqn/+b8y0Y60+cY2A7Jtfmw7GqPQhj6o+Y1
28Uogi4tqD6pdd3SNcp5HOZt8B8aXMeEF7+CYEF4ob3WCLVo/9YNnkooCfgrsCd6
JYYXGMkW47np8ueU0VH94DUeiGn8ojcuUhybvdeCvLr2yCjE0GzoCMFvffE+mE0o
39ZpGZ5GvZ8nGvflTft9ik/k7lLLEDyU5dwNCSb2gV001iB6AoO+sPtUdi4/AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUwj8JmCv+uxk3j4OonozRDI6TxvwwHwYDVR0j
BBgwFoAUxvDqP0mJZcc2G168LokWMK0vObowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTE3YmQ1MDItNDJjMi00MDBkLWEyYWQtZDE3NTQzNjVhNDVkLzAvQzZGMEVBM0Y0
OTg5NjVDNzM2MUI1RUJDMkU4OTE2MzBBRDJGMzlCQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNkYwRUEzRjQ5ODk2NUM3MzYxQjVFQkMyRTg5MTYzMEFEMkYz
OUJBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h
MmFkLWQxNzU0MzY1YTQ1ZC8wLzMxMzAzMzJlMzEzMDM2MmUzMjMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnatgwDQYJ
KoZIhvcNAQELBQADggEBADbop9r6wWLpcSDnZGxs282trDhScixEWspx/4lC+Ib2
lWauwAfdANaast3F+ECAwEWYJb51qUeWkhA2ebb3wdxetXRNpHbaFg/vHBEltmEC
vAmCNRBzZu+W1g1/ok8YBAusLnjDTDmFlIfGuYoXkfjc96+dpeEnJ3+pkbIaKQWN
tFWJqLNKG9qn2XT3yYq/4XG3dnX2BSwbfjAvXc+rvWToQE0iptCRUkOAfF9Ab1M+
HFetHnflSbI9RCN608B13ZU7sVO5gy/5j82iCbghFrQMMFhwRsGFLxAqALHfqPOv
PnjKpv3GGpjVXc2cz5/4to+jS/lrcbj9xPHcI401NFU=
-----END CERTIFICATE-----
Generated at Wed May 13 05:14:56 2026 by rpki-client