Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3130332e32312e38342e302f32322d3234203d3e203435373836.roa
File:                     3130332e32312e38342e302f32322d3234203d3e203435373836.roa (raw, json)
Hash identifier:          UGmub+zvmz38VUHBdFrEohUoj9JI2gk3RmJ2b1SMZ/E=
Subject key identifier:   08:15:05:E0:84:8C:28:09:E1:B8:96:3D:0B:B7:E2:16:5A:2F:17:39
Certificate issuer:       /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Certificate serial:       5473C9B12E458F675483A0343C3390E2792F5446
Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3130332e32312e38342e302f32322d3234203d3e203435373836.roa
Signing time:             Sun 03 May 2026 03:13:27 +0000
ROA not before:           Sun 03 May 2026 03:08:27 +0000
ROA not after:            Sun 02 May 2027 03:13:27 +0000
asID:                     45786
IP address blocks:        103.21.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
                          rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:73:c9:b1:2e:45:8f:67:54:83:a0:34:3c:33:90:e2:79:2f:54:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
        Validity
            Not Before: May  3 03:08:27 2026 GMT
            Not After : May  2 03:13:27 2027 GMT
        Subject: CN=081505E0848C2809E1B8963D0BB7E2165A2F1739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:79:66:48:2b:32:de:8e:7f:54:f5:64:31:
                    79:76:f7:6a:62:4e:86:a3:72:e6:d9:30:27:35:cd:
                    4f:ee:2c:60:4d:76:90:db:ab:06:ac:55:69:6b:d9:
                    07:5d:42:c5:65:1e:a1:59:f1:ec:c2:80:95:29:98:
                    2c:61:b8:50:30:94:e7:c8:2d:7e:96:29:51:6b:b4:
                    bb:86:42:9e:4f:d8:9b:28:ce:24:58:9f:86:af:86:
                    41:6f:4f:2e:1c:73:3f:df:ef:7b:af:8b:bd:12:4b:
                    48:00:0a:89:f3:df:71:2f:2f:01:84:9b:25:2d:16:
                    7b:42:e3:01:72:4d:94:c2:53:30:83:9c:90:60:1a:
                    7c:ba:57:db:73:ae:49:01:e4:77:7a:d6:7b:b5:5e:
                    07:09:64:87:4f:0b:bc:67:d6:03:da:07:62:e4:24:
                    82:1d:25:38:a6:f2:40:1b:6e:2a:7c:d4:8f:e8:d8:
                    05:f4:7a:b3:66:e7:82:b9:49:32:e7:07:e5:97:28:
                    c5:ab:66:0c:c8:93:b8:61:10:68:ef:1f:9c:1a:83:
                    e0:cd:fd:1d:21:90:92:61:01:9e:e1:d3:02:88:6c:
                    30:19:ab:85:be:98:b3:58:51:03:58:29:69:41:67:
                    3a:2a:48:55:5c:df:43:16:20:9c:e5:3d:8b:08:46:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:15:05:E0:84:8C:28:09:E1:B8:96:3D:0B:B7:E2:16:5A:2F:17:39
            X509v3 Authority Key Identifier:
                keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3130332e32312e38342e302f32322d3234203d3e203435373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:04:21:91:c6:22:14:d8:a0:68:c6:fe:34:aa:3a:4f:f5:
         b9:e9:a6:af:5a:b5:e9:4e:4d:72:a5:83:0d:60:8f:b1:cc:ab:
         56:f7:a8:a5:43:d9:5c:5f:d8:5b:53:e1:7f:61:e7:0f:66:f8:
         c6:30:b3:ec:fb:6b:db:ed:6f:17:42:3f:6f:95:54:01:5d:a8:
         e3:d8:cb:3f:47:7f:1c:30:5f:dc:41:fa:b1:ce:da:46:1b:0b:
         9f:4f:29:eb:95:cd:b6:39:a8:ee:19:3c:19:50:a7:7b:5e:43:
         46:1b:ee:95:a2:35:ff:dc:14:87:45:52:4e:76:ed:09:3a:60:
         d3:d7:2d:00:1c:96:4f:52:07:59:75:d1:49:5d:ee:9e:83:34:
         7b:38:23:3a:4a:fa:8d:d9:dd:e0:58:17:fa:45:e1:0a:74:b9:
         2a:4f:35:81:23:0b:60:d7:96:ce:50:f7:86:da:fe:62:72:f8:
         2c:28:ed:e1:68:1c:e5:59:35:d8:54:61:b6:78:ff:73:a8:61:
         e3:be:b8:3c:33:d0:2a:5c:c7:b8:8e:8e:7a:b3:7b:38:ef:d2:
         9c:b0:38:78:cc:cc:01:a5:22:cf:52:1c:fa:15:96:a2:7c:37:
         e1:0f:e4:d7:eb:e7:a7:04:0b:df:60:6f:7f:5c:a0:e9:bb:a6:
         ad:e0:a9:82
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUVHPJsS5Fj2dUg6A0PDOQ4nkvVEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNENUUwNUU1NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3
REY1NTZEODAeFw0yNjA1MDMwMzA4MjdaFw0yNzA1MDIwMzEzMjdaMDMxMTAvBgNV
BAMTKDA4MTUwNUUwODQ4QzI4MDlFMUI4OTYzRDBCQjdFMjE2NUEyRjE3MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC453lmSCsy3o5/VPVkMXl292pi
ToajcubZMCc1zU/uLGBNdpDbqwasVWlr2QddQsVlHqFZ8ezCgJUpmCxhuFAwlOfI
LX6WKVFrtLuGQp5P2JsoziRYn4avhkFvTy4ccz/f73uvi70SS0gAConz33EvLwGE
myUtFntC4wFyTZTCUzCDnJBgGny6V9tzrkkB5Hd61nu1XgcJZIdPC7xn1gPaB2Lk
JIIdJTim8kAbbip81I/o2AX0erNm54K5STLnB+WXKMWrZgzIk7hhEGjvH5wag+DN
/R0hkJJhAZ7h0wKIbDAZq4W+mLNYUQNYKWlBZzoqSFVc30MWIJzlPYsIRn4bAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUCBUF4ISMKAnhuJY9C7fiFlovFzkwHwYDVR0j
BBgwFoAUvNXgXlcPIoDs7zMXHretyH31VtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTUwZGE0NDctYTEzOC00NjI1LWE0MjAtYTcxMWFjMjQzNTE5LzAvQkNENUUwNUU1
NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3REY1NTZEOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQ0Q1RTA1RTU3MEYyMjgwRUNFRjMzMTcxRUI3QURDODdERjU1
NkQ4LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1MGRhNDQ3LWExMzgtNDYyNS1h
NDIwLWE3MTFhYzI0MzUxOS8wLzMxMzAzMzJlMzIzMTJlMzgzNDJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM0MzUzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnFVQwDQYJKoZIhvcN
AQELBQADggEBABZ8BCGRxiIU2KBoxv40qjpP9bnppq9atelOTXKlgw1gj7HMq1b3
qKVD2Vxf2FtT4X9h5w9m+MYws+z7a9vtbxdCP2+VVAFdqOPYyz9HfxwwX9xB+rHO
2kYbC59PKeuVzbY5qO4ZPBlQp3teQ0Yb7pWiNf/cFIdFUk527Qk6YNPXLQAclk9S
B1l10Uld7p6DNHs4IzpK+o3Z3eBYF/pF4Qp0uSpPNYEjC2DXls5Q94ba/mJy+Cwo
7eFoHOVZNdhUYbZ4/3OoYeO+uDwz0Cpcx7iOjnqzezjv0pywOHjMzAGlIs9SHPoV
lqJ8N+EP5Nfr56cEC99gb39coOm7pq3gqYI=
-----END CERTIFICATE-----
Generated at Wed May 13 10:00:52 2026 by rpki-client