Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa
File:                     3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (raw, json)
Hash identifier:          F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=
Subject key identifier:   85:A3:6A:E9:A6:41:DF:CB:83:70:1B:68:11:96:CC:F1:8D:E6:8F:99
Certificate issuer:       /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A
Certificate serial:       76E97F040F2E7B89B07C2C425B178444AEA5C26E
Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa
Signing time:             Sun 03 May 2026 03:14:32 +0000
ROA not before:           Sun 03 May 2026 03:09:32 +0000
ROA not after:            Sun 02 May 2027 03:14:32 +0000
asID:                     58824
IP address blocks:        103.242.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl
                          rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e9:7f:04:0f:2e:7b:89:b0:7c:2c:42:5b:17:84:44:ae:a5:c2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A
        Validity
            Not Before: May  3 03:09:32 2026 GMT
            Not After : May  2 03:14:32 2027 GMT
        Subject: CN=85A36AE9A641DFCB83701B681196CCF18DE68F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d7:13:52:46:c7:5d:be:7f:82:eb:17:86:37:
                    96:53:25:5f:d3:ca:31:64:c0:f9:46:da:3d:4e:de:
                    32:f4:07:8c:c5:52:25:0c:8b:a4:c9:89:5c:13:bb:
                    72:b8:7c:83:72:24:de:f5:54:6f:b8:5b:98:75:68:
                    d0:c9:d5:9c:f4:e7:a8:18:f4:57:28:24:00:98:57:
                    2b:3c:0a:6a:9d:ae:07:b6:f9:2a:ba:79:65:ae:07:
                    fa:39:16:24:b6:6c:6a:01:60:34:2c:44:ef:18:ca:
                    d7:d5:7b:0a:11:f6:f1:0f:70:85:3a:7b:00:08:f2:
                    65:ed:7a:e9:f3:67:35:63:2e:65:d1:7f:d7:1f:65:
                    df:c4:2c:e8:8f:ba:bb:bb:24:f6:a6:e6:f4:57:01:
                    4e:8f:bb:9f:c1:b1:f1:0d:cd:09:90:b5:2a:20:1e:
                    10:75:aa:31:88:1a:9a:6c:66:a9:f8:f9:6e:2f:b7:
                    e9:8a:fe:f9:17:9a:80:3f:34:09:1f:b7:d5:5c:c0:
                    88:fa:d6:75:2f:80:f3:95:f5:d3:29:9d:f2:3c:af:
                    02:3d:1b:c9:64:1d:57:68:bb:49:7f:67:fc:2c:c0:
                    c2:be:d0:ce:a2:75:2f:82:5d:b9:6a:62:e4:a0:e9:
                    b7:42:24:93:0f:cc:90:6a:a8:7a:54:7a:f0:43:c2:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A3:6A:E9:A6:41:DF:CB:83:70:1B:68:11:96:CC:F1:8D:E6:8F:99
            X509v3 Authority Key Identifier:
                keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a8:11:fb:e2:1b:72:28:64:3f:ee:84:3e:7b:36:69:86:94:
         77:08:60:1b:95:51:08:b3:af:1c:c8:97:31:82:52:51:9c:c9:
         ac:0e:99:0c:b7:ab:38:e6:b6:a9:b1:5c:f5:a3:81:ab:e1:35:
         cb:77:bb:ab:33:d3:e1:0e:b3:18:e9:1b:78:35:1a:6b:92:3d:
         2c:88:d5:79:aa:d1:f4:34:85:da:6f:7e:90:8d:49:56:d1:1e:
         11:6f:eb:c3:a3:3b:fb:ec:68:42:9b:32:53:4c:7d:e7:9c:a2:
         45:06:4e:3d:c7:c9:75:69:5e:54:02:66:c8:07:5e:51:1d:9e:
         a6:b9:2c:70:07:21:e1:18:41:a6:83:a6:f3:9d:84:ba:e3:f6:
         d6:29:e4:71:b9:da:98:d2:da:67:aa:46:1f:42:a0:85:14:ba:
         37:bb:64:92:11:08:89:b5:c9:2f:81:a2:9f:0f:4c:8c:bd:a0:
         33:56:6b:4a:fb:1f:4d:c6:72:72:a4:47:a2:08:d8:1c:12:0d:
         d9:24:85:5c:a4:6c:b2:5c:16:f4:ac:c4:a4:d7:ca:65:3c:b1:
         11:d4:0e:2f:70:28:04:d0:15:c3:80:08:a5:90:2b:1e:fa:e0:
         6f:a7:86:be:56:99:8e:07:6e:5d:3f:e3:a7:bf:97:64:2b:d8:
         52:51:70:7b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdul/BA8ue4mwfCxCWxeERK6lwm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG
QThDMEE1QTAeFw0yNjA1MDMwMzA5MzJaFw0yNzA1MDIwMzE0MzJaMDMxMTAvBgNV
BAMTKDg1QTM2QUU5QTY0MURGQ0I4MzcwMUI2ODExOTZDQ0YxOERFNjhGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi1xNSRsddvn+C6xeGN5ZTJV/T
yjFkwPlG2j1O3jL0B4zFUiUMi6TJiVwTu3K4fINyJN71VG+4W5h1aNDJ1Zz056gY
9FcoJACYVys8Cmqdrge2+Sq6eWWuB/o5FiS2bGoBYDQsRO8YytfVewoR9vEPcIU6
ewAI8mXteunzZzVjLmXRf9cfZd/ELOiPuru7JPam5vRXAU6Pu5/BsfENzQmQtSog
HhB1qjGIGppsZqn4+W4vt+mK/vkXmoA/NAkft9VcwIj61nUvgPOV9dMpnfI8rwI9
G8lkHVdou0l/Z/wswMK+0M6idS+CXblqYuSg6bdCJJMPzJBqqHpUevBDwg7nAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUhaNq6aZB38uDcBtoEZbM8Y3mj5kwHwYDVR0j
BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG
OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw
QTVBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U3ZTBmYWYwLTc4OGQtNDk1Yi1h
Yzk4LWYzNTE2MTk1ZGI2MC8wLzMxMzAzMzJlMzIzNDMyMmUzMjMzMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzgzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/LpMA0GCSqG
SIb3DQEBCwUAA4IBAQBsqBH74htyKGQ/7oQ+ezZphpR3CGAblVEIs68cyJcxglJR
nMmsDpkMt6s45rapsVz1o4Gr4TXLd7urM9PhDrMY6Rt4NRprkj0siNV5qtH0NIXa
b36QjUlW0R4Rb+vDozv77GhCmzJTTH3nnKJFBk49x8l1aV5UAmbIB15RHZ6muSxw
ByHhGEGmg6bznYS64/bWKeRxudqY0tpnqkYfQqCFFLo3u2SSEQiJtckvgaKfD0yM
vaAzVmtK+x9NxnJypEeiCNgcEg3ZJIVcpGyyXBb0rMSk18plPLER1A4vcCgE0BXD
gAilkCse+uBvp4a+VpmOB25dP+Onv5dkK9hSUXB7
-----END CERTIFICATE-----
Generated at Wed May 13 17:00:16 2026 by rpki-client