Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa
File:                     3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa (raw, json)
Hash identifier:          qsrjfOg3H3aDzmkLZO9jZCtDE/XODcpzBZXo22aVroE=
Subject key identifier:   F1:A7:74:BD:08:C2:15:AF:B7:B3:D2:A2:27:B6:9D:97:DD:C8:C4:66
Certificate issuer:       /CN=69B77CAB9072D68BBE83893A641426388C0EE20B
Certificate serial:       129C5406FE01FA5A16D594D2354EF03D8FA17483
Authority key identifier: 69:B7:7C:AB:90:72:D6:8B:BE:83:89:3A:64:14:26:38:8C:0E:E2:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69B77CAB9072D68BBE83893A641426388C0EE20B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa
Signing time:             Sun 03 May 2026 03:19:35 +0000
ROA not before:           Sun 03 May 2026 03:14:35 +0000
ROA not after:            Sun 02 May 2027 03:19:35 +0000
asID:                     141887
IP address blocks:        103.105.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/69B77CAB9072D68BBE83893A641426388C0EE20B.crl
                          rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/69B77CAB9072D68BBE83893A641426388C0EE20B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69B77CAB9072D68BBE83893A641426388C0EE20B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9c:54:06:fe:01:fa:5a:16:d5:94:d2:35:4e:f0:3d:8f:a1:74:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B77CAB9072D68BBE83893A641426388C0EE20B
        Validity
            Not Before: May  3 03:14:35 2026 GMT
            Not After : May  2 03:19:35 2027 GMT
        Subject: CN=F1A774BD08C215AFB7B3D2A227B69D97DDC8C466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:f7:a9:b2:32:ce:24:2d:f9:b3:b1:22:01:
                    58:fb:e3:27:15:18:9e:24:58:2d:25:40:a2:75:d1:
                    6d:db:4e:ab:8d:98:df:86:2d:52:eb:33:4d:fe:c2:
                    2c:ef:9d:ad:97:10:19:5c:42:47:2c:94:2b:6b:6b:
                    36:09:62:80:04:ae:a3:dd:76:9a:86:cf:8e:02:79:
                    88:c5:b0:0a:68:97:d9:47:7d:fd:9c:7a:26:31:7b:
                    6e:b4:db:cd:fb:f3:d9:ec:f2:5c:d9:47:bc:27:9e:
                    14:ca:f8:6a:b3:63:53:19:93:32:8c:71:e6:0a:e4:
                    5b:55:e9:bc:a0:58:f9:53:25:48:d7:26:d5:5c:6f:
                    52:d5:d9:d5:a0:06:c3:c4:1c:0d:17:61:ca:b2:56:
                    6d:4b:e6:c9:a3:a3:f6:9e:6c:e5:bb:a2:c0:f6:7f:
                    27:d5:9a:ca:bc:2d:c3:75:db:cb:3b:57:67:33:d7:
                    6d:61:70:49:29:59:87:cf:d4:63:1a:0c:06:2d:41:
                    2e:c1:b1:86:56:66:f3:ff:a7:09:13:b8:02:e2:6f:
                    00:66:26:5d:31:c8:71:1b:31:7c:94:fb:f1:5c:5b:
                    b1:0e:e0:ab:df:fc:da:e6:d1:59:1c:60:1c:f7:b6:
                    39:a1:3e:34:d0:45:bb:1b:18:f3:9c:21:13:1d:a3:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A7:74:BD:08:C2:15:AF:B7:B3:D2:A2:27:B6:9D:97:DD:C8:C4:66
            X509v3 Authority Key Identifier:
                keyid:69:B7:7C:AB:90:72:D6:8B:BE:83:89:3A:64:14:26:38:8C:0E:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/69B77CAB9072D68BBE83893A641426388C0EE20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69B77CAB9072D68BBE83893A641426388C0EE20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:0a:c6:84:e0:6e:1e:c5:1e:42:52:8c:97:8c:97:4a:29:
         31:6a:0c:03:c3:8a:d7:73:ee:e8:7e:26:cb:66:c4:6f:e4:22:
         0c:a9:a6:2f:07:a3:cb:1d:ca:d8:0f:97:9e:77:fd:31:d9:a5:
         de:ae:e6:c3:e1:31:b7:94:3d:48:fb:9f:63:d4:bc:d3:ee:43:
         a8:44:50:d4:7e:36:6e:88:fe:82:a1:bf:7a:eb:5a:de:3d:a7:
         56:04:5e:0f:9e:34:06:49:83:ef:01:69:e0:d9:42:b4:e9:9d:
         28:b6:b2:8e:76:03:cc:d7:16:e0:34:0d:62:4c:cb:df:34:8e:
         54:ef:52:f6:37:0e:16:9f:91:5d:ea:a7:95:88:73:57:c1:fe:
         d2:ac:53:b9:17:5d:48:cf:af:4e:59:fa:60:78:a5:a3:f8:03:
         92:84:a6:77:ad:4a:fc:1d:b6:97:4b:2b:ae:f9:9b:9d:d4:12:
         fe:7c:29:3e:1c:5e:79:44:f7:d1:b3:80:ef:f2:12:27:5a:4f:
         0d:b7:ff:ed:33:88:01:fa:9e:3e:99:6c:3d:24:bf:f8:bb:64:
         6b:54:15:b4:77:7d:46:dd:5d:04:a1:c2:5f:e8:aa:29:81:d8:
         16:2d:3f:f8:fd:95:13:48:92:ed:98:6f:95:7a:29:09:5e:05:
         65:ab:86:7a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUEpxUBv4B+loW1ZTSNU7wPY+hdIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlCNzdDQUI5MDcyRDY4QkJFODM4OTNBNjQxNDI2Mzg4
QzBFRTIwQjAeFw0yNjA1MDMwMzE0MzVaFw0yNzA1MDIwMzE5MzVaMDMxMTAvBgNV
BAMTKEYxQTc3NEJEMDhDMjE1QUZCN0IzRDJBMjI3QjY5RDk3RERDOEM0NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZV/epsjLOJC35s7EiAVj74ycV
GJ4kWC0lQKJ10W3bTquNmN+GLVLrM03+wizvna2XEBlcQkcslCtrazYJYoAErqPd
dpqGz44CeYjFsApol9lHff2ceiYxe260283789ns8lzZR7wnnhTK+GqzY1MZkzKM
ceYK5FtV6bygWPlTJUjXJtVcb1LV2dWgBsPEHA0XYcqyVm1L5smjo/aebOW7osD2
fyfVmsq8LcN128s7V2cz121hcEkpWYfP1GMaDAYtQS7BsYZWZvP/pwkTuALibwBm
Jl0xyHEbMXyU+/FcW7EO4Kvf/Nrm0VkcYBz3tjmhPjTQRbsbGPOcIRMdoxmRAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU8ad0vQjCFa+3s9KiJ7adl93IxGYwHwYDVR0j
BBgwFoAUabd8q5By1ou+g4k6ZBQmOIwO4gswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmU3MTZkZWEtNjUzNi00ZDZlLWI1NGItYmY3ZjczY2Y2Yjk0LzAvNjlCNzdDQUI5
MDcyRDY4QkJFODM4OTNBNjQxNDI2Mzg4QzBFRTIwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OUI3N0NBQjkwNzJENjhCQkU4Mzg5M0E2NDE0MjYzODhDMEVF
MjBCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ZlNzE2ZGVhLTY1MzYtNGQ2ZS1i
NTRiLWJmN2Y3M2NmNmI5NC8wLzMxMzAzMzJlMzEzMDM1MmUzMTMxMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzODM4Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnaXMwDQYJ
KoZIhvcNAQELBQADggEBAEJNCsaE4G4exR5CUoyXjJdKKTFqDAPDitdz7uh+Jstm
xG/kIgyppi8Ho8sdytgPl553/THZpd6u5sPhMbeUPUj7n2PUvNPuQ6hEUNR+Nm6I
/oKhv3rrWt49p1YEXg+eNAZJg+8BaeDZQrTpnSi2so52A8zXFuA0DWJMy980jlTv
UvY3DhafkV3qp5WIc1fB/tKsU7kXXUjPr05Z+mB4paP4A5KEpnetSvwdtpdLK675
m53UEv58KT4cXnlE99GzgO/yEidaTw23/+0ziAH6nj6ZbD0kv/i7ZGtUFbR3fUbd
XQShwl/oqimB2BYtP/j9lRNIku2Yb5V6KQleBWWrhno=
-----END CERTIFICATE-----
Generated at Wed May 13 04:26:41 2026 by rpki-client