Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (raw, json)
Hash identifier:          pBXuYTqReMplN2AY6AolkobEan90DNcRX+8WnFHv1IY=
Subject key identifier:   1E:66:1B:2F:63:5F:AF:F7:9A:35:EE:77:32:CA:18:4A:A0:6F:41:93
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       7C9A701922E03EC9E05F0FF259AA0B8106E303A4
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa
Signing time:             Sun 03 May 2026 02:21:05 +0000
ROA not before:           Sun 03 May 2026 02:16:05 +0000
ROA not after:            Sun 02 May 2027 02:21:05 +0000
asID:                     24312
IP address blocks:        103.118.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 19:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9a:70:19:22:e0:3e:c9:e0:5f:0f:f2:59:aa:0b:81:06:e3:03:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: May  3 02:16:05 2026 GMT
            Not After : May  2 02:21:05 2027 GMT
        Subject: CN=1E661B2F635FAFF79A35EE7732CA184AA06F4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:27:ca:70:27:fc:04:91:fe:55:52:b0:1f:
                    60:e1:15:00:a7:65:18:f1:5a:02:ce:9a:41:6b:e9:
                    7c:96:ba:84:3b:1a:d3:c7:30:a5:0f:12:44:46:ed:
                    8b:dd:ec:51:b6:3d:f7:bd:8b:ec:61:6f:ba:3b:70:
                    4d:c1:12:e0:34:98:58:0d:4f:97:cd:af:e2:a3:1a:
                    56:b6:7e:23:6a:83:9d:74:ca:5c:a8:38:d3:48:97:
                    27:49:14:68:7d:86:4a:fb:7d:0a:2b:10:5c:55:07:
                    90:c9:4c:e4:7b:19:9f:eb:ba:e8:bd:3a:f2:13:3a:
                    fc:5e:2e:df:f8:d1:57:67:ea:ff:b1:0d:cc:e8:75:
                    fe:66:47:46:ce:63:43:56:51:03:13:df:a7:58:a7:
                    8b:dc:4a:1f:4e:df:0d:4b:3d:c1:ce:69:19:df:26:
                    fd:48:c8:c7:15:f6:47:95:6e:5c:36:8c:fe:f8:26:
                    ce:59:a4:2c:ee:4f:02:47:9e:e8:9f:f1:c3:b5:20:
                    6d:74:20:b2:15:cc:b6:51:65:b0:58:54:02:9d:2d:
                    3a:19:03:17:84:6d:69:c9:71:09:4c:79:17:9e:68:
                    96:c9:3c:4a:69:2f:90:7e:30:73:76:ce:89:52:c0:
                    af:92:f1:e7:49:20:2d:af:18:a5:7c:2e:fc:98:7c:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:66:1B:2F:63:5F:AF:F7:9A:35:EE:77:32:CA:18:4A:A0:6F:41:93
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:0b:39:3a:bc:d6:f7:f1:db:06:e6:56:6b:c6:ce:23:8f:
         99:85:35:77:7d:ef:62:05:ef:49:ac:06:c8:cb:e8:23:70:44:
         9c:99:c6:24:6f:db:ce:8e:8c:26:22:b2:50:72:b2:22:3e:69:
         d2:8c:74:5d:88:b3:d8:ca:84:68:ac:d6:a3:87:26:d6:b2:20:
         b6:c3:c4:87:0b:14:0a:5f:a4:4c:a1:ab:ee:8b:ea:1f:90:fe:
         51:c9:4a:d2:27:f8:1c:f5:6f:68:ae:90:36:6a:76:72:b8:bf:
         18:f2:c8:c9:0d:fd:f2:b9:b0:98:11:b1:f8:e6:c9:97:a0:91:
         9a:54:ca:6c:f5:5c:76:19:99:10:e8:df:3f:cb:df:09:91:ca:
         4e:a8:e3:9c:a6:2b:7d:0f:91:b0:b6:71:b3:da:be:67:58:43:
         2f:8c:5a:5c:3d:c7:02:cd:86:28:30:01:31:e9:59:6f:38:d6:
         8b:af:02:9c:df:9d:3d:50:c8:ad:86:c2:58:08:9b:64:d2:b7:
         c5:84:74:30:22:3e:99:01:58:16:6c:21:10:12:32:3f:57:9b:
         dc:ae:e8:ba:9d:04:3a:f7:ad:c3:12:09:47:90:66:d0:b8:36:
         d8:06:f0:53:9a:03:38:77:1c:f7:ca:56:d5:04:5c:0c:96:5b:
         a1:bc:c0:2e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfJpwGSLgPsngXw/yWaoLgQbjA6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1QURFOTVDRDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJG
Q0E2Q0NDMjAeFw0yNjA1MDMwMjE2MDVaFw0yNzA1MDIwMjIxMDVaMDMxMTAvBgNV
BAMTKDFFNjYxQjJGNjM1RkFGRjc5QTM1RUU3NzMyQ0ExODRBQTA2RjQxOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14yfKcCf8BJH+VVKwH2DhFQCn
ZRjxWgLOmkFr6XyWuoQ7GtPHMKUPEkRG7Yvd7FG2Pfe9i+xhb7o7cE3BEuA0mFgN
T5fNr+KjGla2fiNqg510ylyoONNIlydJFGh9hkr7fQorEFxVB5DJTOR7GZ/ruui9
OvITOvxeLt/40Vdn6v+xDczodf5mR0bOY0NWUQMT36dYp4vcSh9O3w1LPcHOaRnf
Jv1IyMcV9keVblw2jP74Js5ZpCzuTwJHnuif8cO1IG10ILIVzLZRZbBYVAKdLToZ
AxeEbWnJcQlMeReeaJbJPEppL5B+MHN2zolSwK+S8edJIC2vGKV8LvyYfG2JAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUHmYbL2Nfr/eaNe53MsoYSqBvQZMwHwYDVR0j
BBgwFoAUWVrelc05cSZFN5NMekBh4vymzMIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjdkOWQ3Y2ItNmNmYi00ZGUwLTlkYWEtZDIyMmI3YTg5MDcyLzAvNTk1QURFOTVD
RDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJGQ0E2Q0NDMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OTVBREU5NUNEMzk3MTI2NDUzNzkzNEM3QTQwNjFFMkZDQTZD
Q0MyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05
ZGFhLWQyMjJiN2E4OTA3Mi8wLzMxMzAzMzJlMzEzMTM4MmUzMTM3MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3avMA0GCSqG
SIb3DQEBCwUAA4IBAQBpxgs5OrzW9/HbBuZWa8bOI4+ZhTV3fe9iBe9JrAbIy+gj
cEScmcYkb9vOjowmIrJQcrIiPmnSjHRdiLPYyoRorNajhybWsiC2w8SHCxQKX6RM
oavui+ofkP5RyUrSJ/gc9W9orpA2anZyuL8Y8sjJDf3yubCYEbH45smXoJGaVMps
9Vx2GZkQ6N8/y98JkcpOqOOcpit9D5GwtnGz2r5nWEMvjFpcPccCzYYoMAEx6Vlv
ONaLrwKc3509UMithsJYCJtk0rfFhHQwIj6ZAVgWbCEQEjI/V5vcrui6nQQ6963D
EglHkGbQuDbYBvBTmgM4dxz3ylbVBFwMlluhvMAu
-----END CERTIFICATE-----
Generated at Thu May 7 04:13:40 2026 by rpki-client