Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa
File:                     3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (raw, json)
Hash identifier:          jCqON8Yk3P3gMbZcKuKALDn9F/zcK2FOZiJKlSNeDJ8=
Subject key identifier:   F6:D1:52:74:E5:BC:F0:1C:75:F8:13:59:E4:00:1E:81:3A:32:4F:6F
Certificate issuer:       /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
Certificate serial:       12B97A13E550D301B23383B2DD36D622B8F145F0
Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa
Signing time:             Sun 03 May 2026 02:28:50 +0000
ROA not before:           Sun 03 May 2026 02:23:50 +0000
ROA not after:            Sun 02 May 2027 02:28:50 +0000
asID:                     139989
IP address blocks:        103.148.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl
                          rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 20:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b9:7a:13:e5:50:d3:01:b2:33:83:b2:dd:36:d6:22:b8:f1:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
        Validity
            Not Before: May  3 02:23:50 2026 GMT
            Not After : May  2 02:28:50 2027 GMT
        Subject: CN=F6D15274E5BCF01C75F81359E4001E813A324F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:13:fe:5c:b3:c9:a3:d0:85:56:5c:df:95:
                    7d:45:d4:e3:36:e0:db:06:e8:45:2d:28:b7:ec:e7:
                    90:46:21:9a:d7:8a:74:89:38:3d:6b:d6:2e:e6:2d:
                    23:9d:64:ed:5f:22:94:94:0a:34:5d:0b:92:4f:92:
                    ac:a7:bb:fa:b2:00:15:85:3a:a1:0c:d4:e6:40:18:
                    4c:d2:c2:16:37:6b:85:c1:5d:6c:dc:2c:fb:e0:5b:
                    ca:c4:13:0d:04:a2:59:08:2e:22:e3:3b:2f:70:cc:
                    77:9f:7e:51:55:66:ec:09:04:68:94:f3:be:23:7e:
                    77:28:ed:bf:a7:bf:53:08:dc:56:6c:94:f2:22:c3:
                    36:e4:5c:73:fa:4e:09:4e:fa:71:2a:c9:54:6b:1f:
                    d5:55:c5:8e:b6:f0:5a:00:a6:7e:09:61:56:7b:87:
                    2f:5b:05:81:28:2b:48:56:70:11:f1:6d:87:06:bb:
                    59:ac:14:7e:29:8d:a2:f4:84:37:7e:5a:a8:43:32:
                    f4:61:9b:83:21:86:78:9c:62:ba:b4:88:74:89:e5:
                    4c:43:65:e6:52:45:58:72:db:d8:da:4a:28:a3:6b:
                    37:6b:a4:fd:95:5d:c9:59:2f:33:82:8d:a2:dc:2f:
                    23:45:3c:fa:3e:ff:7c:d1:bb:86:32:62:06:78:b5:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D1:52:74:E5:BC:F0:1C:75:F8:13:59:E4:00:1E:81:3A:32:4F:6F
            X509v3 Authority Key Identifier:
                keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:40:5d:65:3a:62:f1:bc:4d:e9:d6:8c:0f:a9:db:f9:db:
         59:ae:0f:9f:0b:90:83:8c:2e:d9:ae:1f:91:1c:1b:f7:a8:1b:
         47:92:f4:d5:91:29:8e:77:a6:06:29:87:67:fd:7c:29:24:62:
         5e:42:b3:bd:d1:b0:b9:c5:63:be:5e:9d:ca:cd:7c:8e:63:45:
         c5:9a:90:f3:67:e1:e8:8d:9c:4f:33:fb:6e:0f:4a:a1:66:71:
         77:30:8c:87:7a:8a:7b:78:6b:22:85:6a:15:1c:41:e1:cc:9f:
         6e:e2:f7:28:b3:b6:4f:49:2a:75:39:8f:2e:77:4d:95:24:2f:
         69:ea:4d:7e:78:6d:4d:a3:37:4d:4f:e3:2f:ce:7b:ad:c9:29:
         2f:59:b6:a9:c3:2a:04:9b:75:96:16:f4:c5:3a:b0:f3:e6:4f:
         62:01:55:92:65:10:79:a9:b4:04:83:29:d3:95:27:1c:9e:7e:
         ff:5e:5d:21:b7:65:c8:c4:a7:3a:a3:aa:8e:f4:e4:7c:35:99:
         04:a9:53:28:01:42:41:5b:ff:aa:c8:09:1b:98:1e:73:14:61:
         bd:d5:c1:ef:6a:15:3d:57:75:73:02:dd:8f:8f:85:50:23:4d:
         e6:4d:5a:7d:9c:34:91:67:18:a9:57:37:7d:ec:1e:d0:e3:20:
         16:4f:54:0a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUErl6E+VQ0wGyM4Oy3TbWIrjxRfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZF
MEZGQTY1NzAeFw0yNjA1MDMwMjIzNTBaFw0yNzA1MDIwMjI4NTBaMDMxMTAvBgNV
BAMTKEY2RDE1Mjc0RTVCQ0YwMUM3NUY4MTM1OUU0MDAxRTgxM0EzMjRGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmhP+XLPJo9CFVlzflX1F1OM2
4NsG6EUtKLfs55BGIZrXinSJOD1r1i7mLSOdZO1fIpSUCjRdC5JPkqynu/qyABWF
OqEM1OZAGEzSwhY3a4XBXWzcLPvgW8rEEw0EolkILiLjOy9wzHefflFVZuwJBGiU
874jfnco7b+nv1MI3FZslPIiwzbkXHP6TglO+nEqyVRrH9VVxY628FoApn4JYVZ7
hy9bBYEoK0hWcBHxbYcGu1msFH4pjaL0hDd+WqhDMvRhm4MhhnicYrq0iHSJ5UxD
ZeZSRVhy29jaSiijazdrpP2VXclZLzOCjaLcLyNFPPo+/3zRu4YyYgZ4tVrhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU9tFSdOW88Bx1+BNZ5AAegToyT28wHwYDVR0j
BBgwFoAUN2BumcWecQfVrPp+jeP83+D/plcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDAzMTc0NmUtYjBmNi00ODI3LThjNGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlD
NTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZFMEZGQTY1Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNzYwNkU5OUM1OUU3MTA3RDVBQ0ZBN0U4REUzRkNERkUwRkZB
NjU3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQwMzE3NDZlLWIwZjYtNDgyNy04
YzRlLWI4MTkyZGVjYzM5YS8wLzMxMzAzMzJlMzEzNDM4MmUzNzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RNMA0GCSqG
SIb3DQEBCwUAA4IBAQBTuEBdZTpi8bxN6daMD6nb+dtZrg+fC5CDjC7Zrh+RHBv3
qBtHkvTVkSmOd6YGKYdn/XwpJGJeQrO90bC5xWO+Xp3KzXyOY0XFmpDzZ+HojZxP
M/tuD0qhZnF3MIyHeop7eGsihWoVHEHhzJ9u4vcos7ZPSSp1OY8ud02VJC9p6k1+
eG1NozdNT+MvznutySkvWbapwyoEm3WWFvTFOrDz5k9iAVWSZRB5qbQEgynTlScc
nn7/Xl0ht2XIxKc6o6qO9OR8NZkEqVMoAUJBW/+qyAkbmB5zFGG91cHvahU9V3Vz
At2Pj4VQI03mTVp9nDSRZxipVzd97B7Q4yAWT1QK
-----END CERTIFICATE-----
Generated at Thu May 7 06:02:40 2026 by rpki-client