Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa
File:                     3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (raw, json)
Hash identifier:          fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=
Subject key identifier:   6C:33:16:C9:B4:D0:4D:52:EF:59:8C:93:AB:D6:81:1C:63:0B:8B:FD
Certificate issuer:       /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
Certificate serial:       3F14F57B7841BC64E69C7619D3851E66FF9BD2FE
Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa
Signing time:             Sun 03 May 2026 02:37:14 +0000
ROA not before:           Sun 03 May 2026 02:32:14 +0000
ROA not after:            Sun 02 May 2027 02:37:14 +0000
asID:                     136865
IP address blocks:        103.102.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl
                          rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 11:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:14:f5:7b:78:41:bc:64:e6:9c:76:19:d3:85:1e:66:ff:9b:d2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
        Validity
            Not Before: May  3 02:32:14 2026 GMT
            Not After : May  2 02:37:14 2027 GMT
        Subject: CN=6C3316C9B4D04D52EF598C93ABD6811C630B8BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:95:96:d8:95:d1:ef:92:5c:ae:97:84:0e:
                    90:4e:59:d1:46:fc:0f:ae:ba:c0:65:8e:38:db:bf:
                    71:e1:9c:0e:14:ca:6b:f5:48:63:43:a3:71:da:87:
                    60:f5:f8:4c:f1:7f:43:62:35:dd:9f:b6:12:8c:87:
                    ab:1e:9b:24:42:2a:a3:44:11:4f:3d:d2:7c:96:43:
                    be:3c:54:9d:92:86:e0:bc:d0:0b:28:35:a3:71:0f:
                    c7:6a:bf:3c:95:70:c3:80:83:fc:51:36:13:cf:28:
                    a1:f4:0d:65:69:a9:97:1a:79:34:95:4f:de:86:04:
                    50:45:67:9e:6b:c8:6e:aa:78:a5:19:33:30:f5:7a:
                    a1:b7:95:4c:ff:ee:6f:af:ba:55:aa:e9:15:25:f4:
                    05:f4:c7:ce:1d:ae:56:4f:81:54:56:84:a3:55:01:
                    5d:f0:ad:5c:a1:a0:13:c9:ee:5b:be:4a:8b:20:49:
                    e4:28:45:e5:61:cf:01:dc:18:5f:a2:28:b1:b8:3c:
                    6f:ab:3e:d3:d6:df:23:10:35:66:e1:60:6d:25:b6:
                    44:d5:fd:66:99:85:7c:34:94:e7:d0:3c:59:c3:66:
                    0d:cf:5d:4f:f5:50:e8:7b:39:34:47:a2:12:a5:a9:
                    13:fe:18:37:97:a5:2c:32:4a:39:7d:2b:63:37:f4:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:16:C9:B4:D0:4D:52:EF:59:8C:93:AB:D6:81:1C:63:0B:8B:FD
            X509v3 Authority Key Identifier:
                keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:98:6a:7d:b0:43:de:84:db:ee:af:0d:45:54:46:52:37:5c:
         97:80:dd:a5:61:db:ed:6b:d0:9b:30:79:34:00:ea:1d:96:d1:
         23:e2:fc:cf:7a:5f:b6:5a:99:00:80:15:ad:28:5f:a5:9d:6c:
         a1:a5:1b:35:51:d1:e7:b6:19:26:54:90:1d:6b:78:dd:0a:09:
         23:c9:58:5f:5e:1d:30:a2:81:81:47:0c:04:2f:8e:bd:2d:4a:
         64:f8:10:be:4d:f2:46:01:cc:a4:a1:06:d4:89:be:9d:5e:66:
         9c:6e:3b:54:3b:62:91:49:71:2d:e8:7a:c5:15:0e:af:a4:13:
         f4:9e:a9:ba:94:14:a6:0a:8c:f7:0b:1a:44:be:9b:32:74:53:
         c5:21:ee:7a:6d:9c:12:1a:c6:9c:08:5d:e5:e2:5d:c1:22:15:
         bb:4e:c6:5b:76:d7:c9:cd:a3:e5:51:e1:ea:b4:1b:07:c6:29:
         e8:59:2a:a9:c8:80:f0:06:ba:c5:fd:4e:0a:1b:12:2d:c4:b2:
         8b:20:6c:78:fb:9c:cd:45:93:ce:a5:51:e0:d4:76:6b:35:68:
         0a:51:ec:55:f7:1c:52:07:ce:c9:d6:32:2a:4a:fc:d6:fe:60:
         bf:42:63:9f:80:0c:7a:9e:50:64:7d:7f:ff:61:c5:43:81:0a:
         e0:d6:81:e9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPxT1e3hBvGTmnHYZ04UeZv+b0v4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2
QzQ5QzdGNjAeFw0yNjA1MDMwMjMyMTRaFw0yNzA1MDIwMjM3MTRaMDMxMTAvBgNV
BAMTKDZDMzMxNkM5QjREMDRENTJFRjU5OEM5M0FCRDY4MTFDNjMwQjhCRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFpWW2JXR75JcrpeEDpBOWdFG
/A+uusBljjjbv3HhnA4Uymv1SGNDo3Hah2D1+Ezxf0NiNd2fthKMh6semyRCKqNE
EU890nyWQ748VJ2ShuC80AsoNaNxD8dqvzyVcMOAg/xRNhPPKKH0DWVpqZcaeTSV
T96GBFBFZ55ryG6qeKUZMzD1eqG3lUz/7m+vulWq6RUl9AX0x84drlZPgVRWhKNV
AV3wrVyhoBPJ7lu+SosgSeQoReVhzwHcGF+iKLG4PG+rPtPW3yMQNWbhYG0ltkTV
/WaZhXw0lOfQPFnDZg3PXU/1UOh7OTRHohKlqRP+GDeXpSwySjl9K2M39JEPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbDMWybTQTVLvWYyTq9aBHGMLi/0wHwYDVR0j
BBgwFoAUhBItpbFGl51arhMSnrZ3uWxJx/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWY4NmIxMmUtZTU3NC00MjZiLWFhNmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVC
MTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2QzQ5QzdGNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NDEyMkRBNUIxNDY5NzlENUFBRTEzMTI5RUI2NzdCOTZDNDlD
N0Y2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmODZiMTJlLWU1NzQtNDI2Yi1h
YTZiLTQ5MzllM2IwMzBiYS8wLzMxMzAzMzJlMzEzMDMyMmUzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2YOMA0GCSqG
SIb3DQEBCwUAA4IBAQDKmGp9sEPehNvurw1FVEZSN1yXgN2lYdvta9CbMHk0AOod
ltEj4vzPel+2WpkAgBWtKF+lnWyhpRs1UdHnthkmVJAda3jdCgkjyVhfXh0wooGB
RwwEL469LUpk+BC+TfJGAcykoQbUib6dXmacbjtUO2KRSXEt6HrFFQ6vpBP0nqm6
lBSmCoz3CxpEvpsydFPFIe56bZwSGsacCF3l4l3BIhW7TsZbdtfJzaPlUeHqtBsH
xinoWSqpyIDwBrrF/U4KGxItxLKLIGx4+5zNRZPOpVHg1HZrNWgKUexV9xxSB87J
1jIqSvzW/mC/QmOfgAx6nlBkfX//YcVDgQrg1oHp
-----END CERTIFICATE-----
Generated at Tue May 5 19:06:09 2026 by rpki-client