Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203634333030.roa
File:                     3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (raw, json)
Hash identifier:          k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=
Subject key identifier:   8C:9A:D4:EE:9E:5E:0D:F3:BC:91:AE:5E:F9:A1:5B:9E:1F:14:7D:4C
Certificate issuer:       /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial:       051F625BF004CA3442AA31F70B980EF5C278DD37
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203634333030.roa
Signing time:             Sun 03 May 2026 02:42:19 +0000
ROA not before:           Sun 03 May 2026 02:37:19 +0000
ROA not after:            Sun 02 May 2027 02:42:19 +0000
asID:                     64300
IP address blocks:        103.13.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
                          rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1f:62:5b:f0:04:ca:34:42:aa:31:f7:0b:98:0e:f5:c2:78:dd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
        Validity
            Not Before: May  3 02:37:19 2026 GMT
            Not After : May  2 02:42:19 2027 GMT
        Subject: CN=8C9AD4EE9E5E0DF3BC91AE5EF9A15B9E1F147D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:2b:f7:68:69:f8:7a:ab:70:17:fe:0c:79:
                    35:27:8f:8d:86:36:99:1b:71:e4:04:90:4d:4d:68:
                    e1:7b:1a:cb:71:2f:f1:ba:62:39:7c:c0:d1:9f:d4:
                    91:47:a3:ae:3a:3c:9b:dd:2c:ce:16:09:ac:a0:99:
                    76:4d:4f:04:bb:87:fb:63:f2:c8:76:2d:e6:51:f7:
                    9d:92:8a:ae:25:a1:7f:32:a3:a3:87:13:be:50:84:
                    bd:83:2b:89:cc:9c:15:0d:7e:5c:a0:8d:bb:f3:08:
                    6f:1c:c4:07:56:73:3c:25:6a:dc:a7:ba:7b:a6:58:
                    cc:f6:17:34:f6:16:21:f7:b4:48:ca:ad:72:5e:f1:
                    01:b2:a8:7e:f9:d7:e5:23:c9:7c:4f:ec:01:a0:e2:
                    32:fe:00:b2:98:3d:0b:d9:25:e8:f9:0b:82:5f:bb:
                    48:83:9c:42:f0:e8:56:a9:ff:af:2c:19:79:6e:ea:
                    09:9f:f5:8f:c2:66:6a:bb:d5:b7:27:36:6b:46:a3:
                    26:0a:12:bf:49:15:fb:b4:fa:e7:0d:69:c2:c0:86:
                    d1:6a:ee:8d:82:14:8f:6f:7b:45:a8:0a:b4:7c:91:
                    d3:2f:60:f8:70:c6:1e:e4:4b:e4:94:a1:66:a0:f3:
                    7c:f8:0f:0a:be:54:2b:79:64:28:6d:90:5b:b3:76:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9A:D4:EE:9E:5E:0D:F3:BC:91:AE:5E:F9:A1:5B:9E:1F:14:7D:4C
            X509v3 Authority Key Identifier:
                keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:86:ff:20:ed:94:e4:c4:c8:b1:3f:cc:c2:24:4d:47:17:
         24:2b:38:b3:cf:75:a5:ff:7c:e7:4b:39:5c:ad:5a:a3:4b:be:
         77:d3:26:46:c1:2c:62:cb:f2:82:75:d4:39:9e:5f:af:b7:91:
         c9:6f:c0:56:5c:bd:67:b9:8d:b3:12:52:b5:71:5a:a4:60:7f:
         e8:d3:9e:ff:18:e8:80:b2:93:49:07:ba:50:ff:4f:dc:85:00:
         f4:f5:4e:ea:d5:af:56:9a:4d:8e:f8:ae:12:99:a2:2f:05:c9:
         0e:73:65:e7:f3:0b:23:f6:81:b8:a4:d2:8e:fd:96:a6:aa:d4:
         2f:62:e0:8a:e9:49:46:bd:0c:05:d2:3b:2a:c4:28:af:1a:14:
         c4:14:52:85:ab:d2:31:43:8b:65:50:e9:58:e3:6f:1e:09:3c:
         a4:98:eb:ff:42:0a:8e:1a:70:bc:a6:c7:a6:5d:c2:ed:13:0f:
         41:e9:10:32:e6:a7:1e:b1:60:ec:06:86:0d:ef:81:4b:63:f1:
         14:36:c5:84:18:7d:18:bf:24:e7:e0:98:97:8c:1c:f6:7d:9f:
         a3:89:1a:98:fa:a0:af:36:7c:d5:a3:9d:e6:e7:d4:d9:f4:17:
         26:1d:41:b1:36:a7:e5:40:03:2e:d3:ef:c3:f3:68:99:1c:56:
         c4:de:11:9d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBR9iW/AEyjRCqjH3C5gO9cJ43TcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEyMzRFQjE5NUUxOTc4MzBBRjc1QTZFQ0I2RDU4M0RG
RjRBQjlCOTAeFw0yNjA1MDMwMjM3MTlaFw0yNzA1MDIwMjQyMTlaMDMxMTAvBgNV
BAMTKDhDOUFENEVFOUU1RTBERjNCQzkxQUU1RUY5QTE1QjlFMUYxNDdENEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Uyv3aGn4eqtwF/4MeTUnj42G
NpkbceQEkE1NaOF7GstxL/G6Yjl8wNGf1JFHo646PJvdLM4WCaygmXZNTwS7h/tj
8sh2LeZR952Siq4loX8yo6OHE75QhL2DK4nMnBUNflygjbvzCG8cxAdWczwlatyn
unumWMz2FzT2FiH3tEjKrXJe8QGyqH751+UjyXxP7AGg4jL+ALKYPQvZJej5C4Jf
u0iDnELw6Fap/68sGXlu6gmf9Y/CZmq71bcnNmtGoyYKEr9JFfu0+ucNacLAhtFq
7o2CFI9ve0WoCrR8kdMvYPhwxh7kS+SUoWag83z4Dwq+VCt5ZChtkFuzdh1PAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjJrU7p5eDfO8ka5e+aFbnh8UfUwwHwYDVR0j
BBgwFoAUkSNOsZXhl4MK91puy21YPf9KubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmZjOTA5NmMtMjhkYy00NGU0LWI0Y2YtOTZkNjMxYjczYWMwLzAvOTEyMzRFQjE5
NUUxOTc4MzBBRjc1QTZFQ0I2RDU4M0RGRjRBQjlCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MTIzNEVCMTk1RTE5NzgzMEFGNzVBNkVDQjZENTgzREZGNEFC
OUI5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmYzkwOTZjLTI4ZGMtNDRlNC1i
NGNmLTk2ZDYzMWI3M2FjMC8wLzMxMzAzMzJlMzEzMzJlMzIzMDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzNDMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcNzDANBgkqhkiG
9w0BAQsFAAOCAQEATVyG/yDtlOTEyLE/zMIkTUcXJCs4s891pf9850s5XK1ao0u+
d9MmRsEsYsvygnXUOZ5fr7eRyW/AVly9Z7mNsxJStXFapGB/6NOe/xjogLKTSQe6
UP9P3IUA9PVO6tWvVppNjviuEpmiLwXJDnNl5/MLI/aBuKTSjv2WpqrUL2LgiulJ
Rr0MBdI7KsQorxoUxBRShavSMUOLZVDpWONvHgk8pJjr/0IKjhpwvKbHpl3C7RMP
QekQMuanHrFg7AaGDe+BS2PxFDbFhBh9GL8k5+CYl4wc9n2fo4kamPqgrzZ81aOd
5ufU2fQXJh1BsTan5UADLtPvw/NomRxWxN4RnQ==
-----END CERTIFICATE-----
Generated at Tue May 5 18:55:56 2026 by rpki-client