Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa
File:                     3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (raw, json)
Hash identifier:          ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=
Subject key identifier:   AD:5C:5C:C0:65:C1:63:A8:C3:81:A5:C3:6F:3A:8C:E2:9C:01:C1:FC
Certificate issuer:       /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E
Certificate serial:       2559567D5B9451A747E922ACE4D3DFC698FE9198
Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa
Signing time:             Sun 03 May 2026 02:10:32 +0000
ROA not before:           Sun 03 May 2026 02:05:32 +0000
ROA not after:            Sun 02 May 2027 02:10:32 +0000
asID:                     142327
IP address blocks:        103.168.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl
                          rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:59:56:7d:5b:94:51:a7:47:e9:22:ac:e4:d3:df:c6:98:fe:91:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E
        Validity
            Not Before: May  3 02:05:32 2026 GMT
            Not After : May  2 02:10:32 2027 GMT
        Subject: CN=AD5C5CC065C163A8C381A5C36F3A8CE29C01C1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:dd:62:78:76:0f:7f:ce:af:aa:9b:3b:4f:
                    2d:dd:62:b4:d3:ef:5c:cb:31:09:b4:97:63:34:32:
                    16:20:95:21:65:6a:e7:2c:07:e3:6b:f5:f5:b9:ff:
                    54:cc:a0:50:69:10:4d:4b:80:11:b6:c8:cd:ac:61:
                    27:e3:57:be:95:62:0a:9d:fd:3e:46:b9:89:cc:5d:
                    90:96:ea:c0:d9:b3:ea:ce:52:70:21:13:73:29:0d:
                    2e:70:11:15:6a:f2:3e:78:8c:b3:19:c5:e4:4d:3a:
                    13:fd:0e:c6:a8:52:be:a8:d1:4f:4c:46:b2:fb:47:
                    15:f1:45:17:03:83:c4:6a:a8:14:19:1f:01:10:1e:
                    78:0e:58:6e:5c:0e:c9:c8:2d:03:36:d8:de:20:f5:
                    8c:fe:a8:be:72:e9:20:e5:d5:ea:27:12:eb:a4:b5:
                    c3:d2:c9:51:8d:b6:e5:e0:00:25:4f:a1:74:b2:50:
                    ed:e4:50:9d:9e:23:53:87:f6:73:24:b5:9f:6b:0f:
                    6d:17:54:1c:60:f6:12:53:08:c8:88:14:b8:fd:20:
                    b3:22:e9:08:2f:6e:ed:47:82:08:f0:96:8c:9d:f8:
                    fe:9c:b5:60:23:c8:0f:1e:c2:77:10:6a:25:15:50:
                    e6:85:cd:b0:fe:46:2e:0a:ce:d8:24:d5:33:da:97:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5C:5C:C0:65:C1:63:A8:C3:81:A5:C3:6F:3A:8C:E2:9C:01:C1:FC
            X509v3 Authority Key Identifier:
                keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:38:56:c2:1c:bd:6b:ae:e2:50:d1:40:ff:c9:77:7f:69:34:
         49:ae:e4:5d:c0:e6:b9:ad:40:0b:51:0d:33:95:fe:9c:67:65:
         4c:61:dc:b8:19:a5:44:44:85:df:9a:5a:8b:27:83:89:ab:38:
         6d:4f:51:d6:5d:ca:07:0b:c6:9a:f3:7b:fc:c2:5e:6d:cb:88:
         ab:93:b5:56:07:58:df:01:d8:01:37:78:85:82:ce:e7:5c:92:
         02:1a:cf:b3:5b:2f:47:41:de:bd:68:41:7a:a1:10:42:a3:1f:
         3b:b2:ac:fd:79:5f:59:51:07:c6:c4:bc:b3:35:56:f8:e7:6f:
         ed:da:63:3f:d7:6a:7c:84:c7:81:7a:05:9d:9b:5c:a6:27:29:
         3e:47:69:fa:39:a6:ab:95:8f:59:a7:0f:21:f5:a0:19:66:93:
         2a:89:b1:18:28:58:88:84:84:b1:b7:12:af:84:b9:79:f5:af:
         3a:71:37:df:6a:0c:d7:4c:93:c0:c9:4a:1a:47:99:1b:2a:e7:
         df:31:fd:f6:85:0f:4d:c7:2c:ca:75:5b:9f:e0:62:87:09:ea:
         e0:86:fb:26:00:34:b8:ef:e3:ad:f5:b1:35:d8:a6:c2:69:e1:
         8d:22:07:a0:5b:0c:8e:09:50:97:4a:78:45:50:5c:3d:d3:1f:
         2f:f3:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:06 2026 by rpki-client