Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa
File:                     3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (raw, json)
Hash identifier:          ibsq14pTeQS2Mg9IUw2PKfJ3Jza0sBMhcbU4/kSfoSc=
Subject key identifier:   3D:26:3B:48:F5:6A:EA:64:C8:37:19:B0:6E:36:BC:12:BA:1C:63:3D
Certificate issuer:       /CN=C717817244AB088EAD0E4D76165AD606C58B6BDE
Certificate serial:       30B4AB43854506F72250FB9EEDD3B9707CC0D091
Authority key identifier: C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa
Signing time:             Sun 03 May 2026 02:11:19 +0000
ROA not before:           Sun 03 May 2026 02:06:19 +0000
ROA not after:            Sun 02 May 2027 02:11:19 +0000
asID:                     149933
IP address blocks:        103.191.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl
                          rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b4:ab:43:85:45:06:f7:22:50:fb:9e:ed:d3:b9:70:7c:c0:d0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C717817244AB088EAD0E4D76165AD606C58B6BDE
        Validity
            Not Before: May  3 02:06:19 2026 GMT
            Not After : May  2 02:11:19 2027 GMT
        Subject: CN=3D263B48F56AEA64C83719B06E36BC12BA1C633D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e8:de:a1:b4:47:f8:22:7f:f0:3f:a3:ec:7e:
                    a2:8e:4e:67:64:4c:47:c0:72:33:87:e5:4d:e6:e0:
                    ce:fe:62:e0:ee:78:4a:e7:9e:57:3e:2e:d7:7b:1f:
                    84:18:be:7f:03:32:aa:f4:5c:96:aa:8c:49:b1:2e:
                    e6:32:7c:4d:3b:b3:3e:c3:05:31:ca:12:b2:a1:2b:
                    5b:26:d0:60:44:ee:13:3b:4f:e6:c6:f2:02:e7:55:
                    c9:e7:1e:f0:56:43:d7:5b:db:a3:e0:b1:b1:a9:13:
                    76:a4:de:34:96:40:87:90:71:58:fa:c7:8e:5a:37:
                    1e:23:ee:3e:46:37:22:5c:a7:98:71:ab:4c:e4:f0:
                    78:04:85:95:81:24:77:c3:e4:5a:11:a1:3a:a9:59:
                    27:4e:12:ba:12:4c:50:b5:94:57:9c:40:70:c7:67:
                    c9:ef:7b:8e:65:49:d8:c7:1f:06:59:36:98:9d:74:
                    af:78:3b:14:61:76:45:ae:24:2a:de:2d:eb:ed:47:
                    3e:dc:81:3e:28:a4:b3:bf:f8:c2:aa:6e:d1:31:48:
                    fc:94:38:0e:e6:b1:78:ce:46:3f:b3:7d:7e:b0:80:
                    32:7d:24:40:83:ca:44:fa:9e:8b:b5:2b:9a:07:54:
                    83:1e:53:60:c3:2b:e8:10:f6:d2:57:96:22:bd:d5:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:26:3B:48:F5:6A:EA:64:C8:37:19:B0:6E:36:BC:12:BA:1C:63:3D
            X509v3 Authority Key Identifier:
                keyid:C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:45:1f:61:1c:19:17:dd:f8:0b:20:45:cc:2a:22:8c:6b:cc:
         64:73:81:c8:00:41:07:32:d5:41:76:5b:6e:c8:30:b2:94:fb:
         f3:30:c0:d9:9d:3d:64:42:11:2b:a5:79:89:49:24:f6:7a:41:
         35:ea:8f:a0:a1:1d:5e:af:72:96:ca:0b:a1:e3:96:31:64:8a:
         04:7e:52:68:6e:01:29:17:4a:3b:ec:6e:38:d7:c0:47:cb:a9:
         03:be:76:c3:b2:2f:39:b4:76:cb:76:a3:4c:66:ad:e5:d0:6a:
         fa:ab:88:6f:4f:41:35:e9:06:de:e2:ab:4f:42:35:7d:2b:5e:
         fd:f6:e0:ea:69:a3:86:5c:4f:d1:56:16:a3:cd:a9:06:4d:71:
         93:5a:cb:ff:3a:cc:ca:da:4d:dd:03:fe:3e:d2:d2:cd:dc:d9:
         0a:8b:ea:e4:90:90:3f:34:15:6d:57:35:6f:0b:78:ec:c2:77:
         6c:8f:f2:b9:08:a1:1a:3b:1e:66:81:82:50:a4:0b:9b:d3:f5:
         1e:51:af:19:eb:b5:cd:63:ca:5e:53:7d:08:cd:48:b4:19:a8:
         a1:1b:64:b8:63:65:7d:86:b2:51:82:86:c0:41:2c:da:cf:7d:
         e2:c4:a7:bc:d1:d2:fd:99:91:a9:7e:01:58:94:57:34:d2:54:
         78:d6:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:44 2026 by rpki-client