Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
File:                     3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          HU+tP0ePX+yD7/CYpvvWhY8DWw0D5TG8DRzaRiSU/0w=
Subject key identifier:   8B:FA:9A:A4:7D:8E:DA:6B:20:22:E7:C5:3B:EF:CC:1C:63:4D:5D:8A
Certificate issuer:       /CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB
Certificate serial:       7A20CCF7700902F8FA0B5CC9CB338CF18CF13D83
Authority key identifier: 5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
Signing time:             Sun 03 May 2026 02:11:22 +0000
ROA not before:           Sun 03 May 2026 02:06:22 +0000
ROA not after:            Sun 02 May 2027 02:11:22 +0000
asID:                     139449
IP address blocks:        103.179.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl
                          rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:20:cc:f7:70:09:02:f8:fa:0b:5c:c9:cb:33:8c:f1:8c:f1:3d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB
        Validity
            Not Before: May  3 02:06:22 2026 GMT
            Not After : May  2 02:11:22 2027 GMT
        Subject: CN=8BFA9AA47D8EDA6B2022E7C53BEFCC1C634D5D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:a1:0c:15:1c:57:54:7f:28:40:7b:30:78:
                    bc:59:25:af:6e:7e:89:81:85:5f:cc:c8:97:32:76:
                    29:4a:cb:98:bc:73:4e:7f:75:43:83:77:a6:ba:75:
                    05:d5:03:95:bb:5c:1d:6d:1e:b5:e9:31:a7:71:5c:
                    cd:8a:6e:8a:5d:0a:e5:85:2a:c9:c5:cd:88:e7:05:
                    6f:20:cd:b1:d3:08:0d:52:c5:a5:43:cc:87:66:71:
                    47:2e:42:be:d3:ae:db:17:27:99:c6:97:d5:4c:67:
                    1c:84:8d:79:bf:a8:c8:2c:ba:32:62:bc:6f:54:60:
                    e9:74:ab:42:57:62:42:64:b5:5d:6f:ee:86:ff:11:
                    87:d7:d5:35:cf:41:87:15:b4:8b:86:95:43:14:9f:
                    e4:fc:58:e5:ce:1d:4e:9b:89:6c:f7:11:5b:9e:c8:
                    17:2a:38:3a:fd:9e:1f:9e:5e:9c:b9:bf:be:64:bf:
                    4c:96:73:7b:02:85:9c:b6:0f:81:a8:88:28:db:7f:
                    6a:31:48:c0:08:a1:2c:b5:b8:bb:81:1f:2c:4a:35:
                    e5:7e:ab:8a:07:98:82:bd:e1:e7:a6:f0:f5:66:2f:
                    a1:fd:94:4a:9e:04:90:70:d3:40:cd:db:15:dc:9f:
                    94:27:0c:e4:54:97:78:5d:27:f3:9c:0b:61:c1:72:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FA:9A:A4:7D:8E:DA:6B:20:22:E7:C5:3B:EF:CC:1C:63:4D:5D:8A
            X509v3 Authority Key Identifier:
                keyid:5D:59:59:C0:4A:DE:DB:A5:EB:17:E7:1F:95:F6:C4:02:5E:DE:CB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D5959C04ADEDBA5EB17E71F95F6C4025EDECBDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:01:21:7b:9c:ea:42:07:48:cc:76:0f:75:67:d7:f5:70:
         8f:95:38:53:97:92:c2:79:ed:4d:7b:43:c0:cc:52:5c:25:6d:
         10:61:29:a9:05:4e:cb:47:7c:d4:94:6c:10:81:b9:ba:a3:0d:
         14:39:af:f8:ef:ab:25:c9:a0:b4:1d:9d:85:f0:69:e2:69:68:
         38:a8:c9:d3:a9:94:f1:8e:19:75:21:a5:80:b9:ba:a7:89:5d:
         70:79:96:1c:a8:e9:55:9e:a8:58:c4:f6:86:24:ae:7f:5c:14:
         6b:26:e6:c2:2d:09:01:9e:c7:e8:49:4e:79:1a:94:81:3a:88:
         55:28:ac:e0:78:21:e8:19:53:25:71:40:a8:d1:e8:72:f4:81:
         db:89:62:30:df:f9:52:a4:29:b4:03:95:04:87:5a:92:29:1a:
         2f:ce:8c:c6:b0:c1:a7:cc:e3:c3:8d:cd:62:52:03:53:11:e8:
         a0:62:59:94:43:96:87:37:9f:04:08:77:e2:4b:d3:fd:f4:45:
         6c:70:e8:6b:9d:e4:f6:c0:41:f0:26:9b:98:0c:77:c6:e4:62:
         fb:40:c4:6b:60:78:19:c5:a1:41:39:69:71:85:d5:2a:e3:6a:
         3f:b0:f1:78:f3:53:7d:9b:59:ec:9b:8d:a1:69:7b:50:da:37:
         e9:a4:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:16 2026 by rpki-client