Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34392e302f32342d3234203d3e203539323733.roa
File:                     3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          A/eIZCdjAjL3nC9fTPZulgiI4xnKPeqKVVCm1GsNoq0=
Subject key identifier:   A8:B9:49:A6:C1:9B:14:77:A0:C4:FF:47:72:DE:08:BB:B8:F2:F5:E0
Certificate issuer:       /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
Certificate serial:       4D10E87381A98493A16B7657CFF33D84FE7ED94A
Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34392e302f32342d3234203d3e203539323733.roa
Signing time:             Sun 03 May 2026 02:11:29 +0000
ROA not before:           Sun 03 May 2026 02:06:29 +0000
ROA not after:            Sun 02 May 2027 02:11:29 +0000
asID:                     59273
IP address blocks:        103.226.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl
                          rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:10:e8:73:81:a9:84:93:a1:6b:76:57:cf:f3:3d:84:fe:7e:d9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179
        Validity
            Not Before: May  3 02:06:29 2026 GMT
            Not After : May  2 02:11:29 2027 GMT
        Subject: CN=A8B949A6C19B1477A0C4FF4772DE08BBB8F2F5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:db:19:35:cb:93:1e:1a:b0:36:07:8f:4e:
                    e5:0b:d9:40:ae:bb:43:00:a0:10:24:23:f5:3d:b5:
                    a7:da:9a:ad:bb:45:ba:22:11:92:a8:5f:65:12:0b:
                    43:f8:e9:6d:75:eb:b4:0a:c5:da:9b:72:3c:6b:1b:
                    a8:69:57:d8:18:b3:b3:3e:eb:6b:af:3b:58:1a:be:
                    ee:b0:c6:cd:1e:e0:2e:07:8b:43:3b:3d:d6:2a:44:
                    94:27:6a:22:9f:93:2f:5b:6f:86:43:f6:ca:df:1d:
                    6f:2f:ad:d1:d2:82:3d:32:7f:d5:ca:e8:cf:9c:6e:
                    1b:56:9e:e7:73:3f:0f:c6:f1:73:de:2c:fe:d0:ab:
                    2d:b0:46:a8:d6:ec:a2:45:38:79:77:0e:aa:94:c3:
                    be:50:55:f1:23:4a:51:65:47:9e:8a:a8:3d:7c:3e:
                    e5:4b:89:97:c5:08:db:22:26:0d:d7:0b:1b:8a:89:
                    8b:2c:70:75:5d:24:7d:a8:58:3a:a2:e1:c4:fa:82:
                    24:3d:ed:4f:f0:b0:48:50:42:bf:1a:9b:e0:d9:68:
                    29:86:00:6e:42:ee:2c:19:e7:06:3e:82:90:35:e2:
                    b8:bd:35:87:7f:38:bb:75:de:6f:2e:1c:d7:0a:e3:
                    14:c8:3e:be:16:74:db:e5:38:ad:d0:ea:4f:5c:a8:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B9:49:A6:C1:9B:14:77:A0:C4:FF:47:72:DE:08:BB:B8:F2:F5:E0
            X509v3 Authority Key Identifier:
                keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34392e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:89:39:73:0f:a4:af:8c:8e:c5:3f:c0:e4:ba:07:be:8a:f4:
         4d:30:98:67:78:60:48:fd:09:d2:fa:92:8b:01:5b:85:3f:10:
         a2:e2:fd:d5:70:53:fb:ec:23:9b:f3:75:f5:90:6d:ee:db:79:
         08:80:a1:97:bf:8a:3f:5d:85:be:42:4f:d5:77:8b:9b:9d:49:
         1d:5d:f9:0a:f4:05:d7:8b:ab:9a:3a:35:e9:7a:9d:81:5b:f6:
         17:42:81:23:ff:f9:32:0b:c7:12:ed:ab:db:5b:7e:43:2e:8b:
         0b:4a:b5:95:cc:db:57:2f:82:b0:81:c3:32:db:3c:af:7d:e8:
         e0:33:ca:4f:32:96:da:73:0e:96:2b:d8:9b:55:c3:51:d7:13:
         ff:e9:40:34:4f:b3:e4:04:20:68:9a:18:c5:c8:2d:ae:46:b7:
         4c:1b:74:90:ae:32:72:3b:97:04:a8:e9:d4:c7:83:f1:2f:1d:
         2f:4e:40:0f:92:24:e3:76:18:1a:c8:7e:52:b3:5d:e3:09:02:
         1e:90:ce:0f:63:d0:8c:10:ce:38:13:5a:ee:26:95:68:9d:99:
         72:2e:d1:86:c0:45:c0:c1:c2:32:03:41:ee:37:78:c3:57:ae:
         8b:ef:84:01:80:42:f0:ed:0e:d2:2e:52:e1:80:a8:99:04:6e:
         3a:91:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:10 2026 by rpki-client