Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          DSqrZf2t+vOo0dpO9Z2Ts4Q/3PwkQ/7IIkFcOCMaS2c=
Subject key identifier:   16:D7:8E:13:99:9D:BB:B0:AD:FB:E3:AA:7A:B3:B3:B3:7A:9F:48:EC
Certificate issuer:       /CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9
Certificate serial:       67CD685A4A7FC5F70330A08E44FBE8039BD2F15F
Authority key identifier: C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa
Signing time:             Sun 03 May 2026 02:11:39 +0000
ROA not before:           Sun 03 May 2026 02:06:39 +0000
ROA not after:            Sun 02 May 2027 02:11:39 +0000
asID:                     131111
IP address blocks:        103.175.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl
                          rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cd:68:5a:4a:7f:c5:f7:03:30:a0:8e:44:fb:e8:03:9b:d2:f1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9
        Validity
            Not Before: May  3 02:06:39 2026 GMT
            Not After : May  2 02:11:39 2027 GMT
        Subject: CN=16D78E13999DBBB0ADFBE3AA7AB3B3B37A9F48EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:75:7c:fe:8f:8a:68:d6:fe:61:d9:73:e0:
                    43:64:13:28:05:2d:21:ca:eb:03:68:08:0d:eb:12:
                    a0:ce:ce:2d:f3:2d:f0:3d:d4:6e:20:d1:fc:15:2b:
                    86:14:a4:0a:a8:ad:c2:72:a2:f0:e8:9f:da:98:c7:
                    5a:af:87:10:ad:a7:f9:f3:85:96:f8:a7:b2:9f:ff:
                    fb:9e:5e:ed:bc:bb:f7:d6:bf:5b:7a:be:96:a5:5b:
                    a7:3d:86:8e:e1:d9:ba:90:1b:06:31:ad:28:c8:9a:
                    34:d3:64:13:08:65:89:ee:53:ad:60:33:f9:c7:81:
                    40:af:bf:e6:cb:82:8b:de:7c:6d:4f:b3:be:61:1e:
                    b5:a8:92:4a:9d:2e:6e:fb:91:9a:3f:96:73:e4:02:
                    90:e9:89:fa:2c:a3:26:cc:c7:7c:59:d7:f1:2b:26:
                    cb:de:b3:0f:bf:43:6c:59:96:b8:5e:03:bc:dd:d1:
                    96:34:4f:3b:95:65:5a:5f:95:40:c3:a6:27:fe:92:
                    47:20:67:f5:90:23:b8:1a:f7:16:41:a4:c8:ac:83:
                    d5:0f:0a:41:7d:de:16:aa:b5:45:8e:ff:b5:4f:ef:
                    cb:de:7e:f5:c6:80:7b:b2:76:76:47:78:75:7e:5a:
                    e2:39:a8:75:5f:34:9b:8a:a1:cf:47:d7:18:72:ff:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D7:8E:13:99:9D:BB:B0:AD:FB:E3:AA:7A:B3:B3:B3:7A:9F:48:EC
            X509v3 Authority Key Identifier:
                keyid:C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:50:46:f1:99:25:05:2f:fc:52:6e:f8:b3:95:04:bf:e0:7a:
         1f:48:d8:83:36:fe:2b:ff:92:03:05:94:5e:07:ab:9d:09:82:
         4c:91:4c:c5:e5:04:44:19:99:e3:70:8b:6b:8f:ee:0e:21:a5:
         03:6f:a2:01:38:eb:66:23:39:65:aa:56:c6:b5:a5:21:6e:54:
         86:bb:dd:bd:b1:f7:f7:e3:26:7b:e4:85:ab:ad:e4:20:dd:8d:
         88:83:5b:09:01:79:68:b1:6a:b1:c3:4e:1f:cb:4a:06:63:aa:
         45:2a:03:17:c9:fa:4f:18:54:20:6e:13:3d:69:b8:10:bb:63:
         39:c1:5a:19:59:68:f9:62:73:76:e4:c7:6e:a5:24:cf:85:bf:
         1b:ca:70:11:5c:72:74:aa:2d:81:d2:ca:de:75:a8:ce:87:0f:
         a0:92:35:c8:47:11:92:43:f3:be:5b:b7:ce:17:02:bc:72:b5:
         9b:dd:87:c2:5e:b9:f7:bf:2c:2f:a0:8b:e8:1e:50:61:ec:dc:
         fb:cb:57:89:3e:e3:53:5d:c0:44:66:c2:8d:6d:53:a4:b6:79:
         fd:7d:fe:a3:81:2d:be:22:11:11:0b:67:2a:fd:3e:7a:58:a6:
         60:91:e1:44:a0:7f:a8:17:53:4b:b1:14:d8:e9:f2:af:40:9e:
         5e:50:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:19 2026 by rpki-client