Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa
File:                     3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (raw, json)
Hash identifier:          5qL4Akm0PbHI3eo3BSoRkovQkTSvAIBUTKI6uUAYPHA=
Subject key identifier:   51:C3:4E:C4:31:DB:70:63:2A:AD:53:9D:55:6F:0F:E4:C7:83:89:31
Certificate issuer:       /CN=2677581645A49D82B36AA830484865F4B9D0FC43
Certificate serial:       5D2CD67553ED9782A86B898FEDC60872E65B1DF2
Authority key identifier: 26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa
Signing time:             Sun 03 May 2026 02:12:40 +0000
ROA not before:           Sun 03 May 2026 02:07:40 +0000
ROA not after:            Sun 02 May 2027 02:12:40 +0000
asID:                     150932
IP address blocks:        103.107.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl
                          rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2c:d6:75:53:ed:97:82:a8:6b:89:8f:ed:c6:08:72:e6:5b:1d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2677581645A49D82B36AA830484865F4B9D0FC43
        Validity
            Not Before: May  3 02:07:40 2026 GMT
            Not After : May  2 02:12:40 2027 GMT
        Subject: CN=51C34EC431DB70632AAD539D556F0FE4C7838931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:e6:6f:c1:09:91:a1:52:8a:b7:94:4f:ec:
                    9f:33:4e:30:08:35:47:0c:43:cd:5b:ea:97:22:74:
                    42:ff:02:6e:a3:69:6c:78:37:86:a1:65:63:b1:ec:
                    d4:c6:fd:cd:00:ee:28:45:f7:95:0c:1c:f1:53:c3:
                    92:61:80:29:0d:e5:71:96:7e:92:40:e5:32:5c:3f:
                    bf:0f:9a:8a:62:98:a2:2e:48:00:3c:37:9a:a2:58:
                    82:0f:46:66:94:bb:31:2b:95:e8:b7:5f:fa:88:15:
                    9c:6b:75:18:37:a1:c5:af:32:ad:fa:0d:33:2b:85:
                    b6:32:01:b1:f4:06:7c:55:a5:41:6e:9f:fa:35:dd:
                    a5:60:a9:90:49:98:24:75:05:a5:a3:74:1d:ed:d2:
                    36:72:ef:d2:01:ae:57:49:cb:30:40:61:3b:90:c3:
                    1c:36:c4:87:a5:da:03:53:ef:9d:2b:92:87:ed:85:
                    5e:a7:57:46:f6:d2:81:9a:c1:60:4d:85:c9:ca:71:
                    06:ec:d2:44:05:c9:79:6b:97:de:7e:f4:f9:3e:9f:
                    75:0c:06:59:b0:e5:10:f1:e8:16:d6:6a:bd:ac:33:
                    ec:23:fe:4c:6a:41:dd:0e:39:a8:84:de:79:36:1a:
                    32:6c:49:de:e4:e4:57:0d:83:92:7d:e0:44:63:e2:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C3:4E:C4:31:DB:70:63:2A:AD:53:9D:55:6F:0F:E4:C7:83:89:31
            X509v3 Authority Key Identifier:
                keyid:26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:f8:99:37:e3:75:4f:10:77:3a:85:c3:03:0d:b8:c3:5f:
         58:a4:12:7c:33:9c:77:a3:b0:97:5d:f6:78:c7:5b:5c:7e:71:
         52:35:f5:68:28:f7:ff:7a:f9:60:14:af:07:99:2f:52:06:ee:
         b8:b1:06:72:f1:6b:91:d9:67:6e:32:c5:15:41:5f:11:f0:47:
         6e:ab:eb:fc:0b:60:2e:f6:de:9c:24:c7:fd:11:af:21:01:5c:
         50:15:fe:39:a8:78:db:16:d3:4d:bd:e9:2d:9d:c9:d1:35:fc:
         aa:8b:9f:f2:cb:d1:18:64:36:e9:b4:57:a3:80:69:b8:e2:2b:
         62:4e:b6:fa:65:16:0b:86:50:8d:15:d7:69:1e:26:9d:c2:d6:
         99:26:54:8e:f2:a1:97:95:b5:10:65:71:35:be:76:8c:d7:df:
         9c:35:ef:06:08:aa:c5:34:d7:f7:f4:fb:77:a6:6a:b2:ce:e8:
         77:b2:8d:bf:73:2d:28:49:0d:d6:9c:05:9c:39:f3:7e:b8:70:
         f8:90:8e:8c:66:a9:8e:53:a0:05:d2:b6:ae:c9:be:37:7e:40:
         65:e9:8c:18:40:30:0f:a1:2a:e8:0c:72:eb:3e:9e:b0:6f:b5:
         fa:3f:4c:7d:5e:e8:69:d9:df:9d:f8:cb:72:f7:c2:7c:e2:e4:
         67:fa:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:45 2026 by rpki-client