Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32332d3233203d3e203538333639.roa
File:                     3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          vKe09VJpirx3d8Vkqz6gLuC+DkGeanu2r5WmGCErId4=
Subject key identifier:   46:3E:2D:48:C2:88:D7:A7:CC:5A:AA:43:4D:7E:D9:3E:69:A8:38:62
Certificate issuer:       /CN=885F36F281B0D4CC516E3818323CB9C1F30AF373
Certificate serial:       7C7105EB7FC2E141AB398CD53580862F480D6B8B
Authority key identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32332d3233203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:14:56 +0000
ROA not before:           Sun 03 May 2026 02:09:56 +0000
ROA not after:            Sun 02 May 2027 02:14:56 +0000
asID:                     58369
IP address blocks:        103.140.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl
                          rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:71:05:eb:7f:c2:e1:41:ab:39:8c:d5:35:80:86:2f:48:0d:6b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885F36F281B0D4CC516E3818323CB9C1F30AF373
        Validity
            Not Before: May  3 02:09:56 2026 GMT
            Not After : May  2 02:14:56 2027 GMT
        Subject: CN=463E2D48C288D7A7CC5AAA434D7ED93E69A83862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:3e:39:26:8b:4f:9f:d9:45:3e:5f:35:1a:
                    54:75:ab:29:ca:a7:46:fa:45:ba:0c:47:6c:29:f2:
                    cf:69:54:23:94:6e:38:ee:89:6a:7c:b6:30:89:ae:
                    e6:b1:7c:ac:cf:98:78:c9:d3:4f:55:b4:93:9a:10:
                    72:4b:66:97:8b:1f:9a:c5:22:f9:9e:89:49:fe:c8:
                    25:37:55:7c:09:98:f6:5d:58:99:6d:f0:53:91:c0:
                    fe:19:c1:02:82:14:2e:3e:f7:af:e3:1e:cd:1d:76:
                    2f:62:22:a5:15:e3:b2:7f:9f:9b:a2:9d:4f:8a:35:
                    85:e5:d9:88:e8:0a:68:5e:3b:ac:db:ad:d4:8d:a5:
                    43:92:28:ee:8f:62:23:20:66:c7:f0:b3:0b:6a:1c:
                    b5:36:39:d9:cb:1a:7c:77:a4:b9:ca:55:07:02:b6:
                    7f:ac:10:50:78:91:a3:b9:e3:1b:7c:c3:fe:1e:33:
                    f1:6f:20:87:74:24:41:c6:96:81:66:f1:3b:82:da:
                    de:a3:b4:22:17:3e:65:b8:f1:7c:03:68:36:62:9b:
                    96:7a:85:92:5c:38:33:a3:eb:c9:e2:53:bd:fe:77:
                    cb:79:86:5e:1d:5d:7f:4f:c2:ec:fe:a4:fa:29:59:
                    da:1a:e1:bb:44:2f:3d:08:0e:24:df:d6:f3:51:91:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3E:2D:48:C2:88:D7:A7:CC:5A:AA:43:4D:7E:D9:3E:69:A8:38:62
            X509v3 Authority Key Identifier:
                keyid:88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:db:f3:71:9b:31:b9:2d:81:61:3b:dc:41:d0:48:e7:7f:e7:
         58:b4:f0:64:ca:9e:33:73:83:f8:23:85:4a:16:96:77:b3:60:
         6c:09:fe:a6:82:e8:d8:4b:f3:a9:f4:23:0f:48:10:87:39:b5:
         64:c7:3f:1b:31:c8:27:be:40:88:c0:ad:aa:d8:f4:9f:54:cc:
         27:d0:9e:4f:cf:71:ea:e0:c9:72:a1:ac:08:11:6e:b8:51:30:
         40:a1:06:ef:98:a2:c2:19:b6:cf:e7:b5:8f:2f:f4:7f:3b:10:
         34:c1:f3:c7:36:d8:f8:53:5c:ce:e1:68:3b:3e:4f:1e:1a:ee:
         3d:c3:b9:9e:8e:9a:40:8e:14:c0:b0:7b:ba:41:26:a6:2a:16:
         7d:19:69:28:6c:87:44:9f:92:fb:65:aa:8b:6c:0f:e8:08:38:
         c5:b8:37:98:d1:6d:5b:53:d0:29:fa:14:81:91:31:0c:1c:e5:
         03:a3:b8:c1:6c:93:c8:09:26:59:16:3d:4f:e5:5e:46:5a:33:
         1b:65:a0:c7:ca:88:4d:7a:20:a3:77:2d:a1:83:f0:a7:32:5e:
         5a:a8:1e:95:e3:48:a4:25:d5:f7:5f:9a:fe:57:af:36:d1:e7:
         78:f4:40:a7:9c:e4:15:8d:f3:f9:ce:02:29:68:ab:6d:6f:d2:
         f5:95:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:03 2026 by rpki-client