Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa
File:                     3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (raw, json)
Hash identifier:          ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=
Subject key identifier:   14:AD:C1:94:73:05:44:C6:DF:F2:8E:FB:A2:A4:2B:74:69:4B:34:56
Certificate issuer:       /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1
Certificate serial:       26E6B1CC535FFC1EA03FC06009F3615E1774FB53
Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa
Signing time:             Sun 03 May 2026 02:16:49 +0000
ROA not before:           Sun 03 May 2026 02:11:49 +0000
ROA not after:            Sun 02 May 2027 02:16:49 +0000
asID:                     138855
IP address blocks:        103.171.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl
                          rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e6:b1:cc:53:5f:fc:1e:a0:3f:c0:60:09:f3:61:5e:17:74:fb:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1
        Validity
            Not Before: May  3 02:11:49 2026 GMT
            Not After : May  2 02:16:49 2027 GMT
        Subject: CN=14ADC194730544C6DFF28EFBA2A42B74694B3456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:9c:17:d5:64:a2:f4:02:d5:97:75:6a:1a:
                    94:f1:c7:05:26:b1:e6:81:e1:09:de:4b:2e:65:ac:
                    6b:ec:76:76:52:86:f2:0a:53:54:62:47:57:5d:a5:
                    53:c1:d5:89:55:01:29:85:bf:a7:88:11:e4:85:fe:
                    6d:35:39:70:1a:8c:d2:7b:c5:71:4b:67:c5:66:e1:
                    fa:6c:4a:09:63:15:8e:41:61:46:d7:4c:0f:3b:b4:
                    ac:7d:28:86:20:52:42:f6:91:d3:34:08:2c:63:34:
                    00:9b:7b:e9:14:f2:c7:11:55:3f:fd:94:3c:1d:46:
                    00:08:7a:b2:62:f3:1d:9c:b4:ac:e9:b4:92:10:15:
                    4d:43:19:d6:4d:a9:fc:37:b4:bf:32:37:c6:e1:75:
                    97:33:c1:81:37:ff:15:d7:91:d3:2d:0e:51:af:8a:
                    52:9d:09:04:a2:f2:48:44:bd:f2:27:59:9c:78:f7:
                    61:9c:71:f1:97:74:40:39:ef:6d:87:e6:95:ee:d6:
                    65:06:bb:ce:58:a2:f6:e8:85:75:70:6f:a5:95:58:
                    f0:6d:6e:91:15:e4:35:40:a2:e0:c3:c4:57:d4:eb:
                    2c:51:aa:1a:7d:df:c3:23:e0:21:c1:20:a0:e8:82:
                    36:e0:bd:5d:4c:f1:68:2f:b3:61:2d:98:a6:21:c6:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AD:C1:94:73:05:44:C6:DF:F2:8E:FB:A2:A4:2B:74:69:4B:34:56
            X509v3 Authority Key Identifier:
                keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:fc:ec:7a:d7:5c:f5:cb:e9:d9:4f:d2:49:95:6e:39:5a:ad:
         96:e9:8a:e7:b3:ab:87:eb:fa:1b:35:45:1a:ce:d7:54:77:7c:
         14:35:5a:cf:82:3a:24:54:0e:e3:cb:08:d4:f1:e1:6c:3b:27:
         82:ad:06:8b:3d:2a:22:e2:54:9e:80:4c:90:2d:ca:8a:75:1a:
         55:27:4a:2d:e5:1f:90:62:94:36:de:fc:08:f7:ad:09:35:3a:
         1f:e2:95:d6:a9:34:d1:ac:2f:fd:3b:76:48:1b:d8:18:4a:43:
         3b:7d:2f:77:1a:d2:37:23:09:88:eb:ba:1c:c9:b5:ad:e6:f4:
         11:9f:82:2f:4d:a9:b8:85:f2:d1:af:bb:d4:59:76:5c:0e:60:
         e5:09:6f:00:1c:6b:bd:7e:68:68:95:20:6d:15:d5:7f:93:e7:
         2c:4a:7c:df:99:52:99:d0:43:46:56:a2:3c:24:68:07:d6:20:
         bf:88:84:ff:e1:ce:5a:0e:3d:b4:1e:93:7d:48:80:b7:30:e1:
         d1:e0:56:ce:f1:bf:c7:5b:9e:54:31:8a:a8:82:02:d2:8a:37:
         03:e5:c4:fb:f0:57:de:99:86:29:c9:10:22:a6:f9:5a:9f:cf:
         b9:95:8b:0a:6f:fa:b9:57:b9:3e:a2:7d:f0:fe:fe:e1:9e:c1:
         1d:d9:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:44:47 2026 by rpki-client