Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa
File:                     3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (raw, json)
Hash identifier:          k9ygR7dcCcgQZcCVUZosJ0kFFCk6RTnOiQEs0TkSlyM=
Subject key identifier:   79:EF:93:E2:3A:F5:16:73:99:64:8A:66:62:EB:07:CB:14:8F:88:17
Certificate issuer:       /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial:       4AD13BB33862D0ECBDCD274227C32FEFAB12103F
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa
Signing time:             Sun 03 May 2026 02:18:17 +0000
ROA not before:           Sun 03 May 2026 02:13:17 +0000
ROA not after:            Sun 02 May 2027 02:18:17 +0000
asID:                     23951
IP address blocks:        103.101.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
                          rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d1:3b:b3:38:62:d0:ec:bd:cd:27:42:27:c3:2f:ef:ab:12:10:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
        Validity
            Not Before: May  3 02:13:17 2026 GMT
            Not After : May  2 02:18:17 2027 GMT
        Subject: CN=79EF93E23AF5167399648A6662EB07CB148F8817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:20:ec:8c:b6:76:36:f3:74:5b:f3:be:7e:
                    65:fb:62:59:c8:4a:5f:50:53:77:d0:a1:27:4c:1a:
                    8d:01:95:c5:6e:b2:4e:fd:25:71:e1:5e:c4:60:53:
                    1a:a5:00:22:42:9b:4b:cb:21:34:c6:5c:05:50:fb:
                    6b:47:19:c3:23:b3:76:bb:f4:36:bd:dc:a9:1b:91:
                    49:20:9b:f4:b7:9d:26:fe:ed:73:cd:ec:2e:a0:5f:
                    83:cb:36:c0:b0:54:06:a0:23:0c:1d:55:72:c5:f4:
                    4e:33:8a:a4:8a:2e:75:77:3d:00:26:87:6f:4b:46:
                    91:23:bb:72:ae:53:56:d7:e5:38:5b:3c:ec:3f:2c:
                    6e:41:de:e4:9b:44:6f:20:57:3f:78:8d:d4:52:32:
                    43:0f:26:df:fc:73:fe:73:3a:eb:e6:00:8d:7a:cf:
                    f7:47:6f:f1:fa:53:f7:05:1a:a6:b0:cb:d5:a3:26:
                    15:58:38:ae:84:06:66:97:db:e4:47:72:58:e1:15:
                    6f:dc:72:d8:ef:36:5a:87:fc:d7:2a:51:63:c8:27:
                    8d:ef:5d:73:2e:30:1c:a3:86:b0:f9:59:f5:3a:52:
                    5f:3d:f5:3f:05:92:ae:ab:43:ac:4d:e7:18:11:bc:
                    29:c3:f3:34:60:06:de:a7:06:e8:10:c3:0f:a7:51:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EF:93:E2:3A:F5:16:73:99:64:8A:66:62:EB:07:CB:14:8F:88:17
            X509v3 Authority Key Identifier:
                keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:47:25:09:5e:b0:15:bf:60:77:20:16:e5:f0:f5:72:8a:
         38:1a:22:01:bb:50:71:3d:ea:1f:21:de:9e:38:83:ae:5a:ca:
         12:51:c1:4f:f4:fb:68:d6:60:5e:1d:97:c3:82:ef:fe:d0:88:
         1e:e4:fb:09:bc:16:69:53:93:91:d1:a5:11:0f:2b:1d:1f:7c:
         85:76:f0:0d:94:e8:87:d8:db:12:d7:92:22:b0:15:44:c3:3e:
         27:10:2b:b4:2c:d1:f6:78:e9:b6:5b:cc:81:51:11:4b:2a:a1:
         a9:8c:d3:45:df:5c:e5:ef:b4:79:fa:8d:b2:b8:30:44:3f:c1:
         87:11:ba:8f:6e:42:10:d2:c2:e6:cb:ad:9e:e3:b5:4f:02:90:
         a1:af:a0:09:a5:10:3a:9a:87:45:6a:d2:c2:31:94:3f:6f:2a:
         f3:26:c3:84:85:b8:c4:95:4d:ab:15:92:70:ab:f6:e7:7b:c6:
         7a:22:54:ff:f1:53:23:a9:3c:33:0c:c9:31:f9:7c:5e:53:39:
         9f:b1:33:ee:03:8c:75:fa:a6:43:5d:2e:ef:37:69:f5:63:ae:
         87:fc:7b:c4:d3:25:34:7e:bf:ce:17:d7:57:6c:60:3e:5b:52:
         c9:fe:3c:34:26:fe:27:49:02:e8:df:1b:7c:59:c9:ae:52:4a:
         20:91:17:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:48 2026 by rpki-client