Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa
File:                     3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (raw, json)
Hash identifier:          LAUJzImDyMcLaxvXOPu7YXEqU04fBD2R+B9Fx7oa3PI=
Subject key identifier:   1B:3A:0B:24:F2:57:F8:55:41:2E:CF:0C:24:60:8C:9F:9A:4D:F4:A8
Certificate issuer:       /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial:       49822E27EC5382B62FA55A291B505A9C0D68746F
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa
Signing time:             Sun 03 May 2026 02:18:14 +0000
ROA not before:           Sun 03 May 2026 02:13:14 +0000
ROA not after:            Sun 02 May 2027 02:18:14 +0000
asID:                     23951
IP address blocks:        103.101.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
                          rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:82:2e:27:ec:53:82:b6:2f:a5:5a:29:1b:50:5a:9c:0d:68:74:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
        Validity
            Not Before: May  3 02:13:14 2026 GMT
            Not After : May  2 02:18:14 2027 GMT
        Subject: CN=1B3A0B24F257F855412ECF0C24608C9F9A4DF4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:45:dc:b9:69:08:56:a0:fd:b6:b8:56:3d:
                    12:26:ae:07:fa:90:dd:b2:20:2a:a1:dd:fe:f8:a4:
                    12:44:03:78:81:d6:d2:43:c9:ae:06:91:c0:af:7f:
                    1c:cd:9e:a7:2a:c5:3f:85:6a:50:fb:55:11:34:4c:
                    50:bf:3e:f2:86:cd:40:91:76:b8:cd:d3:f5:bd:b2:
                    10:ab:50:91:29:3a:00:31:db:53:1c:85:9b:93:cc:
                    e5:03:91:c0:21:0e:88:d1:63:6a:ca:84:0b:13:7d:
                    58:6a:9f:42:9c:4f:ae:87:20:f9:ed:6c:34:76:32:
                    ea:50:44:8e:8e:2e:12:6b:64:c9:4a:e3:4e:83:0d:
                    a6:c4:6d:de:2c:0c:6b:11:40:64:59:b5:01:a2:b8:
                    0b:ce:41:7d:39:fd:45:17:63:81:ee:40:a3:96:66:
                    2b:69:e3:45:00:2a:87:a9:ed:68:21:30:b8:01:12:
                    d5:37:94:5f:7e:31:98:b7:9a:bc:23:77:c6:a1:70:
                    8f:6d:4f:45:55:7f:b9:2a:b3:6b:99:45:0d:f5:4b:
                    2b:87:b8:99:0a:9d:19:91:90:0b:2c:f2:95:d1:89:
                    4d:98:a1:0d:66:07:b8:45:c7:d9:1c:3a:f2:78:70:
                    9e:2c:d2:f7:71:0a:09:73:68:4b:64:3a:05:f6:02:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3A:0B:24:F2:57:F8:55:41:2E:CF:0C:24:60:8C:9F:9A:4D:F4:A8
            X509v3 Authority Key Identifier:
                keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:d9:7e:60:20:db:f1:9d:6a:f1:1d:e6:f6:89:28:72:5a:cf:
         39:5e:38:66:e4:e4:32:2b:3a:d0:60:96:df:ea:0c:88:3b:73:
         0e:a8:47:c3:b3:84:41:30:37:b4:ea:1b:97:81:1b:3a:2f:42:
         4c:1d:14:ce:e8:05:e8:ba:15:e4:20:be:5e:8a:db:74:1b:e2:
         61:82:6d:33:30:b8:f0:b6:b0:9c:6b:9e:7f:9d:2f:33:c6:19:
         4d:d4:13:ec:19:cc:b4:ce:60:f4:b6:3e:22:9e:02:db:9f:ed:
         bb:ab:d7:1c:ee:ac:3d:59:6d:ab:fa:34:a0:97:9f:7f:88:49:
         c1:61:b4:77:b8:c9:44:d5:eb:b2:5f:3f:cd:c7:02:0b:45:02:
         8c:4b:79:53:f6:9c:e4:4f:2b:7f:8d:1d:e9:f8:a8:be:2c:c1:
         8a:f0:94:42:fe:8d:f4:1f:25:48:44:5e:97:d2:37:da:2f:ea:
         07:31:31:4b:41:af:02:57:33:c5:f4:06:1c:a1:2d:c5:39:81:
         45:0d:57:a6:27:a0:8d:47:64:e3:58:4b:ce:52:cb:d4:49:84:
         ed:ff:f9:81:d9:52:c9:4a:9c:51:4a:e6:be:dc:39:4d:b3:d5:
         b7:06:24:cb:3b:4b:6a:bf:22:69:23:ee:00:c5:2e:33:e5:9c:
         b6:16:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:02 2026 by rpki-client