Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
File:                     3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (raw, json)
Hash identifier:          ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=
Subject key identifier:   5A:7D:A8:F8:6F:0C:6B:5E:83:43:7A:B5:4A:FE:5F:24:DB:CC:BE:A2
Certificate issuer:       /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714
Certificate serial:       7C0981A3A14D773C909B9B26F097885E6023A249
Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
Signing time:             Sun 03 May 2026 02:19:27 +0000
ROA not before:           Sun 03 May 2026 02:14:27 +0000
ROA not after:            Sun 02 May 2027 02:19:27 +0000
asID:                     149897
IP address blocks:        103.187.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl
                          rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:09:81:a3:a1:4d:77:3c:90:9b:9b:26:f0:97:88:5e:60:23:a2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714
        Validity
            Not Before: May  3 02:14:27 2026 GMT
            Not After : May  2 02:19:27 2027 GMT
        Subject: CN=5A7DA8F86F0C6B5E83437AB54AFE5F24DBCCBEA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:74:7c:79:c0:2a:f0:20:13:43:07:be:46:
                    2d:d2:d9:21:bb:4b:11:fe:5c:fa:d8:a1:a2:d7:6d:
                    ec:70:a0:34:10:ef:d9:b1:a3:fc:02:a2:3f:65:ca:
                    4c:f7:48:2f:97:77:7b:79:6c:67:98:b7:20:82:43:
                    9a:82:c9:a0:80:b7:8f:33:52:69:63:da:2a:99:44:
                    c5:5f:db:96:79:cc:3d:30:3e:94:bd:b6:65:b8:cb:
                    ed:24:2e:d4:99:de:7a:c0:0d:2d:51:6d:82:2a:4f:
                    2d:1f:57:c8:71:8e:23:13:c6:9f:b2:ea:29:52:90:
                    81:7e:c7:58:f6:73:12:9c:6a:5d:ce:0a:da:4f:09:
                    18:35:95:37:5d:43:c5:19:56:c0:de:2c:2a:fe:79:
                    f8:b6:cb:47:4b:22:b8:9e:46:19:f1:81:cb:f8:d2:
                    86:87:dc:fc:01:5d:24:43:e3:07:0b:78:ab:6c:2d:
                    f4:f0:5d:85:0c:71:7a:91:21:60:b9:e9:8a:06:bf:
                    57:7e:dd:cb:0c:92:1a:f8:64:af:40:77:d2:12:22:
                    db:f9:90:f9:17:09:a6:f7:90:4f:ab:17:c5:d8:64:
                    52:df:3e:ac:28:0b:e7:f3:ff:e3:76:9d:0c:fe:4e:
                    7d:83:e6:b6:6b:96:5e:10:84:bf:9c:48:80:89:35:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7D:A8:F8:6F:0C:6B:5E:83:43:7A:B5:4A:FE:5F:24:DB:CC:BE:A2
            X509v3 Authority Key Identifier:
                keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:41:9b:43:40:24:bc:3b:bd:45:2f:b0:bd:71:bb:0f:29:ff:
         75:0c:9f:9e:81:bc:9c:a4:2d:71:c4:45:57:95:e1:44:fc:25:
         02:80:f8:00:ca:90:6b:49:3f:fd:b6:a3:f8:04:ab:b7:87:70:
         4a:8f:f3:b6:3f:12:60:36:20:4f:e5:17:4a:a3:e3:d2:b8:72:
         64:92:11:f9:46:8a:74:66:13:7d:47:6c:25:4c:4c:33:3e:dd:
         5f:6b:db:fd:99:3e:c7:3e:ef:e8:0b:c5:d4:9a:f1:a0:2a:7a:
         c5:62:82:62:0c:9f:7e:34:78:e5:42:c7:75:b1:fd:dc:4b:0e:
         0e:cb:bb:1c:87:8a:5a:f8:a3:d7:e3:57:38:bb:20:e3:a4:3c:
         a3:1d:5c:fb:d8:78:2b:8b:7a:32:ed:ad:ca:82:00:4d:53:61:
         18:39:38:87:04:69:5b:58:bc:c4:bc:4e:03:a4:f2:a6:0a:80:
         db:96:15:00:cc:b1:ed:71:3a:43:dc:a4:e4:fa:8d:a2:76:36:
         80:d9:ee:49:f8:12:48:f3:3d:9d:7c:7e:a5:71:35:48:a5:dc:
         f3:8b:ce:dd:81:fd:f8:5b:3c:42:40:7a:a9:cd:fb:c9:79:27:
         47:c1:4e:24:26:cc:98:6a:54:10:59:1b:ec:3e:1c:d5:3e:f6:
         d6:e7:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:19 2026 by rpki-client