Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa
File:                     3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (raw, json)
Hash identifier:          WyiqkRr/WwMALxqKWgtBGW8I5DUVuOnXnmofYyW+gKQ=
Subject key identifier:   90:8F:D8:5E:8A:01:82:A3:3F:19:D2:70:B5:F3:33:FB:1A:3D:25:2D
Certificate issuer:       /CN=66B373A1A8E4839699E23D35A5592185C65D4217
Certificate serial:       4175456885C5A4AF9BCF8F42D31A535C746C872E
Authority key identifier: 66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa
Signing time:             Sun 03 May 2026 02:19:29 +0000
ROA not before:           Sun 03 May 2026 02:14:29 +0000
ROA not after:            Sun 02 May 2027 02:19:29 +0000
asID:                     147155
IP address blocks:        103.177.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl
                          rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:75:45:68:85:c5:a4:af:9b:cf:8f:42:d3:1a:53:5c:74:6c:87:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B373A1A8E4839699E23D35A5592185C65D4217
        Validity
            Not Before: May  3 02:14:29 2026 GMT
            Not After : May  2 02:19:29 2027 GMT
        Subject: CN=908FD85E8A0182A33F19D270B5F333FB1A3D252D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:1b:a1:14:32:57:2d:3d:93:ab:91:46:f6:
                    e0:fb:4b:74:9b:7a:b1:a6:b2:0f:ce:c2:49:d0:d2:
                    73:98:e4:87:81:a1:63:94:2a:72:bd:61:64:3e:db:
                    e7:f0:ae:ab:3d:4f:58:be:67:41:07:9e:0b:65:fc:
                    43:1b:65:30:2c:12:20:9d:48:c1:81:e0:ff:02:01:
                    41:dc:c4:58:5f:b5:df:73:7c:6a:2b:82:d6:b3:f5:
                    fc:0f:ec:36:40:e7:9e:75:52:88:09:1f:66:23:0f:
                    59:69:c9:6e:3b:78:e3:fd:93:30:31:6d:70:77:6f:
                    9a:40:38:d2:32:f9:d5:37:a8:25:f0:7f:a9:3d:13:
                    ef:dc:89:dc:b5:58:e8:35:0b:d6:fc:1e:d4:38:93:
                    33:c0:46:d5:51:c5:30:73:87:07:ca:85:38:55:9a:
                    89:b2:cf:be:9d:7e:b5:7a:68:b1:4a:bc:61:c9:bf:
                    c4:ff:56:fa:f4:15:99:10:ab:d8:8f:f4:2a:b8:81:
                    dc:a7:48:62:81:c2:ad:6b:08:9c:eb:25:b7:a8:f9:
                    26:3d:8c:4c:c2:8b:ce:35:17:5d:2c:d4:6a:6e:e1:
                    80:a0:27:a3:94:f8:d4:43:06:4d:74:6c:ea:0a:dc:
                    74:34:d8:75:80:67:d7:30:84:bf:da:1c:b4:fe:aa:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:D8:5E:8A:01:82:A3:3F:19:D2:70:B5:F3:33:FB:1A:3D:25:2D
            X509v3 Authority Key Identifier:
                keyid:66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:7d:bc:5e:ad:35:1e:b0:e2:e4:4e:3d:ce:6b:08:6d:75:01:
         84:77:4d:d3:2e:ce:df:ef:09:62:a5:85:dc:a7:c2:8e:6b:21:
         6a:30:07:08:83:d1:93:d5:ae:37:cc:87:51:2f:0f:1d:c6:47:
         32:90:d8:74:8d:3f:2a:d0:d9:15:b5:ca:05:f2:7e:05:5a:e1:
         9b:9d:04:10:5a:56:c2:3a:0d:a3:ed:79:90:fa:7e:29:77:02:
         d6:96:49:80:4a:9d:ad:2d:00:fd:9f:b4:bc:c7:da:9e:36:e6:
         0b:e8:ab:40:7d:62:cc:c3:8a:4e:00:a1:4f:2e:e1:f0:b5:91:
         ba:a8:3c:57:62:c3:72:86:75:31:e4:89:5d:a9:30:6d:33:9a:
         c1:02:c0:d3:63:2d:ea:36:27:9b:e1:4c:80:a6:67:6d:b7:d0:
         19:f2:ef:37:e2:4f:61:05:8e:d0:73:fc:04:b4:1e:0c:ff:a8:
         27:ea:9d:9f:d3:cd:94:97:39:fa:5e:df:a3:66:20:fa:2f:cb:
         89:98:d0:bd:4e:de:9e:95:d3:a5:6c:1d:76:d2:92:c2:76:a8:
         dc:58:3a:17:c2:b5:13:0c:bb:0c:cf:a2:a7:ea:e3:b1:07:85:
         ea:2c:02:6d:e6:bf:ed:b1:49:58:e3:44:07:ab:82:2c:ba:40:
         28:e1:c7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:50 2026 by rpki-client