Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa
File:                     3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (raw, json)
Hash identifier:          1Jb72gV9Cql494HOmw4p+CcUceiPzhX48HtoigKm8xc=
Subject key identifier:   DD:8F:E3:E1:9D:35:4B:31:03:6D:28:48:9D:55:DE:5E:F4:C7:FA:5D
Certificate issuer:       /CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14
Certificate serial:       6A06502D106D5290C3EACB5A194B80246766E41C
Authority key identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa
Signing time:             Sun 03 May 2026 02:20:31 +0000
ROA not before:           Sun 03 May 2026 02:15:31 +0000
ROA not after:            Sun 02 May 2027 02:20:31 +0000
asID:                     149315
IP address blocks:        103.184.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl
                          rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:06:50:2d:10:6d:52:90:c3:ea:cb:5a:19:4b:80:24:67:66:e4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14
        Validity
            Not Before: May  3 02:15:31 2026 GMT
            Not After : May  2 02:20:31 2027 GMT
        Subject: CN=DD8FE3E19D354B31036D28489D55DE5EF4C7FA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:2c:1b:df:2d:3a:08:b4:86:4b:41:16:35:
                    8b:57:8a:ef:51:09:3a:a3:00:b7:4d:f0:37:72:b1:
                    1d:d3:6a:d8:f6:f3:d5:40:88:44:2b:68:88:cf:9c:
                    97:bb:ed:87:b2:5e:94:2f:b7:e1:49:1f:15:37:c3:
                    20:f3:1f:89:40:5d:6c:40:e3:9b:41:36:9c:f7:48:
                    10:fd:2a:7f:f1:a9:6b:d9:63:c7:48:ee:3f:b9:d2:
                    47:36:31:8e:80:f9:41:cc:b3:96:bb:c1:cc:0f:c8:
                    81:09:8e:3a:87:67:21:69:5a:00:3a:c4:76:20:17:
                    34:81:28:cb:77:b8:85:ea:55:d2:25:33:0f:d5:60:
                    e2:66:36:07:b3:ac:d1:e6:74:82:3b:59:42:5e:74:
                    ee:e8:de:1a:c3:fb:06:c6:c0:42:54:4b:b3:76:21:
                    32:d9:21:93:7c:9d:74:bc:71:15:88:cf:0b:5e:40:
                    bb:2d:af:f3:c8:cb:b8:a1:f8:74:3c:6b:20:17:91:
                    6a:61:ff:74:bd:ad:9b:6a:c8:4d:90:be:2f:b4:1a:
                    c6:86:cf:92:14:ef:58:9f:65:9b:e4:2e:98:7b:57:
                    2a:22:5a:ee:82:e3:2e:f3:c4:fb:83:78:da:f2:74:
                    24:08:b2:4d:17:e4:39:7f:17:ad:eb:a1:ff:5b:75:
                    89:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8F:E3:E1:9D:35:4B:31:03:6D:28:48:9D:55:DE:5E:F4:C7:FA:5D
            X509v3 Authority Key Identifier:
                keyid:C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:15:41:d3:40:36:63:14:3a:eb:22:77:b8:f7:ee:2c:bf:
         8c:f1:8f:2a:a8:4b:d6:7a:53:70:c5:ed:a9:87:f6:09:dc:a3:
         94:7a:25:e6:2f:ca:c3:eb:27:06:d6:54:44:63:75:d9:e6:87:
         03:4c:a4:eb:4b:9e:e9:2b:be:0a:e0:85:c8:7f:17:13:46:61:
         c0:23:9d:33:30:11:82:56:03:67:49:e6:d2:ac:d8:87:37:96:
         8d:b4:d1:98:27:a1:c5:21:cf:3d:9f:ae:8c:fe:7b:8e:4a:ef:
         73:55:ae:ee:cf:3f:c1:90:15:58:09:c9:ba:bc:d6:2b:87:75:
         48:a9:32:30:35:86:ff:3d:fd:a9:b8:3c:2d:02:c3:e3:0d:5a:
         93:15:81:36:f1:46:45:68:a5:b7:66:7d:11:18:f0:8c:70:63:
         aa:c6:34:50:e6:17:27:fc:2b:9f:9f:7f:fa:7b:d3:98:36:eb:
         e6:df:7f:c1:ca:3f:70:73:09:9f:28:00:83:d9:cd:37:b3:3e:
         4d:27:16:e5:6d:58:23:f3:ae:e1:9d:90:80:3a:8f:5b:5c:a8:
         19:49:db:70:84:60:16:6b:0b:9d:fe:c0:c6:fa:63:89:81:04:
         85:5d:ec:0d:dd:0e:61:31:ab:36:de:6d:0b:45:15:b9:c1:87:
         73:5d:21:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:02 2026 by rpki-client