Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa
File:                     3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (raw, json)
Hash identifier:          LzRdfO8uQHGjjJx+IZG72L+49qDt2LuDV7Qzeoi9vMg=
Subject key identifier:   5C:E3:F7:18:C3:A4:E7:E5:78:AD:09:8D:A8:BA:42:2E:C6:07:B5:5B
Certificate issuer:       /CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E
Certificate serial:       717B9F0F5AF768009526D1D4D13FBC31962655
Authority key identifier: A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa
Signing time:             Sun 03 May 2026 02:21:29 +0000
ROA not before:           Sun 03 May 2026 02:16:29 +0000
ROA not after:            Sun 02 May 2027 02:21:29 +0000
asID:                     149705
IP address blocks:        103.184.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl
                          rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7b:9f:0f:5a:f7:68:00:95:26:d1:d4:d1:3f:bc:31:96:26:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E
        Validity
            Not Before: May  3 02:16:29 2026 GMT
            Not After : May  2 02:21:29 2027 GMT
        Subject: CN=5CE3F718C3A4E7E578AD098DA8BA422EC607B55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:5e:b8:e9:93:ac:b3:49:09:96:c0:ef:d0:
                    11:46:e6:db:ba:58:6d:c8:11:48:86:6b:af:57:02:
                    fa:b1:2c:09:75:e0:82:0b:ee:97:99:af:d9:52:59:
                    73:dc:89:c4:db:02:a0:51:8d:38:9f:52:05:6e:53:
                    6a:f5:cc:25:5f:ac:b0:01:3b:7c:d7:58:55:af:53:
                    e1:fb:b9:78:f9:d8:80:2a:6c:dd:97:66:e9:0d:39:
                    5b:a5:02:6e:43:10:e8:36:61:b6:5b:86:bd:87:88:
                    5e:19:4f:bc:4a:24:c4:b0:0e:f1:10:12:83:fa:24:
                    06:84:73:da:6b:58:2d:9d:d0:80:ca:2c:0e:ea:d7:
                    c6:d4:01:1f:99:aa:b6:2f:a4:6e:3b:03:03:47:2a:
                    4f:41:1b:2e:a4:4f:bf:55:db:89:af:33:69:08:e3:
                    2b:83:92:96:88:de:60:03:a5:28:3b:51:b6:eb:ee:
                    d6:a1:37:0c:41:4c:65:41:27:c8:11:d6:b2:c8:9d:
                    93:c7:0c:77:70:cf:21:94:78:49:53:58:7e:b4:a8:
                    ef:34:ff:22:b2:36:b3:33:af:cf:08:4a:a8:57:10:
                    9f:f9:4a:ec:b4:09:97:e7:5b:e0:23:4d:1a:a2:f5:
                    d7:94:e9:e0:18:03:e4:f3:fc:86:ed:19:05:47:59:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E3:F7:18:C3:A4:E7:E5:78:AD:09:8D:A8:BA:42:2E:C6:07:B5:5B
            X509v3 Authority Key Identifier:
                keyid:A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d4:19:dd:94:c8:5e:fe:1f:07:ca:3f:47:ef:a4:3c:a2:d2:
         94:df:f8:f3:30:5e:6b:dc:96:da:35:d1:5d:1f:83:fd:3b:16:
         e3:e0:ef:2b:21:52:4b:7a:70:15:32:cf:4a:40:7b:6b:07:8c:
         9f:72:a1:fa:0c:f7:8b:74:56:40:01:bd:7f:13:12:44:82:3d:
         25:78:75:42:4e:e7:5e:1d:27:2d:7c:2d:7a:30:fb:4c:c4:d3:
         19:b3:ec:a4:e3:ed:9e:41:35:34:b1:5b:68:ad:ea:5f:1c:0e:
         b4:bc:6b:66:f6:48:52:7b:0e:20:ef:f4:08:b0:d1:3d:f0:19:
         0b:0b:bc:61:44:f3:a9:18:64:df:32:f4:a2:f8:bc:84:9c:21:
         74:0b:35:76:90:02:af:36:f3:57:70:26:a9:bf:b3:dc:f4:cc:
         58:05:0a:30:e6:12:6c:70:c0:87:67:7b:68:9b:49:e6:cc:69:
         06:f9:c1:e6:4e:97:42:9d:04:ce:62:08:b4:53:f1:d4:72:66:
         ca:06:d0:d9:13:a7:3c:1b:b1:35:f1:6a:8d:cb:ea:cb:b8:fd:
         58:8a:91:86:8e:12:96:04:3a:d3:a9:59:c7:0f:8e:4b:c1:ca:
         b6:b1:cb:76:71:38:f7:c8:38:39:50:b8:c9:c8:c7:bc:23:9b:
         d6:f7:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:27:33 2026 by rpki-client