Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          qr0g5LVzrVb3dBi48fKGU2IZ+49TkkVc1Y82FpKn5Mk=
Subject key identifier:   95:51:4C:10:2B:48:25:FD:E8:6C:09:E8:E3:39:15:13:0A:C5:D1:66
Certificate issuer:       /CN=E83F205BF306DAF53F99D7D0596E19991D122A75
Certificate serial:       7CFEF0BDC6498F42753724EBF921F116BCC2150C
Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 03 May 2026 02:22:21 +0000
ROA not before:           Sun 03 May 2026 02:17:21 +0000
ROA not after:            Sun 02 May 2027 02:22:21 +0000
asID:                     139952
IP address blocks:        103.174.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl
                          rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fe:f0:bd:c6:49:8f:42:75:37:24:eb:f9:21:f1:16:bc:c2:15:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75
        Validity
            Not Before: May  3 02:17:21 2026 GMT
            Not After : May  2 02:22:21 2027 GMT
        Subject: CN=95514C102B4825FDE86C09E8E33915130AC5D166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:17:fa:31:7a:f7:9c:94:a1:3d:14:ea:78:
                    a7:be:86:11:8c:65:e4:31:dd:4c:e8:71:66:27:24:
                    3d:38:2f:fa:6c:21:24:95:88:af:58:ab:a7:34:66:
                    db:d7:d2:c9:cf:f6:33:31:01:55:17:d6:c8:97:4f:
                    e6:b5:c2:0b:bd:5c:6e:bd:00:42:77:c9:d7:44:8d:
                    f7:63:70:35:b6:d1:64:2a:d9:82:26:8c:d5:c8:ed:
                    ef:57:38:10:48:e0:e8:1d:e4:dd:e0:84:e8:fa:3a:
                    03:dc:73:0b:2c:2c:a7:ba:5f:6c:cf:23:5b:d4:c9:
                    d4:3c:91:6b:94:33:10:57:7b:ed:10:03:0e:36:3b:
                    58:37:31:1b:2c:c4:7c:12:4e:05:af:40:a7:c0:fc:
                    af:d5:81:4b:98:a1:09:35:d0:69:ea:79:2d:8e:f6:
                    d1:6c:4b:87:e1:19:fb:2a:8c:8e:08:90:e5:a4:bc:
                    8f:f2:ec:7c:93:7a:68:d4:23:7f:2f:ad:0e:37:8a:
                    aa:68:2a:3e:40:9c:6f:c5:e1:ad:93:ab:9b:83:8d:
                    ba:33:1c:e9:2d:1d:11:4d:3a:3f:d6:43:57:8d:2a:
                    1c:fc:99:5f:29:6c:a3:37:92:12:db:a6:f0:78:0d:
                    2a:84:04:b2:65:bb:d9:e4:0e:66:53:fc:36:76:01:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:4C:10:2B:48:25:FD:E8:6C:09:E8:E3:39:15:13:0A:C5:D1:66
            X509v3 Authority Key Identifier:
                keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:27:a8:a3:9e:e1:ac:0f:e5:be:95:c0:24:9c:47:1e:79:83:
         fa:1f:7b:de:4d:98:94:5f:35:2c:ac:68:01:4c:69:b5:bb:e9:
         6b:73:b8:0b:26:00:30:36:30:a4:9a:62:7e:de:80:0b:60:f6:
         aa:cb:1b:82:8f:86:29:e9:c2:fd:60:43:4e:67:47:de:d3:ea:
         fd:84:0d:68:da:80:2b:42:e8:c2:35:2a:ac:34:19:da:a9:9b:
         94:89:da:11:4b:e4:38:8a:16:df:59:63:1d:57:f4:94:dc:f5:
         1b:5b:a4:de:c7:9d:7c:ba:4d:e5:38:88:fe:65:b0:5c:6a:b8:
         f5:df:4e:5e:70:1f:85:dd:89:06:b5:13:97:ee:5a:0a:a5:7d:
         bb:31:9f:10:15:33:90:e3:56:7a:42:d3:bc:96:22:fe:c1:99:
         95:7c:e5:e4:92:d7:f2:c1:76:5e:f7:e4:52:7c:91:9a:65:d1:
         7b:1d:63:dc:70:91:10:64:d6:bb:32:a7:10:66:41:6d:ca:03:
         e2:4b:cd:09:17:e9:d6:2b:e3:ba:d0:a4:b7:d1:cf:b8:2f:e3:
         06:b4:1b:1a:85:54:d0:16:4b:f7:81:fb:be:e9:9c:f4:7a:5e:
         b6:80:a1:cd:89:5f:5f:19:9e:d3:d4:7a:1d:29:91:31:6d:73:
         76:8b:d5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:38 2026 by rpki-client