Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa
File:                     3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (raw, json)
Hash identifier:          x+7pzkIkAAYum6CK13j4jNfXi0Fn68V8sWzEUq8++EQ=
Subject key identifier:   24:DA:3C:0F:1B:4F:02:1A:7F:C5:FE:1D:35:81:20:7E:8D:27:3E:BA
Certificate issuer:       /CN=D14C74B06D9A4D3A47662DA76625CD3537D00471
Certificate serial:       1A73DD93D04398292ECAE9986CA70B5D245E89D3
Authority key identifier: D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa
Signing time:             Sun 03 May 2026 02:25:27 +0000
ROA not before:           Sun 03 May 2026 02:20:27 +0000
ROA not after:            Sun 02 May 2027 02:25:27 +0000
asID:                     150284
IP address blocks:        103.43.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl
                          rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:73:dd:93:d0:43:98:29:2e:ca:e9:98:6c:a7:0b:5d:24:5e:89:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14C74B06D9A4D3A47662DA76625CD3537D00471
        Validity
            Not Before: May  3 02:20:27 2026 GMT
            Not After : May  2 02:25:27 2027 GMT
        Subject: CN=24DA3C0F1B4F021A7FC5FE1D3581207E8D273EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:c3:46:04:02:d7:1d:37:eb:9f:4e:ad:e3:
                    29:6b:c1:a4:11:44:d9:3b:3d:e3:a2:f4:44:01:0f:
                    0a:58:fb:9d:b1:08:0e:99:55:a2:97:5f:16:5b:3e:
                    aa:f2:56:a4:57:7a:18:d1:a2:b4:ae:5f:67:6e:71:
                    c5:da:b6:a6:b2:20:12:4a:5a:98:bf:8d:91:a9:0c:
                    ea:94:81:ec:b9:d4:78:6a:13:07:8c:1a:0d:dc:0f:
                    2d:00:88:93:6e:17:23:05:91:ac:ec:83:0e:c6:92:
                    d4:24:44:3a:da:06:0d:5c:b4:e3:88:df:66:d2:47:
                    59:4a:e1:a2:b8:94:51:a2:d5:9d:fb:da:fe:a8:85:
                    a7:98:ff:65:cb:c7:2d:a1:7c:52:d4:14:30:6a:3d:
                    de:3e:40:58:41:23:bd:53:99:f3:bd:e3:12:a0:99:
                    af:90:76:51:49:0e:c3:2c:aa:65:19:13:22:9a:33:
                    9e:bc:04:32:a9:57:04:09:16:d6:05:74:90:a1:82:
                    3e:43:19:19:32:87:63:5b:2f:24:4a:dc:09:a4:6d:
                    66:ab:22:60:32:ec:13:70:76:3a:82:55:46:7d:be:
                    97:70:d1:86:c6:d9:f7:2f:66:e3:3a:bf:f8:87:3d:
                    09:06:95:b3:95:5a:3e:cb:92:b8:8a:7a:de:6d:7c:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DA:3C:0F:1B:4F:02:1A:7F:C5:FE:1D:35:81:20:7E:8D:27:3E:BA
            X509v3 Authority Key Identifier:
                keyid:D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:9d:ae:93:ba:f6:f6:11:ee:40:65:1e:4c:2f:79:88:97:
         a0:eb:22:e4:c9:5d:71:fc:55:27:2b:4c:98:06:86:08:a2:20:
         7f:78:76:59:5c:99:7c:ae:03:13:2b:66:36:ed:df:d2:b1:5f:
         68:7d:02:48:9a:60:de:04:e6:c4:79:df:ad:f5:65:11:7e:48:
         8b:5e:aa:a8:be:4e:f1:aa:78:25:ba:6d:de:1e:69:ec:20:be:
         74:a6:f6:8e:37:43:0f:9a:30:27:46:f2:99:53:c6:57:ac:0b:
         7e:74:ff:eb:9b:0c:d1:00:e6:bc:7f:38:2d:d1:12:2a:aa:2c:
         48:00:46:35:9e:09:80:ac:57:54:a8:af:65:f2:9b:4d:4c:ed:
         95:dc:5e:72:81:e8:e8:53:bb:fe:db:67:66:b0:42:09:d0:96:
         c4:28:75:f3:8b:58:ef:eb:4a:cd:e4:d5:a6:b0:75:70:93:dd:
         77:0d:31:32:fc:7b:55:56:74:2f:c6:65:07:b7:d9:22:e2:6a:
         98:d8:7e:37:6b:65:7b:a1:7a:ab:7c:43:c8:f1:51:a8:8b:e5:
         ec:b9:9a:60:24:0c:19:72:62:ce:e3:eb:a0:b9:a0:ea:69:33:
         46:35:33:1e:42:d8:96:c9:4e:0a:23:8b:4d:8c:df:0c:c9:36:
         c7:7c:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:07 2026 by rpki-client