Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa
File:                     3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier:          umbo3UO1surjjSvNZv8AZicuTRNi2hpCJFPh1PPiOEw=
Subject key identifier:   94:A8:0D:4E:3A:D5:D7:E5:5D:F2:18:DD:3F:3F:5C:BE:5C:38:C5:99
Certificate issuer:       /CN=218F42D6775F39C04AD2042E61C557053D4A69FE
Certificate serial:       29E5B79484818FDEE8B4BE32E8AB0504F50ADBC2
Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa
Signing time:             Sun 03 May 2026 02:25:31 +0000
ROA not before:           Sun 03 May 2026 02:20:31 +0000
ROA not after:            Sun 02 May 2027 02:25:31 +0000
asID:                     140423
IP address blocks:        103.181.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl
                          rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e5:b7:94:84:81:8f:de:e8:b4:be:32:e8:ab:05:04:f5:0a:db:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE
        Validity
            Not Before: May  3 02:20:31 2026 GMT
            Not After : May  2 02:25:31 2027 GMT
        Subject: CN=94A80D4E3AD5D7E55DF218DD3F3F5CBE5C38C599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:74:b7:1b:dd:05:b0:a6:af:21:39:a5:73:
                    53:0d:8c:f9:ad:67:66:87:70:cd:ca:d7:5b:e5:a1:
                    77:cc:7f:39:2a:b8:23:1e:d1:3d:ab:a3:0d:03:56:
                    ac:6d:5f:11:6f:f9:21:bb:91:87:55:22:ee:5d:b3:
                    a2:29:e4:a1:7d:54:85:cb:25:8c:93:e8:a9:69:71:
                    73:ed:84:e0:2e:1e:ff:9e:a0:87:9d:e3:cc:81:78:
                    a6:ad:90:77:f7:d2:d9:8f:1a:e8:53:8b:70:79:f7:
                    88:fd:17:71:1f:a4:e8:69:27:3b:06:b0:b1:a4:df:
                    c8:d0:26:a6:fd:f9:34:03:6d:ee:1a:06:a0:d2:44:
                    7a:a9:ca:f0:da:17:08:bf:39:f2:95:5c:2c:f6:df:
                    77:91:18:dd:92:ab:6a:03:1f:ca:cc:af:c0:43:47:
                    5f:5b:3a:26:fa:0e:1e:b9:0a:a8:b3:08:c4:5f:51:
                    f2:fb:3e:42:e0:e7:60:f9:f2:08:1e:26:85:6e:49:
                    48:76:cc:43:6e:75:11:f4:51:44:7e:c1:a8:c2:8d:
                    7a:23:c2:5d:c0:d1:2b:68:a0:07:58:dd:35:3a:bf:
                    61:79:d4:bf:4a:1b:74:19:a7:db:1d:e7:b4:9f:eb:
                    ba:72:9f:f5:26:78:e7:59:e0:89:78:9d:b9:f5:9f:
                    fa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A8:0D:4E:3A:D5:D7:E5:5D:F2:18:DD:3F:3F:5C:BE:5C:38:C5:99
            X509v3 Authority Key Identifier:
                keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:25:40:32:03:56:51:ce:19:7f:37:83:54:9c:84:c0:99:ec:
         c0:d0:9e:e8:9b:dc:80:f2:62:33:fa:42:21:23:fe:eb:55:f2:
         75:0b:e9:21:a1:0c:84:ea:73:8e:9b:1b:e3:b1:67:14:ba:0c:
         42:bc:29:94:07:25:de:0d:ef:6f:e3:20:7f:74:08:5a:af:2a:
         a3:b9:17:71:c5:77:b1:c3:8f:1f:44:b0:be:1d:43:56:6a:86:
         0e:7e:90:99:5e:8b:57:cb:41:a4:45:dc:2b:b8:13:e3:80:e6:
         e1:a7:c8:b6:92:41:92:ad:18:5f:b2:46:0d:10:7b:a4:44:b1:
         23:9f:96:dc:8a:55:f8:27:d7:37:2b:66:72:19:d8:3c:fc:61:
         d7:79:5f:86:58:e7:fd:fe:0e:c3:0e:69:e9:9e:39:fb:6c:6a:
         d1:57:eb:b3:30:f6:46:b4:00:a9:87:4a:a7:a4:e0:2e:c1:d3:
         ff:a0:f4:6f:f3:bc:91:56:48:2b:7c:ec:ca:3d:7d:7b:c2:75:
         1b:f8:9d:5a:1a:51:37:58:31:ae:43:d9:0e:ad:e5:44:ea:e3:
         ba:e8:c4:05:7e:80:e3:5f:7b:7f:7b:22:cd:ea:4a:ab:bb:22:
         2b:53:f4:9b:7c:6c:3d:87:5a:fa:b5:3f:79:1a:a7:32:ed:34:
         83:e0:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:56 2026 by rpki-client