Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/3130332e36372e39312e302f32342d3234203d3e20313532303035.roa
File:                     3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (raw, json)
Hash identifier:          /Da4Pm0aCGjoevGiiRcx0Xt7whtWvoaG8WYvVgD2NtQ=
Subject key identifier:   43:22:20:53:A5:5F:F9:B7:D9:CA:E9:5C:17:C8:6A:BF:E1:1E:F9:9A
Certificate issuer:       /CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E
Certificate serial:       62E46E3835561A17268FEC2004D67F572CFE350A
Authority key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/3130332e36372e39312e302f32342d3234203d3e20313532303035.roa
Signing time:             Sun 03 May 2026 02:25:53 +0000
ROA not before:           Sun 03 May 2026 02:20:53 +0000
ROA not after:            Sun 02 May 2027 02:25:53 +0000
asID:                     152005
IP address blocks:        103.67.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl
                          rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e4:6e:38:35:56:1a:17:26:8f:ec:20:04:d6:7f:57:2c:fe:35:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E
        Validity
            Not Before: May  3 02:20:53 2026 GMT
            Not After : May  2 02:25:53 2027 GMT
        Subject: CN=43222053A55FF9B7D9CAE95C17C86ABFE11EF99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:3c:4f:db:f1:0b:44:86:d7:78:62:c2:0b:
                    0c:5c:72:89:60:23:e8:f2:30:e6:b3:2a:87:09:10:
                    d5:a3:4d:02:74:0a:c7:4c:fc:0c:3b:e1:19:3d:50:
                    e5:df:5c:6a:4b:f3:f6:54:e7:cd:ba:29:17:77:8a:
                    a5:60:ed:e8:1a:f4:bc:2f:80:0f:25:7e:73:9f:5f:
                    98:42:67:12:09:bb:13:52:b1:85:bb:e6:fc:90:b6:
                    b9:d7:eb:f3:94:23:43:a4:a8:4f:7f:7a:57:2e:eb:
                    10:64:7d:bf:8b:ab:3f:ed:54:ec:9a:53:17:9a:14:
                    01:00:1b:f1:d4:af:61:7d:0d:1b:95:82:b9:68:9e:
                    d2:84:02:0b:11:31:27:cc:24:f1:07:ea:c5:4b:89:
                    da:0e:8e:bb:5f:6f:ad:21:4c:25:d9:a8:77:ae:dd:
                    99:2d:63:02:a9:7d:9a:00:30:b4:34:6b:c0:45:8b:
                    58:99:e0:94:cb:84:8e:91:66:df:28:e2:16:d3:d4:
                    91:ad:e7:b7:c4:95:53:26:20:36:3a:b3:43:5d:e3:
                    b4:b3:d7:a8:59:4f:15:26:a7:96:dd:77:c2:2c:9e:
                    04:e5:bb:84:a0:21:f4:9e:37:34:90:f6:3c:91:3d:
                    b7:6d:e4:73:06:51:24:3e:9c:5f:d9:95:f4:41:8e:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:22:20:53:A5:5F:F9:B7:D9:CA:E9:5C:17:C8:6A:BF:E1:1E:F9:9A
            X509v3 Authority Key Identifier:
                keyid:2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/3130332e36372e39312e302f32342d3234203d3e20313532303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:9e:cb:a0:a6:93:4a:a5:0b:af:14:40:8f:2d:3c:17:97:
         a6:ba:14:37:fd:b4:5d:13:f8:9c:da:4f:d6:f8:4a:4b:ec:18:
         40:ec:dd:8a:d6:60:8d:9c:d1:5a:9f:02:cd:3b:97:10:9a:89:
         29:27:0b:f3:3c:df:33:5b:ad:2d:d8:0a:bb:f2:8c:02:72:05:
         8d:9c:62:d9:58:8d:ce:e5:52:48:5d:f9:e3:05:62:0c:e4:60:
         2b:69:01:eb:66:5f:e8:94:28:cb:18:39:a4:e4:88:35:9e:c6:
         84:a5:da:ed:bd:75:87:94:15:83:ef:44:19:45:78:ff:cc:0a:
         10:8a:d4:5a:a2:7e:b0:17:91:d5:1b:a7:9e:eb:f2:a0:19:fd:
         16:dd:be:74:87:bb:52:71:72:0d:7d:92:d9:04:6e:4b:19:0d:
         cd:14:33:f2:e5:3f:ab:2f:fc:4c:9a:73:07:cf:f0:21:1c:8c:
         c6:36:bc:ce:8a:2c:23:51:07:93:ee:a6:ab:6c:2c:57:e9:21:
         c3:9d:9c:6e:ca:e3:26:68:5c:ea:67:93:89:ba:04:8c:53:f3:
         d4:b7:e1:ad:a9:ae:67:22:97:38:b5:3c:62:fd:89:ad:f8:9d:
         c8:b5:1d:b9:af:9c:20:f9:b4:66:6d:8b:cc:ba:c1:64:aa:1e:
         18:77:78:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:11 2026 by rpki-client