Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa
File:                     3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (raw, json)
Hash identifier:          KV+jDI5u7NDFg1jUUu5ndk8c7SwXpZDQJflp05ARGsU=
Subject key identifier:   79:AB:D3:44:6D:79:E5:5C:82:7B:99:B7:E3:54:65:19:9C:DE:50:9D
Certificate issuer:       /CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9
Certificate serial:       4C85B244B0AF78CE7CEE13DFD5D0287C080A4946
Authority key identifier: 1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa
Signing time:             Sun 03 May 2026 02:26:11 +0000
ROA not before:           Sun 03 May 2026 02:21:11 +0000
ROA not after:            Sun 02 May 2027 02:26:11 +0000
asID:                     147076
IP address blocks:        103.189.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl
                          rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:85:b2:44:b0:af:78:ce:7c:ee:13:df:d5:d0:28:7c:08:0a:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9
        Validity
            Not Before: May  3 02:21:11 2026 GMT
            Not After : May  2 02:26:11 2027 GMT
        Subject: CN=79ABD3446D79E55C827B99B7E35465199CDE509D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:80:68:6e:98:b0:04:65:08:76:11:6a:71:
                    00:17:be:58:69:73:47:52:a8:ea:a7:5e:8b:c4:67:
                    eb:31:f0:62:bf:9a:6b:1d:df:e2:8a:ac:40:57:65:
                    bd:41:eb:60:f8:a5:18:dc:a6:18:bb:25:65:b8:67:
                    3a:b2:d3:85:29:cf:9b:b2:0d:1e:cc:fc:d2:ea:71:
                    54:14:b9:d1:b1:9e:88:d5:03:fd:26:83:53:e3:c0:
                    21:e4:25:47:97:3b:b3:2d:85:2e:4b:7b:28:be:cc:
                    fa:a3:90:14:d0:fc:d2:9f:ef:06:5d:9b:b1:b8:ba:
                    32:b2:96:1d:bd:72:34:4a:47:25:f2:64:e3:fc:07:
                    ba:9d:d9:1a:73:71:2c:31:9b:d1:c5:b8:7f:89:d1:
                    5c:f4:1c:3c:fc:be:97:0d:4d:98:33:40:85:6d:c1:
                    7b:38:fa:b1:9c:9a:2a:85:0d:8f:c2:54:28:b5:00:
                    eb:fe:57:02:29:61:5d:88:af:3c:cf:94:2c:46:d9:
                    d1:7b:3e:33:90:1e:a7:1c:ec:f9:37:6b:16:1c:4a:
                    84:3f:5b:1e:85:5a:4c:ef:4b:58:a8:c2:aa:16:65:
                    73:a5:a8:f0:ab:b6:cc:f6:9d:68:3a:80:2e:9e:23:
                    3e:42:73:9a:fd:99:d4:ce:77:70:a2:b3:bd:d3:0a:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:D3:44:6D:79:E5:5C:82:7B:99:B7:E3:54:65:19:9C:DE:50:9D
            X509v3 Authority Key Identifier:
                keyid:1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:5e:1a:8d:ff:01:27:0e:07:dc:d6:11:b7:fd:5f:d0:ec:e3:
         e4:f6:0f:ac:6e:12:1e:07:37:cf:3a:a6:6b:29:b4:ef:5e:8f:
         a9:a5:a9:9a:82:8a:88:ed:74:87:60:b1:68:3a:2e:24:27:f2:
         d3:c6:06:40:9c:1a:df:3a:47:c8:bc:ab:08:52:f4:0b:99:d5:
         fb:38:a3:ad:0e:96:4a:9a:ff:94:94:0b:9d:2b:2c:ec:65:93:
         4a:69:34:2a:41:ef:38:b5:b9:95:1b:af:6e:83:21:46:5d:40:
         83:b2:44:06:11:e8:8d:7f:1c:58:3e:92:9a:6d:73:2d:57:b8:
         59:f9:91:ea:80:c9:73:53:43:c6:07:d6:9c:eb:fc:91:0d:27:
         64:13:82:6c:06:49:e9:aa:db:44:b1:27:be:c3:87:f8:ce:c1:
         e0:84:14:66:2c:85:0e:0f:e8:67:7a:79:fc:e9:3a:41:46:ae:
         15:4c:0c:dd:f7:32:4c:2d:d6:a7:b9:91:7f:ec:34:87:03:ff:
         73:bf:f9:12:30:9d:34:ca:4c:ec:7d:eb:ac:b6:87:8b:de:0d:
         64:18:f2:a2:dd:fd:34:e3:23:d6:36:7c:14:58:f8:48:4e:d2:
         7e:9c:b2:31:01:b1:80:7c:5e:d5:39:e2:7c:0c:59:ef:ab:ae:
         3a:d4:85:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:27:16 2026 by rpki-client