Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa
File:                     3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          TPW+wzv6R4csOJ2PImY52pnN2yFzhEnBxHBg+BSEr/8=
Subject key identifier:   C9:52:59:4E:06:F6:D2:3D:83:07:1B:2B:7F:33:18:A8:72:D8:78:8C
Certificate issuer:       /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505
Certificate serial:       3A3519C5476BA7CFAF62F5F004AE044CC93FFAE9
Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa
Signing time:             Sun 03 May 2026 02:26:51 +0000
ROA not before:           Sun 03 May 2026 02:21:51 +0000
ROA not after:            Sun 02 May 2027 02:26:51 +0000
asID:                     131769
IP address blocks:        103.177.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl
                          rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:35:19:c5:47:6b:a7:cf:af:62:f5:f0:04:ae:04:4c:c9:3f:fa:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505
        Validity
            Not Before: May  3 02:21:51 2026 GMT
            Not After : May  2 02:26:51 2027 GMT
        Subject: CN=C952594E06F6D23D83071B2B7F3318A872D8788C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:e5:e1:7b:ba:b9:92:e0:c3:19:f9:79:d4:
                    c9:25:3e:e7:dd:58:49:7f:73:00:2a:63:d1:c6:ea:
                    3b:e6:da:3b:99:f2:40:ed:59:b3:bc:5f:15:07:c2:
                    7c:e4:86:7b:72:9e:13:6a:a9:db:23:57:1e:13:49:
                    dc:5e:ac:d8:2f:64:da:36:16:e0:37:88:fc:9c:bc:
                    25:3f:bc:e2:9c:89:e8:80:0f:5b:07:ba:ec:fa:0f:
                    fd:79:c7:55:79:b6:c9:6e:95:0c:ec:ed:4e:a5:47:
                    0a:c8:a4:61:ad:9a:42:95:9e:65:04:61:c1:8a:e2:
                    0c:45:b2:9e:57:d8:26:95:ce:ca:83:10:ae:13:27:
                    8b:78:63:6c:67:61:5f:37:6b:a7:0b:2e:b7:f3:f5:
                    51:6c:1b:fd:1f:d2:12:53:1b:19:8a:88:68:e7:4c:
                    9c:a7:87:ff:6e:03:60:32:43:56:24:0a:3a:40:8d:
                    cf:84:88:93:47:7d:f8:99:81:cc:aa:3b:7c:ea:26:
                    2a:c5:fa:4c:c9:77:d6:ed:c6:94:66:72:9d:e9:16:
                    af:fc:d4:9f:aa:70:a5:7f:f6:cd:21:6c:cd:2e:33:
                    92:d5:62:5e:e5:f4:21:8a:dd:fc:64:e1:c6:6b:7f:
                    5e:ff:57:ca:f4:72:63:59:96:f0:83:84:51:9b:de:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:52:59:4E:06:F6:D2:3D:83:07:1B:2B:7F:33:18:A8:72:D8:78:8C
            X509v3 Authority Key Identifier:
                keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:73:90:6c:95:33:4b:ee:bf:5d:8c:d8:ee:d6:c4:bc:46:
         21:74:12:ba:5b:8b:28:cd:94:62:09:ef:c7:c0:95:fc:04:55:
         05:ea:3e:c0:09:25:5a:b9:82:73:22:30:cf:75:2a:46:d9:38:
         d5:18:31:eb:65:ad:4a:fc:f9:46:80:dc:5b:ba:7f:ed:a8:20:
         18:49:99:fd:9a:b7:fd:15:6e:1a:06:ae:bd:78:e3:51:0c:69:
         43:b8:b3:31:94:60:5b:21:58:4e:50:67:f0:7b:aa:ed:46:40:
         42:30:bf:78:49:70:ff:e3:0a:38:36:10:0a:b9:4f:23:f3:ac:
         77:2b:e8:07:ca:5d:9d:de:e1:a6:b7:4d:4e:c5:f4:b3:08:1a:
         0a:76:75:ef:76:89:97:5f:cd:70:b3:65:4d:04:7c:ba:fe:3a:
         c5:54:ad:ff:fd:02:17:c2:61:ae:7c:53:94:a1:60:49:4b:94:
         a0:52:4a:79:e5:38:31:20:bd:5c:dd:32:4c:ae:07:08:15:92:
         24:eb:4d:73:26:65:c1:62:10:e4:ce:50:f6:7b:ed:fa:38:c0:
         5d:91:37:9a:3c:ca:ab:a7:a7:b6:ff:5f:96:f8:79:00:b5:48:
         15:df:71:05:10:4b:73:7e:63:7e:2d:3f:80:72:a8:ec:21:d7:
         fc:4f:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:19:56 2026 by rpki-client