Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/3130332e3138332e362e302f32332d3234203d3e20313439343037.roa
File:                     3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (raw, json)
Hash identifier:          w+XxfdGQbvXdRZjpGQCwUdlhFyEQmevCuv9dcfZGuKE=
Subject key identifier:   50:A5:BF:8B:0E:CA:DB:03:37:05:12:43:21:78:81:DF:0B:33:16:4E
Certificate issuer:       /CN=8B57121B495DA86939D79B7BA261CF6D38C999CF
Certificate serial:       4BB322C90C5EA16884CB2C9E55D7FBFB6503DF2D
Authority key identifier: 8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/3130332e3138332e362e302f32332d3234203d3e20313439343037.roa
Signing time:             Sun 03 May 2026 02:27:56 +0000
ROA not before:           Sun 03 May 2026 02:22:56 +0000
ROA not after:            Sun 02 May 2027 02:27:56 +0000
asID:                     149407
IP address blocks:        103.183.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl
                          rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b3:22:c9:0c:5e:a1:68:84:cb:2c:9e:55:d7:fb:fb:65:03:df:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B57121B495DA86939D79B7BA261CF6D38C999CF
        Validity
            Not Before: May  3 02:22:56 2026 GMT
            Not After : May  2 02:27:56 2027 GMT
        Subject: CN=50A5BF8B0ECADB0337051243217881DF0B33164E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:31:92:5f:1c:e2:45:ba:8d:fc:4a:2f:7a:
                    b5:36:0f:a8:8e:47:a4:25:7c:cf:e5:ab:5d:70:ac:
                    29:e8:87:4e:55:51:91:7c:90:11:57:cb:c1:ee:3d:
                    0b:58:95:88:19:2c:1f:e6:f7:80:28:1a:1f:3b:7c:
                    58:df:34:0c:fd:41:72:09:b8:90:77:2d:4a:56:f4:
                    19:68:b9:95:01:d6:55:13:26:8f:2d:8b:95:16:10:
                    a7:5f:bc:6d:f3:51:b7:c4:7e:22:c8:9f:c6:65:f7:
                    85:0c:63:72:3b:c4:08:7e:d0:6e:16:da:86:a5:e5:
                    8f:c7:8e:30:6f:ef:a8:4f:e9:37:1e:85:a3:a1:4e:
                    c8:7f:71:92:a7:89:c4:b1:70:16:d6:cc:5e:e7:eb:
                    71:b8:1f:b8:63:84:e3:dd:b8:87:35:ae:e2:5b:c7:
                    68:c8:fb:cc:8c:ef:92:97:08:b9:fa:e9:0e:31:10:
                    4c:04:99:8a:78:2c:65:d2:d5:2e:eb:3b:59:95:5e:
                    ee:7f:94:ee:5b:fe:1d:6a:ad:12:7b:83:f8:44:76:
                    00:d9:fa:76:c2:a1:48:48:7f:3d:3a:7c:4d:35:a4:
                    ee:00:6c:d3:af:94:9e:ad:d9:cd:6b:19:4e:96:b4:
                    22:16:20:15:1e:35:91:4b:43:2e:df:c4:1f:7f:f0:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A5:BF:8B:0E:CA:DB:03:37:05:12:43:21:78:81:DF:0B:33:16:4E
            X509v3 Authority Key Identifier:
                keyid:8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/3130332e3138332e362e302f32332d3234203d3e20313439343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:1b:df:d8:14:c0:a8:7e:27:13:e4:a1:1b:d3:86:ee:92:
         ac:48:a9:98:95:b4:77:a7:58:28:4f:b4:29:7a:ae:61:10:f6:
         46:db:c7:c3:cf:f9:3e:f3:61:bd:56:b6:07:c5:71:4c:f8:90:
         1a:33:2a:d9:74:4a:04:57:2b:8c:9f:d7:34:6b:33:d7:c5:33:
         e7:9c:60:25:92:e7:27:27:74:4b:41:22:b3:f5:b4:d8:90:ca:
         d8:74:30:d3:fd:7e:f1:0f:01:4a:ca:e7:60:58:90:8e:c1:2c:
         39:27:85:9f:37:7c:15:c8:08:56:e6:c8:0e:6a:54:a7:a8:07:
         28:7d:1f:f6:bb:6c:39:88:a3:c2:22:96:68:54:ae:0f:c1:da:
         ca:c1:39:2a:d6:2b:81:92:e6:55:8e:7d:e6:67:01:7f:63:9a:
         cb:eb:39:86:f6:ac:04:0f:52:db:54:80:4b:6c:2f:3a:8a:e4:
         e2:7d:51:17:49:c6:0e:a6:b3:70:83:86:b9:68:66:de:25:4a:
         90:22:21:6c:38:83:b0:56:ea:3f:f3:48:8e:ff:2a:cd:c6:3b:
         6e:aa:8b:b4:34:b2:9f:8f:c3:43:dc:02:6c:e7:60:f7:54:f1:
         2a:ad:ec:35:9c:be:d7:e2:ed:6d:83:e1:d6:78:30:39:81:55:
         d8:14:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:53:16 2026 by rpki-client