Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa
File:                     3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (raw, json)
Hash identifier:          oKwdl6Jbw0xgOvJgUIdnZaW+/Jj7haWqiuhnRZR2agc=
Subject key identifier:   F2:80:B7:7F:A3:A9:A2:C6:E2:C3:0A:5E:21:51:F2:F4:A8:DB:32:FB
Certificate issuer:       /CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
Certificate serial:       6A4DF95DC9817C8E0D420EAA871A41033A0DF911
Authority key identifier: E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa
Signing time:             Sun 03 May 2026 02:29:02 +0000
ROA not before:           Sun 03 May 2026 02:24:02 +0000
ROA not after:            Sun 02 May 2027 02:29:02 +0000
asID:                     150940
IP address blocks:        103.101.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl
                          rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4d:f9:5d:c9:81:7c:8e:0d:42:0e:aa:87:1a:41:03:3a:0d:f9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF
        Validity
            Not Before: May  3 02:24:02 2026 GMT
            Not After : May  2 02:29:02 2027 GMT
        Subject: CN=F280B77FA3A9A2C6E2C30A5E2151F2F4A8DB32FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:22:ab:7f:8a:40:ac:fc:04:dd:05:90:4e:
                    4d:7e:e7:85:ee:77:e9:8e:4d:bf:97:d1:0a:fe:8c:
                    5d:0b:e4:23:1c:4a:0c:72:90:9a:2c:16:5b:75:07:
                    37:18:52:2a:4e:08:08:fc:f8:72:ae:da:cc:f8:21:
                    0f:26:35:f5:52:a9:63:ae:ba:0b:f6:f4:29:aa:2c:
                    10:aa:38:45:a6:b6:d2:16:30:37:10:c0:b9:cb:0e:
                    b7:55:61:d5:a9:7b:95:71:92:d1:90:ed:5b:08:ba:
                    2b:f7:8d:4f:83:55:c8:1b:91:02:ef:68:fb:ef:9e:
                    9b:a1:a7:63:a6:d4:3a:2a:d9:46:f5:ac:8c:ed:c2:
                    fa:e3:9a:cd:19:4b:2b:1d:65:09:24:71:0e:ec:26:
                    2f:02:e2:b4:f9:da:d9:74:87:92:6b:96:cd:c2:d2:
                    e9:7a:bc:27:0f:70:e2:c2:86:dc:65:9d:60:8b:c2:
                    09:3d:9a:a3:92:61:eb:f4:69:30:e0:c5:1a:42:bd:
                    6e:56:97:02:02:21:c4:d5:87:03:91:9e:36:7b:f9:
                    a4:e4:5a:c5:c2:18:9a:05:4a:df:46:f7:59:c9:f0:
                    55:97:07:b3:c2:06:a6:23:a3:de:53:9f:3f:e5:57:
                    fc:c9:21:b4:d8:bc:1f:7b:23:d7:5f:78:03:94:4b:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:B7:7F:A3:A9:A2:C6:E2:C3:0A:5E:21:51:F2:F4:A8:DB:32:FB
            X509v3 Authority Key Identifier:
                keyid:E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:47:cd:32:49:e1:d3:c5:4d:8f:49:04:f1:70:0d:7f:b5:7e:
         5c:d4:dd:7c:66:17:44:d5:91:f6:b8:18:30:da:a9:7d:37:a9:
         f6:1e:7c:a9:3a:75:30:59:f5:cb:03:8e:26:09:82:c7:b4:47:
         f3:16:e8:f7:b6:a6:27:f0:92:58:72:14:37:1e:df:e8:ab:1a:
         b6:f2:79:16:03:a8:70:50:26:c2:b8:55:ad:31:a1:b3:56:b5:
         69:ed:91:b5:43:88:be:b1:0d:ba:6c:66:82:25:69:1e:61:68:
         68:66:ee:fe:09:07:6c:df:af:a9:81:77:77:dd:20:e1:a1:9e:
         fa:7f:e2:b3:7f:c4:14:80:88:39:4f:89:78:f4:97:8e:f0:2a:
         6d:d9:fb:0f:f1:77:a0:68:0b:3a:1c:d2:c1:9e:73:f4:90:d1:
         34:70:e0:41:cb:9a:91:dc:e6:01:d9:25:d5:61:c8:5c:d4:ef:
         06:34:4f:cd:93:a0:f0:1f:bc:d9:3f:34:42:00:91:08:c7:53:
         69:ec:09:5f:ad:60:10:b7:fb:5b:c5:17:63:43:60:37:5c:7b:
         3c:48:cd:0e:6d:4e:40:1c:0a:fc:6a:e0:17:e0:b5:ea:42:8d:
         50:61:08:d1:2f:bb:48:af:51:bf:c2:b3:f2:d2:2c:d3:e7:17:
         36:5f:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:23 2026 by rpki-client