Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa
File:                     3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (raw, json)
Hash identifier:          PDocKRP/axnGK/2hTz0jcOJCSSzSK6wE612ykd5rfc4=
Subject key identifier:   AC:EE:E5:90:2A:27:FD:15:49:CB:C2:37:D6:71:21:FD:17:9A:6A:F0
Certificate issuer:       /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434
Certificate serial:       608BA3BDEE0AEECB11B537C22E7D026F6B580CD1
Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa
Signing time:             Sun 03 May 2026 02:29:23 +0000
ROA not before:           Sun 03 May 2026 02:24:23 +0000
ROA not after:            Sun 02 May 2027 02:29:23 +0000
asID:                     147128
IP address blocks:        103.176.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl
                          rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8b:a3:bd:ee:0a:ee:cb:11:b5:37:c2:2e:7d:02:6f:6b:58:0c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434
        Validity
            Not Before: May  3 02:24:23 2026 GMT
            Not After : May  2 02:29:23 2027 GMT
        Subject: CN=ACEEE5902A27FD1549CBC237D67121FD179A6AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:f5:bf:18:03:19:75:be:1f:62:05:8f:f7:
                    5b:04:4b:74:21:c7:3f:3f:20:42:ab:39:4d:a6:9e:
                    72:cf:36:35:c0:32:ef:61:fd:5f:5e:da:a7:d3:d3:
                    15:0f:05:24:46:ee:a2:0b:21:89:71:09:2d:db:60:
                    70:1f:b3:95:1e:ab:24:9b:ed:e6:eb:e4:5e:23:df:
                    0d:d8:ec:dd:ba:d0:f0:75:eb:94:a8:6e:a7:f8:55:
                    9e:4a:5e:5d:59:4d:4b:a5:ed:c0:bd:c4:c0:06:2e:
                    0a:0a:11:09:e1:33:70:7d:dd:92:48:b5:8f:c3:11:
                    c1:71:a6:2f:d7:20:41:f3:c1:4e:c3:d0:b7:4c:a1:
                    0a:12:67:a9:7e:2d:c6:72:58:1f:9b:4b:10:d8:da:
                    8d:3f:8a:63:9f:88:db:08:05:15:3c:23:e4:2f:a1:
                    4c:43:9e:4b:51:7e:00:09:7d:2a:b8:e8:4c:c4:b7:
                    82:a7:58:24:f3:2b:83:98:0e:27:2a:f7:05:d1:e0:
                    4d:2a:b3:ea:c6:bc:39:c3:eb:7b:d1:d6:9b:ca:6c:
                    ae:e6:6f:df:06:59:98:6e:15:29:0a:8d:76:1e:39:
                    db:87:ce:34:5a:d5:e4:66:8f:3a:0d:fb:69:a4:f6:
                    e1:1a:aa:1a:8c:e6:da:d4:9b:a3:a5:e6:65:9f:7c:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EE:E5:90:2A:27:FD:15:49:CB:C2:37:D6:71:21:FD:17:9A:6A:F0
            X509v3 Authority Key Identifier:
                keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:81:af:9c:76:c9:72:23:05:7e:1e:28:7d:72:e8:f2:e4:
         96:dd:e5:f8:cf:b4:16:a9:f2:6b:b7:47:e4:fc:45:a6:e2:70:
         81:ef:93:f9:60:25:ab:0c:c8:22:d4:63:de:a7:e8:80:09:ef:
         3d:11:cf:c9:d2:1c:65:d4:96:e4:7d:e4:38:e0:4b:95:9c:53:
         3d:f8:b7:6a:82:3c:0c:b8:15:7f:d4:94:5c:4f:c4:f3:b6:7b:
         71:84:f7:86:38:d1:1f:0d:3e:90:6c:ce:5a:86:cd:f4:25:57:
         6c:7b:7e:10:a5:20:1b:b3:32:1f:90:0b:60:b1:5a:1b:96:83:
         4a:1c:fc:00:b7:9d:86:f1:3d:48:1b:f3:4b:4e:bc:25:a9:12:
         89:a5:73:1d:73:57:5a:93:ae:97:ee:d3:49:4f:0b:eb:75:ee:
         17:0a:f0:e9:e5:f5:f3:0f:97:fb:0c:40:4a:41:57:34:b6:b1:
         8b:87:44:bd:15:f5:7c:5a:63:34:00:be:9d:f3:59:74:5d:71:
         c0:5e:5d:ae:89:47:3a:68:2a:40:f8:98:92:b2:e0:71:15:8a:
         e8:ba:ba:9a:27:6f:7d:29:1b:61:4d:55:7e:bc:4b:62:7a:cd:
         17:9b:2f:3d:f7:89:04:2f:13:10:b3:4b:b3:a3:28:bc:a8:cd:
         25:2b:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:41 2026 by rpki-client