Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa
File:                     3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (raw, json)
Hash identifier:          hhoCmD2A3Hrpt2QLVgfRu8FAamoEY4vI2CK2lYPT4Mg=
Subject key identifier:   FF:0B:53:FF:AC:A9:34:7C:1C:D7:EE:53:99:BB:AF:6E:42:67:23:14
Certificate issuer:       /CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
Certificate serial:       22F99752CD4698C91363088D1F5E5F752A9C3252
Authority key identifier: B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa
Signing time:             Sun 03 May 2026 02:29:42 +0000
ROA not before:           Sun 03 May 2026 02:24:42 +0000
ROA not after:            Sun 02 May 2027 02:29:42 +0000
asID:                     137289
IP address blocks:        103.51.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl
                          rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f9:97:52:cd:46:98:c9:13:63:08:8d:1f:5e:5f:75:2a:9c:32:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
        Validity
            Not Before: May  3 02:24:42 2026 GMT
            Not After : May  2 02:29:42 2027 GMT
        Subject: CN=FF0B53FFACA9347C1CD7EE5399BBAF6E42672314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:8f:56:49:45:86:76:c1:7b:56:4f:af:bb:
                    a9:a2:6e:6c:3d:c8:c1:97:bc:d0:70:a1:90:52:8c:
                    d2:e0:ad:43:d0:bf:8d:4d:c3:b9:b5:00:6c:ee:08:
                    f2:50:73:4f:72:97:1c:1d:8f:97:a3:61:10:1a:25:
                    40:af:d5:c0:3b:81:f2:21:ee:8a:05:e8:35:ae:30:
                    e2:42:54:de:2b:fa:5b:66:7b:81:ae:42:9c:7e:8e:
                    ec:c8:f2:fb:8d:cf:23:d3:1d:64:9e:02:60:b9:1e:
                    5d:c3:63:fc:ac:f5:0f:8d:9f:3e:df:bf:f3:73:b1:
                    6f:00:e5:fe:9c:c7:1d:db:a9:1e:29:31:68:dc:04:
                    5e:ef:c4:a0:d6:44:c4:bc:1b:9e:bc:7f:d8:77:3a:
                    02:1c:15:c7:8f:6e:da:6a:ca:10:63:c5:99:9c:51:
                    fc:7c:7e:49:d0:83:ce:8d:3c:ee:5a:86:9f:69:60:
                    3a:86:75:91:8c:dc:bb:92:7c:78:06:0e:b4:6e:76:
                    bd:c3:20:92:3a:ad:5d:ec:4e:d8:f1:55:3c:75:b2:
                    e2:f3:74:c1:50:bd:db:44:dc:83:16:a9:cc:97:25:
                    85:ce:81:ec:93:59:19:c2:c0:56:1c:78:76:38:92:
                    93:aa:8c:21:65:1c:47:ee:3b:b2:db:a1:52:9c:b6:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0B:53:FF:AC:A9:34:7C:1C:D7:EE:53:99:BB:AF:6E:42:67:23:14
            X509v3 Authority Key Identifier:
                keyid:B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:cf:37:bb:c4:c6:f4:86:dd:93:d5:76:94:dd:05:fb:f0:a7:
         56:2c:35:4b:07:a8:ec:f8:21:d2:60:c8:ae:76:e9:82:62:dc:
         78:08:76:56:97:cf:67:e6:d7:cf:c2:ea:d7:71:b6:ae:99:5f:
         58:6a:ac:e7:c9:34:3b:45:2d:55:9a:82:85:08:88:89:3c:97:
         ff:0c:f2:fa:47:67:94:db:d4:5c:c9:d0:87:26:2c:ac:f6:5e:
         13:b6:bb:d8:64:e2:33:fb:ef:8d:6e:f6:e5:3c:d8:bd:6f:52:
         83:98:64:af:d8:20:44:71:93:75:f7:ae:ae:ed:03:d6:0e:d1:
         cc:03:fc:2a:e7:02:31:fc:c5:64:6d:c5:74:0a:43:7f:6e:f4:
         b4:ff:d7:d8:b9:3d:fb:b7:74:fb:88:9d:45:6c:88:9b:b6:7f:
         a0:9d:84:86:5a:e8:4d:2a:7b:21:1d:ce:4b:d0:db:99:11:96:
         bf:fd:e6:57:c7:86:14:3a:f8:ad:4b:dd:e7:84:c7:ac:08:db:
         79:d7:52:c4:38:5f:7e:fb:b7:9a:79:b3:6f:ae:8e:37:91:c3:
         a2:90:48:4f:b5:c0:85:ef:f2:f0:56:1c:0a:c5:69:3c:dd:93:
         c9:54:95:67:a8:cf:b5:cd:04:4a:82:38:3c:87:2d:61:b5:34:
         3f:b3:3a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:54 2026 by rpki-client