Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39322e302f32342d3234203d3e203338353136.roa
File:                     3130332e35342e39322e302f32342d3234203d3e203338353136.roa (raw, json)
Hash identifier:          JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=
Subject key identifier:   E6:E3:E8:C8:DD:D9:F3:08:E2:52:C4:E4:F4:92:C3:B0:AA:B4:AC:00
Certificate issuer:       /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial:       0C4582E5C792EAC30E99575EF4CE3863AF8DFD87
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39322e302f32342d3234203d3e203338353136.roa
Signing time:             Sun 03 May 2026 02:29:50 +0000
ROA not before:           Sun 03 May 2026 02:24:50 +0000
ROA not after:            Sun 02 May 2027 02:29:50 +0000
asID:                     38516
IP address blocks:        103.54.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
                          rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:45:82:e5:c7:92:ea:c3:0e:99:57:5e:f4:ce:38:63:af:8d:fd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
        Validity
            Not Before: May  3 02:24:50 2026 GMT
            Not After : May  2 02:29:50 2027 GMT
        Subject: CN=E6E3E8C8DDD9F308E252C4E4F492C3B0AAB4AC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:27:10:99:1e:71:89:77:3b:93:61:ee:c1:
                    c5:b7:5c:40:91:d6:c9:3c:8e:2e:45:cd:ae:2d:b4:
                    40:fa:f5:26:ca:d2:2b:09:7f:9e:2e:98:44:cf:63:
                    f7:f0:ac:c2:26:ad:f8:22:b8:ec:18:a8:8e:37:16:
                    d7:81:fc:4e:65:ee:7c:ae:d9:60:e4:93:48:74:ce:
                    e2:56:bc:67:15:fa:62:5b:1d:6f:17:23:87:2c:26:
                    b3:f2:23:d8:27:c4:45:7b:98:39:64:17:4d:53:63:
                    44:0a:fb:5c:39:5d:9b:f3:5f:70:a9:6b:22:5c:43:
                    9a:c0:49:8b:30:db:51:64:4e:b3:e4:ff:93:b1:08:
                    31:cb:d3:b0:9e:94:77:f0:9f:c1:e7:a1:e3:04:a2:
                    92:f7:d5:34:d2:83:77:41:61:52:bc:be:34:10:14:
                    41:34:31:29:23:03:4b:0b:4f:35:c2:e5:95:0a:a8:
                    53:cb:a7:1f:ec:6f:64:60:98:7e:e9:13:e7:53:3b:
                    ed:10:a9:fd:48:90:17:fa:de:90:9b:ad:6a:01:3f:
                    9d:07:5c:66:d8:74:6c:72:b1:ce:d0:91:b1:67:3b:
                    a3:45:43:1b:81:61:71:ef:a0:94:4a:dd:ac:a7:34:
                    94:f6:64:af:5d:e3:29:1b:3c:9c:ef:43:a5:40:c9:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E3:E8:C8:DD:D9:F3:08:E2:52:C4:E4:F4:92:C3:B0:AA:B4:AC:00
            X509v3 Authority Key Identifier:
                keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39322e302f32342d3234203d3e203338353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:67:27:4f:c0:b6:37:b1:13:c2:12:42:bb:f5:ee:37:78:27:
         84:6f:d0:50:8f:48:a0:7f:1b:d5:ae:9c:97:43:d6:9f:ca:a5:
         64:de:ac:8a:0a:15:3b:44:a9:02:92:80:3d:6c:43:6f:71:73:
         0e:11:04:3d:8e:5e:d9:14:dd:ea:e5:1c:5a:af:2d:46:d0:fb:
         4f:76:09:86:c6:6e:85:f5:ea:58:4c:d2:4a:ea:6d:63:af:f6:
         1b:99:e0:02:75:44:b3:ac:19:b1:86:6f:75:41:67:aa:07:04:
         0a:7a:ce:d5:9d:00:81:0a:4b:fe:a3:43:3e:40:3e:10:87:82:
         f3:76:95:2b:41:ec:0e:af:6c:64:11:70:96:56:c5:9b:ee:05:
         22:5b:f4:82:97:98:ad:cd:fa:0a:71:33:90:cf:7d:d0:f0:4a:
         33:96:04:fe:aa:c0:7b:85:e5:b7:67:dd:36:0d:e2:a9:8d:d1:
         91:0c:bc:50:9d:b5:54:98:f7:8f:fe:88:cd:6d:61:c7:b8:70:
         f5:6b:59:8a:b8:e9:3f:64:b3:3a:40:07:77:01:f8:5f:fc:62:
         fe:3a:9a:7b:cf:c5:a9:7c:ae:94:20:e8:a5:4f:9e:e9:06:fc:
         8d:c9:09:a3:f3:f7:dd:9c:cf:20:fe:11:7b:7d:76:0f:d4:bc:
         29:84:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:35 2026 by rpki-client