Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa
File:                     3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (raw, json)
Hash identifier:          StV9pAMf1Ct261g28sLeCDLoQr5OW67xNFsrQ9jD6wc=
Subject key identifier:   E4:C9:D0:09:5D:63:AE:06:9C:65:7C:15:D6:A8:23:D5:ED:B2:32:FE
Certificate issuer:       /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial:       81FA7690F03815C6C33235BA004C48282F9DA3
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa
Signing time:             Sun 03 May 2026 02:30:31 +0000
ROA not before:           Sun 03 May 2026 02:25:31 +0000
ROA not after:            Sun 02 May 2027 02:30:31 +0000
asID:                     136874
IP address blocks:        103.105.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
                          rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            81:fa:76:90:f0:38:15:c6:c3:32:35:ba:00:4c:48:28:2f:9d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
        Validity
            Not Before: May  3 02:25:31 2026 GMT
            Not After : May  2 02:30:31 2027 GMT
        Subject: CN=E4C9D0095D63AE069C657C15D6A823D5EDB232FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:f8:d9:8b:a4:5c:8c:7b:d9:b3:0f:36:83:
                    22:c7:56:66:52:ae:eb:08:e3:48:b5:fb:ad:b3:af:
                    95:7f:39:ea:4e:53:0a:23:3d:2a:ca:80:8a:5e:a2:
                    21:87:8b:55:c6:92:4b:74:9d:a1:8f:51:e0:74:fd:
                    b4:2e:76:83:b7:c9:30:7c:cb:09:1c:e2:c5:82:e3:
                    b7:46:65:eb:07:46:4f:fe:e5:82:10:d6:31:90:30:
                    73:8b:bd:c3:0e:f4:ad:b4:50:2a:d0:08:ef:27:39:
                    56:eb:7b:f4:c6:9f:80:44:7d:30:ee:f2:fe:4b:0c:
                    df:7a:ca:30:bd:a7:5d:72:11:04:1e:66:f7:45:4e:
                    f1:03:9c:8a:73:e9:10:4f:a4:cb:6a:83:ed:66:ac:
                    06:21:4e:20:25:5c:2d:99:7d:77:37:85:91:ff:7d:
                    65:75:2e:9a:18:69:11:39:c6:6f:9b:4a:30:89:58:
                    8b:e7:6f:ff:c0:97:72:91:a0:a9:c9:73:d7:35:af:
                    75:72:91:9f:62:9e:09:9f:39:09:92:07:64:c8:06:
                    93:6d:ae:15:6b:c5:70:90:b7:d2:6a:c0:17:4f:0b:
                    d2:58:8f:d4:ed:97:78:e9:ee:ad:18:94:da:0f:fe:
                    97:e6:df:c6:9b:0a:e5:c0:54:47:f9:1d:18:e4:4c:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C9:D0:09:5D:63:AE:06:9C:65:7C:15:D6:A8:23:D5:ED:B2:32:FE
            X509v3 Authority Key Identifier:
                keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:de:f8:d6:d4:99:f8:71:23:74:63:b2:b2:c5:4d:7c:31:c0:
         d6:2c:b6:0d:fe:43:0d:85:45:2f:e4:10:80:f1:5e:a2:c5:2a:
         30:39:ef:38:41:b0:18:e8:08:97:19:13:64:b7:df:17:9f:e1:
         5e:99:e3:9f:65:9a:38:cf:12:53:05:9e:1d:23:f6:4c:ac:3f:
         26:ea:03:6b:88:e5:60:27:c6:db:5d:49:fa:0a:9c:c1:65:f5:
         e6:9c:88:72:56:80:d2:bb:e0:f1:69:91:0b:f3:25:44:ee:d3:
         8a:42:b5:65:f9:84:f1:1b:1e:bd:75:58:56:56:0c:b4:96:b6:
         e7:42:d6:89:56:b0:70:cc:21:19:55:30:00:ef:73:e5:3a:af:
         7b:58:c7:3d:c7:24:f7:71:4a:dc:a4:36:db:8f:74:f0:8b:f1:
         56:f9:52:a7:1c:5d:7a:bb:65:f7:f3:19:ae:08:5f:75:8f:32:
         9e:52:93:24:eb:08:da:33:9b:a2:da:ff:34:b3:d4:ed:ba:a3:
         b3:74:0f:dc:0c:6d:a9:b5:df:9b:2c:d7:83:c5:7d:8e:e7:18:
         ef:1e:99:8c:c0:87:4d:3a:45:3f:ff:99:d6:c8:47:70:3f:03:
         fe:45:fb:45:59:21:a6:ba:57:92:d0:df:cb:22:1a:3e:5a:be:
         f2:42:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:50 2026 by rpki-client