Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e203535363736.roa
File:                     3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (raw, json)
Hash identifier:          Q3r0bAYb72ZQ2Fp1fAghigXkWh4LdobhrwQdO/opI/0=
Subject key identifier:   8F:4F:D6:37:B0:09:43:38:C7:DE:30:C9:4C:9F:9F:B9:AC:04:61:65
Certificate issuer:       /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial:       66587F9C4AF56A880093D8B2C474C40472D64715
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e203535363736.roa
Signing time:             Sun 03 May 2026 02:30:32 +0000
ROA not before:           Sun 03 May 2026 02:25:32 +0000
ROA not after:            Sun 02 May 2027 02:30:32 +0000
asID:                     55676
IP address blocks:        103.105.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
                          rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:58:7f:9c:4a:f5:6a:88:00:93:d8:b2:c4:74:c4:04:72:d6:47:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
        Validity
            Not Before: May  3 02:25:32 2026 GMT
            Not After : May  2 02:30:32 2027 GMT
        Subject: CN=8F4FD637B0094338C7DE30C94C9F9FB9AC046165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:7a:6f:85:a9:b5:28:26:f5:35:30:63:9e:
                    71:50:67:1c:c2:31:46:a1:9e:60:47:09:0c:af:54:
                    71:9a:9f:1a:6f:dd:b7:17:fc:c1:2f:bc:0a:4b:be:
                    94:8d:7d:a6:1c:e7:b1:5d:cd:14:0f:5f:50:df:aa:
                    c5:bb:ff:91:f2:1a:62:09:20:30:6c:d5:4b:85:f2:
                    23:ad:ad:8f:25:9e:63:fd:63:b5:b2:9c:3e:c3:b9:
                    21:79:89:c5:84:42:aa:51:06:36:a4:e5:d2:11:50:
                    3c:e8:71:68:23:c6:dc:85:cb:09:ed:cf:fb:21:af:
                    0b:88:23:c3:33:a7:0a:54:91:2b:a2:77:fb:38:3e:
                    84:2d:ed:5a:4b:df:ca:19:95:46:bc:e0:35:9c:b2:
                    ca:74:f0:0b:87:a7:89:86:af:21:7c:b9:25:9f:d1:
                    dc:f4:ed:ac:e0:da:de:dd:35:c0:56:5d:d5:e8:72:
                    44:8f:99:25:22:41:9c:69:d9:73:91:c1:91:e2:b3:
                    68:53:77:0e:0c:ad:93:67:ba:95:20:4b:a6:88:4a:
                    b0:f8:c8:8c:0e:a6:26:3e:78:72:3c:a1:25:9b:e6:
                    c1:e1:17:9d:2d:a4:85:14:12:63:e4:27:fd:83:d6:
                    39:44:e9:26:fe:76:60:be:9e:b6:43:14:47:ab:67:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4F:D6:37:B0:09:43:38:C7:DE:30:C9:4C:9F:9F:B9:AC:04:61:65
            X509v3 Authority Key Identifier:
                keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e203535363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:66:69:4e:01:68:a0:e3:c0:72:b5:01:41:c8:27:bb:ce:85:
         69:7d:2f:69:92:c5:3d:26:8b:64:5b:11:ca:98:78:a6:a6:ad:
         4a:43:31:53:77:ef:a6:c0:b3:72:fa:76:af:c1:78:a8:ba:f4:
         91:f2:ac:9d:be:77:e7:85:cb:2e:8b:f3:e1:5d:1f:ea:04:f3:
         31:2f:51:19:85:eb:52:ed:e2:fe:9f:08:9d:1b:a5:41:14:0c:
         fa:9e:00:17:e3:29:c3:3a:48:29:4e:aa:87:8f:bf:85:07:78:
         0b:eb:63:39:35:08:b6:71:57:cf:f2:75:74:43:88:af:35:ae:
         3b:97:c1:62:34:37:aa:1b:b3:c1:50:4f:55:89:67:73:c6:4d:
         12:c2:2d:bf:78:c4:d0:a0:34:d7:31:71:02:1d:49:6d:2c:70:
         f9:d5:01:d2:1c:25:07:a2:8c:66:76:0b:4f:6d:70:05:ad:89:
         d9:1e:68:89:14:0f:0c:58:8a:9f:b8:ec:0d:f0:cc:80:01:09:
         7a:fd:3d:49:76:05:20:f2:c6:97:10:60:e0:af:29:ac:dd:3e:
         b2:ad:c4:91:8e:16:86:c2:b8:08:95:bd:a3:86:13:96:36:a1:
         fc:e2:0b:25:78:63:66:ce:96:13:d9:d5:1e:6d:6e:7e:c2:9b:
         35:1f:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:59 2026 by rpki-client