Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/3130332e3136342e3137342e302f32332d3234203d3e20313439393330.roa
File:                     3130332e3136342e3137342e302f32332d3234203d3e20313439393330.roa (raw, json)
Hash identifier:          GEOw2YpRpFtyzg+8GHqzWLsuzfpbet3gaQc6Cku+uzs=
Subject key identifier:   37:61:14:49:3F:57:96:73:B9:FC:F5:8B:67:FD:D4:D2:52:32:B8:AA
Certificate issuer:       /CN=1B93CB8B8DCE7DB4D6452115647A370EA22E3E23
Certificate serial:       2E2F8DFE410A2A8FB78E3958A3A0F225EF7B9A43
Authority key identifier: 1B:93:CB:8B:8D:CE:7D:B4:D6:45:21:15:64:7A:37:0E:A2:2E:3E:23
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/3130332e3136342e3137342e302f32332d3234203d3e20313439393330.roa
Signing time:             Sun 03 May 2026 02:30:51 +0000
ROA not before:           Sun 03 May 2026 02:25:51 +0000
ROA not after:            Sun 02 May 2027 02:30:51 +0000
asID:                     149930
IP address blocks:        103.164.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.crl
                          rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2f:8d:fe:41:0a:2a:8f:b7:8e:39:58:a3:a0:f2:25:ef:7b:9a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B93CB8B8DCE7DB4D6452115647A370EA22E3E23
        Validity
            Not Before: May  3 02:25:51 2026 GMT
            Not After : May  2 02:30:51 2027 GMT
        Subject: CN=376114493F579673B9FCF58B67FDD4D25232B8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:56:fa:45:4a:33:1c:51:f7:e1:89:61:c9:
                    be:b4:30:d7:5d:57:08:70:cc:ab:d5:45:3f:b8:66:
                    40:3f:8a:d0:c2:95:0e:ef:00:9f:a5:dd:4d:e5:9f:
                    c2:18:a9:43:ee:b5:50:28:7b:88:c3:9c:01:b3:c4:
                    f8:f0:fb:bc:96:63:0b:24:2a:48:4c:33:59:4a:aa:
                    cd:03:32:1c:9f:1f:2b:bc:90:5c:15:2f:e6:c4:f6:
                    77:9a:7b:01:aa:7b:32:55:a1:be:f1:0c:49:2c:a6:
                    5b:d6:3f:9a:9f:2e:52:ca:da:d9:99:d4:39:a4:f3:
                    42:3e:2a:35:b2:b7:0b:ea:34:e6:e5:37:f7:b9:46:
                    df:d5:58:9b:95:2a:81:45:b6:d4:41:f0:48:d0:ae:
                    2f:b9:14:15:10:f5:50:11:3d:7e:78:68:58:d8:ac:
                    e0:0c:27:30:82:62:4b:df:ce:ef:a1:41:e8:32:d4:
                    c8:ea:6c:1c:25:b2:94:f0:c2:eb:e3:be:86:a3:6f:
                    d0:ed:4b:a6:e9:5d:87:9a:d4:69:53:01:57:24:92:
                    ee:cf:2c:68:c7:2f:41:f0:43:51:f2:66:21:08:72:
                    ac:b4:50:8d:43:fe:7c:8f:15:fd:ca:26:f3:23:30:
                    2e:40:f6:1e:58:9b:7b:0e:ac:9b:a7:1c:a0:ac:c8:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:61:14:49:3F:57:96:73:B9:FC:F5:8B:67:FD:D4:D2:52:32:B8:AA
            X509v3 Authority Key Identifier:
                keyid:1B:93:CB:8B:8D:CE:7D:B4:D6:45:21:15:64:7A:37:0E:A2:2E:3E:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B93CB8B8DCE7DB4D6452115647A370EA22E3E23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/3130332e3136342e3137342e302f32332d3234203d3e20313439393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:6a:be:29:e7:df:e7:3a:bf:df:79:cb:cf:e7:b4:9f:07:cb:
         ea:e5:a4:78:7c:b4:42:c2:64:97:9c:cd:4f:d3:c6:e3:42:b8:
         95:5a:0b:52:b1:ee:b6:5b:ed:a8:b9:49:9e:9b:da:7a:ed:fa:
         7b:4d:18:79:01:1c:e1:79:56:89:29:87:1a:a6:a2:48:f9:95:
         c1:ab:c7:f5:9f:a1:99:68:47:9c:85:00:fc:d1:da:56:66:79:
         0c:0b:ff:6c:54:4b:36:15:39:6e:68:92:ec:52:f3:b5:f2:c3:
         9a:63:52:35:06:4b:01:51:c7:d3:4f:66:d0:65:5f:78:95:0b:
         54:6c:c4:7f:8a:48:86:0a:6a:ae:1b:e5:c0:fd:42:34:bc:a6:
         a0:bd:16:b4:81:75:bc:f6:10:3b:c1:20:b0:46:25:8e:29:e5:
         9d:f0:94:b0:c8:d0:71:cd:e0:88:f7:59:85:0b:5d:8c:17:ee:
         5d:32:29:73:1a:6b:70:65:70:84:db:91:cc:57:cb:a8:8c:e9:
         13:53:69:b4:cf:ba:a3:2f:bf:17:c8:ea:95:0e:bd:02:95:77:
         87:24:c7:77:16:d8:9b:aa:e3:0a:a7:0e:ea:8d:a7:9b:d4:da:
         c4:12:72:16:8e:ce:0e:44:1c:0e:1b:c5:d1:c6:7f:c5:56:0c:
         dd:72:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:02 2026 by rpki-client