Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa
File:                     3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (raw, json)
Hash identifier:          qLUNvDfC3gbWxd/hHt1Guse9AQpSMZBZKKbyAr0FqSU=
Subject key identifier:   BA:C1:69:51:4B:50:68:12:D5:F0:03:9D:7C:28:C4:D9:D0:D8:3F:F2
Certificate issuer:       /CN=B625426C356E15C795153BAD3E2215D65F219A5E
Certificate serial:       063EAE3715B7E34DFB86B9D2FDC7A4126494EA30
Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa
Signing time:             Sun 03 May 2026 02:31:18 +0000
ROA not before:           Sun 03 May 2026 02:26:18 +0000
ROA not after:            Sun 02 May 2027 02:31:18 +0000
asID:                     135472
IP address blocks:        103.71.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl
                          rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3e:ae:37:15:b7:e3:4d:fb:86:b9:d2:fd:c7:a4:12:64:94:ea:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E
        Validity
            Not Before: May  3 02:26:18 2026 GMT
            Not After : May  2 02:31:18 2027 GMT
        Subject: CN=BAC169514B506812D5F0039D7C28C4D9D0D83FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:e4:21:df:44:f1:2c:39:6e:e2:4f:72:34:
                    09:aa:88:56:4a:e8:f3:e6:1c:a5:67:13:78:d6:be:
                    d6:95:9f:86:0e:87:6d:e1:04:5c:7a:44:a4:2a:59:
                    8b:dd:15:22:dd:18:c7:8f:ac:95:8b:f9:05:24:a9:
                    4b:d1:56:35:33:a8:17:5a:31:d1:f6:cf:b2:b7:8e:
                    bd:cc:fc:ae:90:e3:fa:84:b6:7e:f2:c0:c4:9c:22:
                    32:50:7e:55:5f:15:83:90:8f:a0:28:86:79:f4:3b:
                    cd:6e:89:e3:33:28:2a:19:00:5c:b1:86:cb:3b:43:
                    bc:64:59:e7:4d:2d:59:2a:f6:32:41:e4:b1:8b:46:
                    f1:0b:2e:c3:6a:7c:1f:c2:3e:c9:f1:16:ea:6d:eb:
                    6f:7a:27:40:0c:6b:60:c3:e0:73:61:2e:ee:59:70:
                    3c:5c:9e:bc:94:5b:06:18:09:66:e6:b6:13:b2:76:
                    cc:12:d9:eb:88:2a:d7:e2:d5:08:f6:a5:d0:c4:1d:
                    ef:27:7d:72:b8:de:82:b7:2b:cb:ee:f7:a2:b2:46:
                    6c:35:f7:df:20:d4:93:39:26:c8:8c:ac:f9:db:72:
                    c7:60:f5:63:08:53:7b:a0:1e:63:b9:d0:f4:d8:5c:
                    2e:f4:68:a0:a5:8f:a5:65:fb:36:de:60:e8:48:a9:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:69:51:4B:50:68:12:D5:F0:03:9D:7C:28:C4:D9:D0:D8:3F:F2
            X509v3 Authority Key Identifier:
                keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:06:72:5d:8b:49:c2:35:78:4f:75:84:52:8a:65:18:cf:63:
         74:4d:0a:28:97:e6:c0:a2:31:03:85:a1:f7:43:d9:32:d6:c0:
         1b:7f:ab:26:dd:07:1d:43:d0:f1:6e:da:d4:c6:66:69:5b:7a:
         de:51:8b:11:5e:7a:73:e1:20:ae:6a:a5:7e:d8:8b:e1:50:24:
         c3:80:46:e3:3a:62:71:15:e6:90:6d:2f:e1:aa:3e:c9:20:4a:
         8a:fd:9f:49:fe:2d:18:3f:f6:2c:8a:74:b5:47:a0:8e:29:65:
         a7:4f:92:fd:9d:e8:54:77:d9:e2:3f:d1:2b:e0:b0:52:de:83:
         a2:f7:21:66:5c:56:3e:c7:6d:cc:84:d1:8d:5e:b0:c9:ef:9d:
         3b:27:54:14:91:b7:36:2e:5c:c7:e5:41:70:77:77:d1:0c:03:
         88:af:3b:97:57:e3:77:2a:13:f6:e2:6d:f8:62:d7:e0:06:22:
         a0:60:1b:29:8b:ec:9f:b1:dd:94:66:64:7e:ea:7d:d8:49:84:
         7f:8c:e3:f4:b5:f9:46:86:f9:35:48:3f:9e:4b:30:27:ed:63:
         05:cb:24:44:1f:14:b0:d8:b4:bb:48:4c:16:54:53:10:48:1f:
         20:9e:df:ce:41:7c:c2:d6:92:d2:cd:d7:05:13:a1:ca:dc:c8:
         46:80:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:09 2026 by rpki-client