Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa
File:                     3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (raw, json)
Hash identifier:          jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=
Subject key identifier:   FA:53:11:FA:14:7B:8B:01:15:65:EA:1D:16:59:E0:99:06:86:DB:7A
Certificate issuer:       /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55
Certificate serial:       574DA322C077DE024D3859A5E9B3EDBB033192B0
Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa
Signing time:             Sun 03 May 2026 02:31:27 +0000
ROA not before:           Sun 03 May 2026 02:26:27 +0000
ROA not after:            Sun 02 May 2027 02:31:27 +0000
asID:                     149340
IP address blocks:        103.178.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl
                          rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4d:a3:22:c0:77:de:02:4d:38:59:a5:e9:b3:ed:bb:03:31:92:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55
        Validity
            Not Before: May  3 02:26:27 2026 GMT
            Not After : May  2 02:31:27 2027 GMT
        Subject: CN=FA5311FA147B8B011565EA1D1659E0990686DB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:89:4d:f6:94:22:21:b7:8a:d8:be:6c:3e:
                    a5:e7:0a:9a:f6:f0:1a:bb:2b:ea:4a:f9:9c:1c:09:
                    44:3a:9b:72:7a:87:9a:5b:71:a0:b8:48:0c:34:9d:
                    99:86:d1:f2:3d:a9:a9:57:46:04:bc:73:31:6e:bb:
                    d7:b1:cb:38:43:6b:9f:7a:3f:41:fc:09:59:21:fa:
                    9d:b6:6c:ab:bc:00:70:af:37:53:6e:05:3f:76:47:
                    de:55:d0:63:6c:29:f5:79:e5:6c:1d:9f:7a:6e:d8:
                    98:aa:0e:62:38:e2:57:ce:5f:00:21:db:3c:e0:70:
                    68:78:57:15:86:b3:5d:4e:d1:e3:6d:9c:1e:7a:7d:
                    73:5a:fc:e4:1f:aa:73:cd:3d:6e:0a:d2:40:96:bb:
                    42:2a:bb:93:4f:c3:ba:29:5c:ed:d4:46:0f:d7:5a:
                    a2:74:3a:ce:58:5c:28:28:43:73:9b:9b:a3:a7:a0:
                    0a:68:ce:6a:f0:7a:83:de:e0:15:fe:80:c1:27:93:
                    13:77:7e:42:a0:d2:52:dc:75:00:b9:ac:56:47:7c:
                    95:e4:26:f3:48:cb:e9:ad:88:ac:e5:b6:dc:c4:05:
                    9a:6c:38:34:e8:bb:ca:3f:34:d1:50:75:dc:4d:68:
                    0c:6c:ba:e6:8b:ea:ba:e2:08:64:eb:b9:12:82:e0:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:53:11:FA:14:7B:8B:01:15:65:EA:1D:16:59:E0:99:06:86:DB:7A
            X509v3 Authority Key Identifier:
                keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:0b:d8:ae:a6:c4:f0:ab:3e:e5:03:03:45:c8:25:ae:70:52:
         da:a9:75:7e:77:3f:0e:a4:0e:da:62:3c:1c:a8:27:b2:a4:0b:
         7f:cf:b8:9d:04:4d:18:17:c3:62:6f:99:ef:3f:21:e6:ba:bd:
         1f:e0:f8:d9:c8:6f:2b:b2:70:99:ad:ae:75:68:58:da:d8:6a:
         31:a8:54:63:d9:6a:ab:b3:7e:76:0a:0a:30:82:07:f4:4c:fd:
         be:91:37:67:1d:1d:6d:15:39:70:e3:98:47:c7:56:c1:af:1d:
         b2:36:65:2e:ca:18:b1:ed:6a:be:87:bb:8b:44:f2:09:d1:0a:
         27:fe:3b:83:ce:41:ac:51:89:8a:f0:b0:ec:51:2c:16:a6:64:
         55:03:f9:30:e4:30:b2:ef:ef:4c:41:96:43:44:d9:e8:c1:cf:
         b9:7d:fb:28:ee:fc:88:a7:ce:ce:86:60:9f:68:e9:a9:44:9c:
         62:7c:a0:c4:72:32:78:d7:a8:79:cf:41:ae:65:f3:a3:ed:8b:
         b5:6d:ff:b5:e1:6a:31:5e:79:91:25:53:57:58:83:bc:d2:d9:
         8c:40:6c:a1:d8:2d:c5:eb:b1:91:42:47:28:d6:d7:42:7d:b5:
         54:64:27:ed:18:02:02:3b:53:d6:b8:ad:9d:21:37:87:1d:6c:
         1e:02:b0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:34:26 2026 by rpki-client