Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa
File:                     3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (raw, json)
Hash identifier:          26c5fhilGEyh6ibLUJuFc5ukaLSiZO65uEMgb+eN6Nk=
Subject key identifier:   5B:C2:23:4E:0E:3F:04:32:59:B2:BD:6D:85:3F:62:78:5E:95:88:67
Certificate issuer:       /CN=46932859C0D86F27F517A125185AE45763AEA7D7
Certificate serial:       6F285C0364DA54B11F35540071E33C3155F1749E
Authority key identifier: 46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa
Signing time:             Sun 03 May 2026 02:32:16 +0000
ROA not before:           Sun 03 May 2026 02:27:16 +0000
ROA not after:            Sun 02 May 2027 02:32:16 +0000
asID:                     138127
IP address blocks:        103.132.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl
                          rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:28:5c:03:64:da:54:b1:1f:35:54:00:71:e3:3c:31:55:f1:74:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46932859C0D86F27F517A125185AE45763AEA7D7
        Validity
            Not Before: May  3 02:27:16 2026 GMT
            Not After : May  2 02:32:16 2027 GMT
        Subject: CN=5BC2234E0E3F043259B2BD6D853F62785E958867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d0:b0:50:64:4c:41:1d:91:e2:b6:87:67:18:
                    3f:1e:b3:5d:36:b1:21:28:85:0c:c3:9a:6a:ea:d6:
                    29:2f:d9:bf:d0:cd:87:ba:46:c7:0c:2c:75:3a:ea:
                    34:96:a5:42:a2:59:07:44:ba:d7:f4:e4:d5:33:3f:
                    3b:26:40:af:10:b2:55:0d:b8:38:17:7b:e4:de:a0:
                    7d:ba:53:18:2a:66:89:a3:0e:44:38:28:4a:53:6f:
                    e1:2d:b3:f8:88:41:81:29:70:18:03:22:60:29:f4:
                    da:96:af:be:64:ea:60:e9:60:65:77:a3:65:7b:cf:
                    62:09:65:07:c9:29:de:0a:79:5a:94:f1:39:cc:9b:
                    77:d6:b5:a5:4a:58:49:61:77:6c:ed:f6:c2:4a:3d:
                    80:d3:3e:b6:8d:01:94:0c:a0:65:e7:46:a0:78:60:
                    73:ba:5e:03:d3:33:25:b9:58:5b:91:d5:d7:1e:6d:
                    2a:bf:12:b1:4f:42:06:9c:1d:55:87:6b:86:1d:49:
                    93:f8:21:6f:c6:f8:ea:f1:a8:17:da:dd:58:83:32:
                    fc:db:db:49:62:d4:15:8f:96:ed:db:2a:78:e5:c7:
                    a5:5c:b7:f4:70:b1:be:a1:4c:a7:9d:95:fc:c9:f6:
                    fe:9e:c4:dd:ff:85:db:68:97:a0:e8:82:93:58:34:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C2:23:4E:0E:3F:04:32:59:B2:BD:6D:85:3F:62:78:5E:95:88:67
            X509v3 Authority Key Identifier:
                keyid:46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:44:8d:c1:e5:48:1c:f5:72:3a:49:08:95:08:87:bf:52:
         4b:cf:62:13:f5:50:e3:fd:2d:fe:52:f0:aa:ca:eb:28:4e:27:
         d1:06:da:de:5d:cd:dc:76:5a:aa:6f:ae:68:96:bf:49:b3:f2:
         2f:54:97:88:11:0c:9e:1e:27:30:19:f0:e0:f3:9b:0c:4b:ee:
         75:a2:fd:be:33:12:13:d5:43:a8:d2:6d:b6:f3:b6:47:72:88:
         7b:0d:ea:36:0e:1f:56:5e:fc:88:f5:39:74:14:8e:ab:76:f8:
         67:95:d8:c1:59:15:f9:c1:63:2c:cf:72:9a:e5:ca:3a:c1:7b:
         37:c8:4f:ec:42:6f:46:d9:bc:3a:a8:09:3b:1f:d1:61:7d:4a:
         7d:6e:80:98:dd:cc:5d:a7:cf:ea:b6:25:3f:28:1a:c9:04:59:
         fa:a2:b4:6b:a3:f7:87:d1:0c:57:50:d2:3b:c3:a1:36:f6:fd:
         8a:db:09:dd:5f:a5:a0:bc:77:c8:8a:40:cc:92:5b:e9:90:68:
         a4:90:a2:b5:df:bf:a7:0d:1b:a4:8b:19:e0:a2:b8:ff:8a:ed:
         55:a6:ea:1b:72:1a:e1:62:81:5b:7e:4b:2f:04:2e:ef:27:2b:
         7d:d1:18:9f:5f:13:0b:a3:dc:14:ab:80:a3:5f:b3:d2:42:6d:
         5c:3b:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:19 2026 by rpki-client