Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa
File:                     3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (raw, json)
Hash identifier:          2hrlUfalWGLJAAgURvT2UIB10iFx48ljh0wmwwAeiOQ=
Subject key identifier:   E5:00:9A:80:B6:BE:0C:D2:6B:E7:3A:99:BB:B8:F1:B9:B9:76:B8:E9
Certificate issuer:       /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887
Certificate serial:       32D139BA08DFF5A0C24CFD621529BB6E277C9AFB
Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa
Signing time:             Sun 03 May 2026 02:32:40 +0000
ROA not before:           Sun 03 May 2026 02:27:40 +0000
ROA not after:            Sun 02 May 2027 02:32:40 +0000
asID:                     132642
IP address blocks:        103.19.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl
                          rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d1:39:ba:08:df:f5:a0:c2:4c:fd:62:15:29:bb:6e:27:7c:9a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887
        Validity
            Not Before: May  3 02:27:40 2026 GMT
            Not After : May  2 02:32:40 2027 GMT
        Subject: CN=E5009A80B6BE0CD26BE73A99BBB8F1B9B976B8E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:df:e1:46:30:f3:a0:30:88:20:da:91:6e:
                    00:43:00:e4:f2:46:62:0b:35:a9:b8:d1:8b:2c:4c:
                    f2:0d:0e:78:89:ac:34:f9:5a:a1:64:74:2b:a6:74:
                    e5:06:fc:da:36:96:30:b5:2f:67:c4:dc:a6:dc:03:
                    b3:f8:ec:46:de:ad:4f:93:32:30:1d:df:97:9b:08:
                    f6:a3:28:67:ea:cf:5a:26:9c:a1:aa:17:68:92:d2:
                    b6:38:42:3a:96:d1:71:e8:6f:c5:38:09:e9:43:44:
                    82:0a:35:e9:de:c8:d6:ff:4f:b4:be:91:af:eb:9a:
                    ca:b6:1b:22:e4:53:d5:26:91:e1:05:1c:ac:13:5c:
                    25:c1:f7:ff:04:b3:05:d0:e2:14:cc:41:ac:92:83:
                    4e:db:d7:fe:a0:fb:14:87:8e:09:17:4a:35:ce:3f:
                    2c:95:f2:fe:09:88:79:34:0f:76:16:cc:24:f1:c5:
                    37:dd:01:0b:4a:f5:58:ed:8a:4d:c3:55:0b:a2:fb:
                    53:0b:f8:6f:f3:9e:38:23:e5:83:d3:82:2e:4c:68:
                    3d:8d:37:0c:af:20:35:a8:24:13:9a:ff:3f:e9:53:
                    d5:bd:a9:4c:c8:d7:06:2a:2f:7d:fa:1d:bc:29:c1:
                    57:99:fe:e3:28:55:1b:96:55:cd:7c:f2:c0:0b:d5:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:00:9A:80:B6:BE:0C:D2:6B:E7:3A:99:BB:B8:F1:B9:B9:76:B8:E9
            X509v3 Authority Key Identifier:
                keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:76:7d:49:ba:56:ca:26:74:2c:2d:6b:98:17:f6:8c:bb:44:
         c5:32:4e:e1:99:4e:29:f0:6a:88:05:58:5b:0b:8a:c8:9b:4a:
         74:2e:a1:19:f6:5b:b9:2f:cd:11:e9:59:f5:45:11:04:0b:62:
         e1:c7:9c:5c:d4:02:ae:4f:e3:b9:10:73:15:ff:8a:af:76:68:
         b2:87:56:a6:ff:91:dc:4b:40:9f:50:ac:17:31:df:bd:45:6d:
         1d:b4:b6:0f:60:77:2d:11:61:af:84:90:22:81:43:5b:61:33:
         a8:84:fb:ba:7b:aa:43:50:98:5f:a8:1e:d2:5a:01:d4:2a:aa:
         9a:09:82:bb:fa:7c:16:9a:75:c8:f2:42:7f:a5:75:a7:35:ef:
         74:78:18:5f:6c:e7:59:b1:28:5e:80:42:55:46:88:5d:03:92:
         e3:52:6c:de:93:01:71:78:28:67:be:98:8e:ee:f5:4e:31:eb:
         66:00:7f:34:d6:84:9a:5b:06:c3:e0:e8:d0:e8:a8:6d:a1:88:
         27:dc:6d:60:47:8b:ae:4d:98:13:a8:2d:55:f0:d7:e6:de:7a:
         5a:4a:6e:45:58:cb:32:c2:e1:63:43:05:bc:5a:42:f3:dd:70:
         86:2e:74:ea:39:a9:b9:78:82:f3:d0:59:df:8d:41:df:44:21:
         d3:f6:45:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:01 2026 by rpki-client