Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32362e302f32332d3233203d3e20313530323832.roa
File:                     3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (raw, json)
Hash identifier:          B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=
Subject key identifier:   9D:30:E2:D0:8B:24:66:34:5E:7A:09:1B:6C:71:A1:02:1B:50:68:87
Certificate issuer:       /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606
Certificate serial:       32BD6A359535D53FFFB833E10A9D74A630F98794
Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32362e302f32332d3233203d3e20313530323832.roa
Signing time:             Sun 03 May 2026 02:32:50 +0000
ROA not before:           Sun 03 May 2026 02:27:50 +0000
ROA not after:            Sun 02 May 2027 02:32:50 +0000
asID:                     150282
IP address blocks:        103.43.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl
                          rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bd:6a:35:95:35:d5:3f:ff:b8:33:e1:0a:9d:74:a6:30:f9:87:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606
        Validity
            Not Before: May  3 02:27:50 2026 GMT
            Not After : May  2 02:32:50 2027 GMT
        Subject: CN=9D30E2D08B2466345E7A091B6C71A1021B506887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:39:71:da:ac:d4:de:2f:4e:45:fd:08:7e:b4:
                    db:0f:0c:b4:23:40:33:45:98:d0:44:01:e2:e0:45:
                    0c:0f:ce:75:76:49:23:84:3d:6d:37:99:0a:d2:aa:
                    23:a7:5a:ed:50:9e:fd:fa:a6:9d:48:f9:1b:67:82:
                    31:2c:a8:84:ea:68:88:a0:b3:c1:9e:e9:f0:e4:f5:
                    f3:c6:fb:b0:93:dc:55:ff:5f:db:c3:d1:13:d2:f4:
                    f8:b9:a6:e2:f2:eb:10:16:8f:34:00:2f:de:54:17:
                    0f:41:e7:ca:98:1e:0f:d2:08:cb:58:5c:0f:57:09:
                    04:cc:9a:6f:9f:29:83:d5:b6:6c:79:61:45:d3:fe:
                    74:4c:f3:b5:50:88:fc:76:69:c5:cf:0b:cb:a9:9b:
                    e1:59:bc:e3:6b:ed:df:17:00:fb:8c:1f:e6:88:cb:
                    aa:3a:67:0c:2e:9c:a1:3a:70:9b:78:8c:9e:c0:ec:
                    92:fc:68:71:03:35:13:fa:b8:0e:d1:a2:d0:1d:ea:
                    99:80:e3:aa:f8:0f:e4:fe:81:c6:1a:10:b7:86:80:
                    73:bd:1b:9f:32:4d:65:48:b2:e3:38:d2:c9:70:5c:
                    ad:2c:c3:4d:bc:9f:44:ce:71:d2:9d:40:e3:83:4e:
                    82:ed:af:91:10:a7:93:9a:de:d1:84:5c:13:3c:14:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:30:E2:D0:8B:24:66:34:5E:7A:09:1B:6C:71:A1:02:1B:50:68:87
            X509v3 Authority Key Identifier:
                keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32362e302f32332d3233203d3e20313530323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:1c:3b:ad:81:40:3a:60:02:cf:3d:76:52:8c:bb:c3:19:
         50:96:72:88:5d:5f:14:f8:9d:7f:6b:6a:c5:63:af:e5:95:87:
         97:8e:c7:81:98:67:c6:97:d8:3c:1a:c0:25:72:9c:db:4a:99:
         1d:3d:21:91:11:c5:01:27:10:b0:00:5a:f0:76:45:90:f7:a3:
         e0:62:a7:cf:db:89:42:0b:21:c0:16:96:16:1f:f6:dc:e2:1d:
         af:4b:f1:d3:49:6d:01:fc:8a:cf:47:f3:89:2a:1a:c5:a5:bd:
         a8:26:ee:cd:f4:8a:91:66:85:ec:39:6b:7d:38:30:7e:94:8f:
         00:bb:db:28:fc:9a:a1:f4:b7:76:da:fa:48:dd:3f:bd:ed:97:
         62:04:5f:06:c9:c3:ed:47:cd:a8:c1:19:c4:31:94:a4:89:7c:
         1b:90:9c:06:61:92:fe:8c:50:bf:1c:8f:38:90:f7:6d:ba:ed:
         09:87:86:08:94:9d:c4:eb:da:97:1e:3b:5f:f9:e7:00:e5:3b:
         d0:44:92:96:cd:dd:db:99:89:c4:af:24:a9:ab:1e:79:f1:20:
         ed:87:46:6a:65:81:ed:d0:94:54:05:ec:34:fe:a8:0b:65:3a:
         20:02:5a:e9:0a:8c:a7:a8:8f:5e:42:91:d4:a0:40:ae:3b:77:
         74:8a:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:03 2026 by rpki-client