Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
File:                     3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          FptSR8q7lfMCgCSKLjWnM/OjVJhBqEdi2E49VH6LcSA=
Subject key identifier:   AD:A2:D9:C7:21:B6:49:46:0A:E2:4D:44:5C:92:F9:6F:DF:DC:65:37
Certificate issuer:       /CN=F831F8D1B7EB333E836D19E2C6659AA968449902
Certificate serial:       6491641238BFBA4A16813F8EFE8B68802F719C09
Authority key identifier: F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
Signing time:             Sun 03 May 2026 02:33:38 +0000
ROA not before:           Sun 03 May 2026 02:28:38 +0000
ROA not after:            Sun 02 May 2027 02:33:38 +0000
asID:                     133800
IP address blocks:        103.58.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl
                          rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:91:64:12:38:bf:ba:4a:16:81:3f:8e:fe:8b:68:80:2f:71:9c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F831F8D1B7EB333E836D19E2C6659AA968449902
        Validity
            Not Before: May  3 02:28:38 2026 GMT
            Not After : May  2 02:33:38 2027 GMT
        Subject: CN=ADA2D9C721B649460AE24D445C92F96FDFDC6537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:ae:7e:62:94:47:29:16:57:80:3d:04:05:
                    df:ff:5a:eb:60:b5:94:97:95:56:a9:08:a3:e9:0b:
                    50:a5:68:1e:45:fb:66:fe:6f:41:0a:8c:be:55:d5:
                    b3:da:0a:2b:18:23:8c:c8:d0:83:ac:a0:6f:ea:c7:
                    de:e9:ee:cc:80:5c:46:0a:02:82:e2:cb:9b:86:af:
                    3c:5f:b8:69:78:52:5d:88:53:2e:9b:38:93:8a:31:
                    13:d9:a6:2e:fb:36:28:36:56:57:c5:04:ef:49:a1:
                    66:cf:98:25:06:2a:53:77:73:01:8e:9d:d8:b4:18:
                    06:26:d6:ee:c7:ce:79:9c:3f:08:f6:12:f2:07:4f:
                    89:95:ea:6f:f8:34:aa:fc:65:04:79:3f:3d:11:e0:
                    bf:2e:d5:a0:52:53:ab:c9:03:e5:01:5b:7a:9e:4a:
                    51:19:f2:85:2b:5d:28:1a:6d:17:6f:04:ec:e1:ab:
                    fe:b7:8a:8e:75:c7:7c:c4:6d:54:e7:62:34:02:aa:
                    63:54:fa:0b:eb:25:dc:00:80:1e:be:27:41:a8:08:
                    f3:61:f9:2f:bc:d0:0a:27:22:f0:2d:fc:fe:a6:32:
                    6a:94:22:b5:98:8c:7f:0c:9e:74:35:14:01:4d:75:
                    46:6d:3e:21:b0:9d:fa:eb:b3:ef:95:12:df:8f:a9:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A2:D9:C7:21:B6:49:46:0A:E2:4D:44:5C:92:F9:6F:DF:DC:65:37
            X509v3 Authority Key Identifier:
                keyid:F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:1e:0a:65:5e:37:4c:bb:8d:17:54:7b:19:d8:b8:fa:6a:
         20:65:a6:4d:db:04:75:bf:95:ff:75:53:29:1a:2b:1c:2d:1d:
         d2:98:7d:7b:6c:91:fc:8b:4f:b2:0d:21:15:f9:e9:02:b0:df:
         f2:d9:df:23:b8:ab:32:eb:2a:a1:a3:51:5f:6d:53:18:34:75:
         a5:c0:8e:aa:4e:72:a7:8d:98:57:0e:59:d8:56:48:52:ec:37:
         ee:da:b3:c8:2a:f9:89:ab:a1:90:f2:66:33:76:da:8e:f2:de:
         45:6b:55:98:af:d3:3b:e0:0e:68:0d:f8:3b:7f:75:2c:42:d1:
         33:3d:3e:18:46:a4:4d:6b:c7:e9:e8:9d:7d:9c:e6:42:a1:99:
         51:97:df:ba:12:84:16:59:a8:1b:de:3b:90:ff:8f:17:7f:d4:
         eb:d0:aa:27:15:1a:c3:f4:04:a4:3c:fb:1d:09:5c:30:92:ab:
         40:96:bd:23:5b:92:71:aa:0f:e6:35:ca:47:95:37:07:db:36:
         3a:23:d4:e1:99:9d:14:82:64:84:34:d0:77:70:77:b3:55:70:
         f8:01:19:8a:1e:b5:0d:9e:13:d9:3b:06:19:91:18:77:37:7f:
         b1:e2:bd:1d:80:6d:a3:0f:d1:0d:46:ee:53:49:a5:be:c7:bb:
         11:5d:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:39 2026 by rpki-client