Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32322d3234203d3e203436303233.roa
File:                     3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (raw, json)
Hash identifier:          iUY+SdN+QQAOG22XorTDG8S2mJg0a1nPIepKaYKt6FE=
Subject key identifier:   14:AD:E9:81:79:FE:19:D2:84:C2:36:B5:6B:95:70:AE:2A:16:D7:E1
Certificate issuer:       /CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Certificate serial:       7A276A79C3AD9E8008B3C77D38CFECDC088A6898
Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32322d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 02:33:48 +0000
ROA not before:           Sun 03 May 2026 02:28:48 +0000
ROA not after:            Sun 02 May 2027 02:33:48 +0000
asID:                     46023
IP address blocks:        103.245.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
                          rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:27:6a:79:c3:ad:9e:80:08:b3:c7:7d:38:cf:ec:dc:08:8a:68:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067
        Validity
            Not Before: May  3 02:28:48 2026 GMT
            Not After : May  2 02:33:48 2027 GMT
        Subject: CN=14ADE98179FE19D284C236B56B9570AE2A16D7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:d5:4d:a6:d0:04:ec:59:ba:8c:97:bd:e5:
                    b9:d5:47:fa:21:9f:b9:df:8a:42:4f:ee:43:8b:dd:
                    5d:09:57:31:74:7d:6f:9b:31:61:d8:cb:6e:2d:7c:
                    35:ca:c4:de:33:48:30:a3:c3:74:85:36:60:f8:b8:
                    c7:35:c8:c1:6d:5f:9b:a0:b1:7f:c3:56:d9:e3:8d:
                    67:ba:4b:57:1f:da:d0:5c:c5:22:d5:65:da:09:ed:
                    f8:42:7d:a3:86:20:fa:51:27:91:fa:88:61:ec:23:
                    24:28:22:dd:a2:67:c7:cd:c6:b7:1a:e3:64:e0:6b:
                    ab:1e:c1:3c:40:cc:af:12:54:93:48:53:8a:64:9a:
                    8a:83:de:f0:82:33:f5:c9:03:0b:a6:a7:31:9d:f0:
                    64:d8:c5:9d:24:c5:94:87:bc:63:de:4e:12:66:47:
                    55:40:bb:b8:42:01:73:23:9d:af:c3:5e:91:d4:e2:
                    63:5b:ff:aa:9f:22:9b:97:28:62:7f:6e:3d:6f:f5:
                    b5:6c:96:a5:36:9f:3d:b0:06:e4:60:5a:5b:ca:73:
                    b5:98:46:e5:8e:e8:5a:41:ec:4a:c3:6c:8b:cc:9b:
                    a9:28:02:cd:2c:71:a0:55:8c:93:ab:10:b4:92:13:
                    86:17:28:a7:a3:fb:e2:1c:23:b5:ed:56:ff:c6:3a:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AD:E9:81:79:FE:19:D2:84:C2:36:B5:6B:95:70:AE:2A:16:D7:E1
            X509v3 Authority Key Identifier:
                keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32322d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:01:16:aa:52:94:27:b6:65:b6:32:2b:a5:22:c2:6a:ff:62:
         74:96:a7:51:7c:9a:5c:63:8b:98:fa:8e:90:25:cb:d2:ef:2d:
         33:81:ea:db:6f:a3:f0:ac:a4:de:7d:44:dc:09:ed:cb:bf:ec:
         0c:6c:5e:f5:82:7e:92:76:82:29:5b:1c:63:c8:f6:fc:71:0f:
         ea:44:ab:38:7b:fd:23:c4:bc:61:5e:4f:49:45:45:4e:0f:59:
         8c:f3:04:4c:3d:ca:bf:47:71:a7:1e:69:1b:0a:5e:1d:11:f8:
         8c:98:7b:0c:8e:76:ad:9a:78:e9:c3:94:7e:72:98:2c:d4:66:
         81:db:d7:70:cc:b1:1c:a9:32:cd:b3:04:6c:ca:f9:e8:14:9f:
         23:6e:a5:0b:53:18:75:98:60:9b:7c:04:7e:67:22:0b:3d:42:
         12:58:f6:53:0c:58:7d:6f:be:43:9e:09:84:99:37:c4:b7:53:
         34:81:11:f5:fd:04:25:cb:68:2c:93:8f:73:5e:d0:f3:db:fc:
         45:b5:07:b6:9e:0f:d4:4f:88:32:bd:dc:03:92:05:4c:b2:50:
         ce:06:57:2e:ea:1e:08:03:96:68:62:f7:ee:66:00:ab:8c:aa:
         fb:29:20:d5:ea:28:ce:5d:ea:61:67:51:50:b4:ad:de:2d:22:
         49:fe:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:15 2026 by rpki-client