Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36352e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          XYuoDJC5s96e5yusTqZBcVmhuNZ72wM2dZW3ZEAAa7k=
Subject key identifier:   4D:63:44:A8:1B:D2:F5:93:D9:49:19:73:5F:82:AF:B2:36:63:F2:1F
Certificate issuer:       /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
Certificate serial:       5DD385BD8BDA5C2C0C13E3A68374F026D1D32F21
Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36352e302f32342d3234203d3e20313336303535.roa
Signing time:             Sun 03 May 2026 02:34:30 +0000
ROA not before:           Sun 03 May 2026 02:29:30 +0000
ROA not after:            Sun 02 May 2027 02:34:30 +0000
asID:                     136055
IP address blocks:        103.81.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl
                          rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d3:85:bd:8b:da:5c:2c:0c:13:e3:a6:83:74:f0:26:d1:d3:2f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
        Validity
            Not Before: May  3 02:29:30 2026 GMT
            Not After : May  2 02:34:30 2027 GMT
        Subject: CN=4D6344A81BD2F593D94919735F82AFB23663F21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:5c:59:7f:cb:34:e2:12:fc:ac:1b:6f:b4:
                    c8:3b:10:22:18:53:02:01:ea:b6:c4:39:78:dd:63:
                    61:8c:c1:2c:d0:18:03:66:f3:b1:d2:53:ae:42:88:
                    ce:50:f0:a4:8c:6d:a5:cc:22:2c:6b:6c:2d:ba:34:
                    2e:94:12:02:16:5e:52:7f:a6:18:ec:75:af:fe:e5:
                    6f:78:95:82:d8:9c:5d:38:1c:f9:56:16:0b:9d:a3:
                    d9:9d:a6:6d:40:44:2e:b5:2c:49:c2:25:f5:91:ca:
                    64:f0:e7:df:d1:2a:26:48:c0:cf:c8:e3:2c:6f:92:
                    aa:70:90:d5:cb:b9:dc:38:e4:59:38:f8:64:0c:be:
                    20:39:ee:c0:77:ff:1c:10:a0:a7:df:0e:61:77:99:
                    f7:47:b4:df:f0:5c:6c:af:8e:37:af:21:67:db:6a:
                    d6:65:cb:c8:e8:a3:7b:aa:9e:4e:a3:c2:b6:d9:0b:
                    10:d7:b3:3f:6e:1b:d4:3c:79:fe:ec:89:81:74:8c:
                    43:48:3d:ce:ec:78:7e:6a:33:93:21:a5:e1:f6:64:
                    1b:f9:32:ee:54:c3:71:b2:71:2c:7a:f7:00:18:c0:
                    0d:e3:5a:d3:ef:9d:02:90:67:7f:41:9d:b6:11:7b:
                    2d:60:0e:51:10:93:ac:53:95:7c:38:95:e7:b6:47:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:63:44:A8:1B:D2:F5:93:D9:49:19:73:5F:82:AF:B2:36:63:F2:1F
            X509v3 Authority Key Identifier:
                keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36352e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:96:47:c9:9a:5f:f1:1b:6d:58:3b:9c:e3:a2:49:77:7f:70:
         5a:80:5b:db:62:c1:c7:c1:9b:d4:d8:ed:e6:a3:b9:b6:f9:46:
         5f:da:fe:f6:b8:ae:d2:8e:8b:a7:2a:00:b3:56:bd:87:53:34:
         ab:ff:e0:f5:d1:ef:cc:ef:08:82:7b:1f:b9:d7:15:7b:98:ef:
         f8:98:c8:ff:cd:72:c3:1d:d5:eb:0c:c8:8c:fe:13:e9:32:fe:
         92:cc:e8:80:28:52:17:14:ef:b2:90:82:45:ec:39:83:47:b1:
         3b:eb:1a:d5:53:f3:29:40:cf:e4:04:44:b3:96:ad:e8:9b:ad:
         b0:f7:f7:63:45:fd:2e:bc:48:64:d2:02:f3:8c:f0:18:9d:25:
         40:78:43:34:6b:d3:72:87:6e:82:5e:d1:5b:be:dd:42:70:63:
         82:68:3f:21:70:e0:b5:b8:c2:bf:04:d3:bb:a0:6d:e8:3b:c6:
         99:76:4c:d8:08:a0:52:89:0c:29:f9:cf:f6:3a:d3:da:38:63:
         2e:eb:7a:d7:ea:06:e0:8d:80:63:60:a1:d9:5b:4c:47:8b:35:
         e7:2d:3c:82:ad:a0:f0:59:39:65:ce:a7:f2:93:43:80:23:d1:
         b1:95:34:64:71:3b:ad:2d:03:35:11:94:f8:33:6d:75:32:26:
         09:74:4d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:24:20 2026 by rpki-client