Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36372e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          4li3z+1Nz7s7JXRdhlc3Toes26Qk6yqpS9NDKdxbXYI=
Subject key identifier:   5B:AE:58:AC:62:33:47:42:1F:73:99:8A:70:2D:CA:D3:76:CA:9F:45
Certificate issuer:       /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
Certificate serial:       46B35E9A3A67646CB8644480CEB9A793DC3FA555
Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36372e302f32342d3234203d3e20313336303535.roa
Signing time:             Sun 03 May 2026 02:34:31 +0000
ROA not before:           Sun 03 May 2026 02:29:31 +0000
ROA not after:            Sun 02 May 2027 02:34:31 +0000
asID:                     136055
IP address blocks:        103.81.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl
                          rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b3:5e:9a:3a:67:64:6c:b8:64:44:80:ce:b9:a7:93:dc:3f:a5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
        Validity
            Not Before: May  3 02:29:31 2026 GMT
            Not After : May  2 02:34:31 2027 GMT
        Subject: CN=5BAE58AC623347421F73998A702DCAD376CA9F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:9a:bd:22:c3:13:bd:cd:67:c1:3b:7d:ce:
                    d1:a0:f3:89:fa:b5:42:bb:32:a6:cc:44:f0:12:9c:
                    c9:60:96:67:6a:ec:85:a3:9f:47:13:05:0d:a9:ab:
                    79:5f:21:bd:85:17:11:73:09:0e:4a:64:cf:6c:d6:
                    bb:31:aa:4a:e8:e5:04:8e:5c:7e:9b:d5:e0:2f:af:
                    23:5d:da:e3:21:44:92:08:ab:56:1d:47:7a:49:83:
                    a9:a0:0d:c2:81:bc:05:1a:18:29:e9:f9:25:9d:f2:
                    2a:1f:ff:8e:62:d8:42:ee:f3:0f:00:49:9b:b7:77:
                    6b:e4:c9:26:2d:01:1c:6c:9e:f4:5d:46:c1:9b:a4:
                    39:01:65:2b:17:ba:64:d0:b7:31:07:93:0a:ac:50:
                    cf:d6:51:39:2a:61:e9:7c:b6:b7:79:21:ca:0e:30:
                    86:2b:5d:43:76:3e:c1:8f:10:33:1e:e5:8e:65:bf:
                    fa:ba:e5:52:8a:1c:b0:a6:cd:d1:66:7e:20:8d:5c:
                    61:f0:da:ba:7b:69:44:cc:79:6b:bf:c3:17:78:6a:
                    b5:e1:12:e5:cc:95:29:5d:76:a8:7d:05:e4:b7:9a:
                    b5:07:64:2c:29:a5:bb:5c:6d:d8:67:65:ac:91:05:
                    ec:b4:e5:bb:dd:c2:57:78:eb:47:b4:2a:3b:c0:e7:
                    90:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AE:58:AC:62:33:47:42:1F:73:99:8A:70:2D:CA:D3:76:CA:9F:45
            X509v3 Authority Key Identifier:
                keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36372e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:c5:11:ae:97:0b:24:00:01:22:7d:93:aa:a8:09:bb:6e:
         06:a2:9e:a4:6b:9e:70:83:19:cf:81:e9:0f:05:b4:a0:ef:c8:
         5d:5a:52:96:8c:53:58:1f:6e:23:37:22:70:4c:69:75:ab:9d:
         2a:8a:65:b5:7a:4f:71:ed:a8:52:2c:48:8c:d4:4c:06:43:cd:
         bf:a5:6f:f5:62:b7:ee:2f:0b:d9:65:c4:bc:ee:da:ba:e8:33:
         51:11:1a:cc:f8:33:24:7a:87:e2:77:e5:bd:82:64:b0:a6:f9:
         dc:55:2a:86:83:ba:ff:40:23:e7:30:f3:2a:2f:61:dd:29:b3:
         3a:e9:5b:27:ca:a3:a9:c1:48:f7:1f:04:80:63:cd:e8:a4:a2:
         5a:db:b5:7b:ed:09:fe:63:fd:d8:f9:2f:99:5f:48:89:8b:4a:
         1f:51:81:c5:2b:85:7d:2c:0d:36:be:59:c2:c2:ba:13:49:0a:
         6d:54:ba:36:a6:dc:e2:07:56:43:73:c2:09:a5:59:01:10:2d:
         4e:77:e7:96:a2:9b:65:4b:53:b5:14:d6:c6:b7:98:85:12:da:
         58:eb:61:f7:0d:aa:90:a2:42:a7:80:a0:41:b4:6c:6c:28:a2:
         ca:62:c3:46:c5:fc:84:ec:b2:ae:bd:74:54:01:01:f0:13:e8:
         02:5e:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:00 2026 by rpki-client