Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e203538383230.roa
File:                     3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (raw, json)
Hash identifier:          5EvruLBNSAVPD9rhIUp2sgGO0l1cxlFHLpEgjT7FBPg=
Subject key identifier:   87:FB:04:06:40:03:90:3C:81:E4:89:57:3F:44:99:39:6B:97:6E:FB
Certificate issuer:       /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1
Certificate serial:       76BA9EC2E3C70F364C28FE1008100D15C9DA61EF
Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e203538383230.roa
Signing time:             Sun 03 May 2026 02:35:58 +0000
ROA not before:           Sun 03 May 2026 02:30:58 +0000
ROA not after:            Sun 02 May 2027 02:35:58 +0000
asID:                     58820
IP address blocks:        103.185.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl
                          rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ba:9e:c2:e3:c7:0f:36:4c:28:fe:10:08:10:0d:15:c9:da:61:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1
        Validity
            Not Before: May  3 02:30:58 2026 GMT
            Not After : May  2 02:35:58 2027 GMT
        Subject: CN=87FB04064003903C81E489573F4499396B976EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:12:5a:cc:99:6d:83:6f:39:59:ab:9a:be:
                    3a:ac:bb:16:79:eb:dd:57:d0:0f:36:be:34:f3:04:
                    22:3c:68:12:7c:7a:00:75:8d:11:c1:9b:2d:9d:1e:
                    df:b2:17:27:84:08:c3:a8:c2:79:1e:8a:ec:12:80:
                    48:0b:db:21:61:7a:84:16:f8:83:5b:f5:14:ac:63:
                    89:7b:b4:3e:91:95:73:49:a3:e8:11:77:0e:14:3a:
                    f4:89:74:a7:c7:d5:3d:ed:d8:d9:a9:05:cd:dd:32:
                    90:68:ff:ca:9e:44:45:69:b3:41:41:98:44:22:6b:
                    14:cf:bd:24:7b:8d:0b:f2:53:fc:e9:e0:a6:53:c8:
                    da:9a:89:be:64:10:6f:a3:82:53:d5:b1:30:40:4e:
                    1a:d8:a2:32:da:01:88:e1:a7:2f:14:8a:62:d6:43:
                    b5:01:22:84:79:8b:b1:4d:f7:82:8a:fc:46:a9:19:
                    da:0b:6c:58:b1:d0:04:18:f3:b1:e4:98:9d:f5:a3:
                    e6:56:30:da:bf:3f:b0:b6:ad:e2:10:e9:6b:ee:c3:
                    27:15:ef:c5:66:ac:70:86:9c:03:a3:fe:21:92:7e:
                    80:e2:fd:0b:d3:00:b4:fe:49:9d:dd:ae:b4:30:81:
                    41:32:24:54:89:30:80:91:a4:8d:e0:02:71:99:ec:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FB:04:06:40:03:90:3C:81:E4:89:57:3F:44:99:39:6B:97:6E:FB
            X509v3 Authority Key Identifier:
                keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:91:d6:ab:4c:2d:24:4b:97:e7:83:58:c8:a6:78:f6:09:c0:
         95:86:27:15:2d:e6:b4:ea:b6:7e:89:c8:9a:bb:38:1b:39:d4:
         c7:a8:d5:d3:2a:f7:e0:d9:57:5b:4f:3f:1f:b7:a5:45:67:ff:
         0e:d3:2f:30:de:f9:89:79:b9:1d:55:fa:c4:12:ca:27:32:89:
         5e:74:96:ff:a6:89:3b:70:42:2d:19:0e:c8:1f:2b:73:65:cc:
         f9:85:b1:71:26:47:0d:1e:a9:63:24:e1:88:af:5f:48:d4:27:
         e1:6a:53:3c:45:c3:f0:ef:3b:8b:17:cf:2d:79:00:d2:00:06:
         fc:22:6d:6b:ba:cf:a1:b8:0d:ad:a8:0e:fe:65:ff:bc:00:c9:
         99:7a:d0:87:47:f0:a5:b2:1d:4c:3e:fc:2b:7d:0d:40:ba:08:
         14:88:eb:64:5f:ca:8e:25:3e:c4:4d:d6:60:c5:7a:e4:2d:92:
         1e:5d:27:e0:ff:72:98:00:40:63:af:8f:36:fa:64:4e:e4:5a:
         4a:34:37:0d:d0:f1:2c:f6:ca:93:62:72:fd:aa:98:c3:94:35:
         92:e4:8f:53:e1:2a:00:a8:ed:6f:10:a6:e3:dc:1a:09:a7:8f:
         f4:bb:27:9e:12:af:f8:a0:a9:d4:17:75:03:77:1e:6b:58:e0:
         70:01:9f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:23 2026 by rpki-client