Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
File:                     3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (raw, json)
Hash identifier:          9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=
Subject key identifier:   30:5E:B2:50:C8:92:7F:A9:5F:FA:D0:AD:19:D1:16:4C:48:67:7E:89
Certificate issuer:       /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A
Certificate serial:       1732C9B7CD3EA6686BC36044B2A1F47F24AC6DB9
Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
Signing time:             Sun 03 May 2026 02:36:15 +0000
ROA not before:           Sun 03 May 2026 02:31:15 +0000
ROA not after:            Sun 02 May 2027 02:36:15 +0000
asID:                     147107
IP address blocks:        103.174.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl
                          rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:32:c9:b7:cd:3e:a6:68:6b:c3:60:44:b2:a1:f4:7f:24:ac:6d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A
        Validity
            Not Before: May  3 02:31:15 2026 GMT
            Not After : May  2 02:36:15 2027 GMT
        Subject: CN=305EB250C8927FA95FFAD0AD19D1164C48677E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:35:06:c8:a4:01:e9:3a:be:2c:66:ba:b1:
                    03:06:22:63:eb:1a:dc:2e:5f:39:08:74:7c:70:3e:
                    44:cb:5b:00:42:de:6b:e0:b1:4f:37:f3:fb:a6:83:
                    ec:87:a0:ea:37:a8:df:19:40:ad:69:d6:e6:37:e6:
                    7a:0e:35:f4:53:63:10:da:30:27:10:42:e8:e1:4f:
                    1b:85:16:af:c7:ff:b6:cb:94:ed:73:10:f5:00:76:
                    65:2d:37:be:05:d2:56:24:5a:70:e7:26:b8:8e:bf:
                    fd:0b:ad:c9:1a:8f:27:22:fe:cc:b7:12:87:a9:5a:
                    09:f6:45:18:a9:f7:fb:88:d8:03:05:b1:bf:ee:37:
                    7f:20:ba:c6:ea:fb:11:14:27:97:e7:dc:ff:b1:f2:
                    ac:59:2a:dc:51:69:f4:85:78:45:ff:32:80:92:0a:
                    d4:fa:39:01:89:93:69:5c:c0:dc:1f:15:1f:e0:c2:
                    3e:06:f8:0d:b6:41:01:98:27:bc:f7:61:25:24:47:
                    34:2a:ec:c6:d2:20:e7:75:28:1a:a5:29:fb:97:38:
                    84:48:80:fd:31:a3:0c:b7:81:61:f5:fd:45:aa:93:
                    17:a3:93:0d:70:2e:2f:31:66:b9:26:01:5d:59:2a:
                    2e:79:4a:6c:7e:7d:37:82:78:78:6e:d4:14:0c:25:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5E:B2:50:C8:92:7F:A9:5F:FA:D0:AD:19:D1:16:4C:48:67:7E:89
            X509v3 Authority Key Identifier:
                keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:4d:46:64:0b:28:c7:cc:74:9f:61:98:90:41:fa:65:75:
         e0:22:6b:51:3f:4c:36:a2:a9:92:d0:25:05:38:24:d8:12:42:
         fd:c0:0f:2a:6e:4c:e6:80:6a:07:28:0b:1a:2e:24:20:51:11:
         1a:9d:5a:1b:ee:13:cc:0e:57:d8:cc:15:b5:4b:4b:0e:cb:4c:
         cc:8d:5b:42:c5:e2:51:25:b7:c6:46:f4:f6:54:da:1a:0f:ea:
         fb:2a:b4:11:02:e2:66:33:b2:b6:07:e0:dd:89:a8:17:f5:96:
         ba:60:eb:8b:cb:e7:5f:91:f8:d4:f3:2d:35:48:2c:c6:05:5f:
         5c:f7:bc:a1:ec:70:7f:3a:5a:9f:75:83:ca:7e:d4:be:30:79:
         7a:5a:fe:32:29:2f:40:7e:d8:1f:1a:d1:be:3a:02:b0:a4:83:
         18:2f:29:50:85:09:1a:56:f0:b9:b0:2a:88:32:08:ac:79:9b:
         92:0b:56:c8:3f:78:90:de:da:09:98:c2:1c:8b:05:45:eb:39:
         c2:33:0a:54:ef:e2:a2:b3:74:5e:49:32:e3:71:08:b9:20:68:
         30:da:c1:8c:2f:2f:95:85:d8:70:ef:41:f0:d6:ae:52:ba:e2:
         b3:65:fb:e5:5c:3a:99:51:9d:92:2e:e9:33:ab:d4:6f:68:db:
         45:27:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:48 2026 by rpki-client