Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa
File:                     3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (raw, json)
Hash identifier:          mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=
Subject key identifier:   50:99:CF:34:CD:0D:7F:48:25:5A:02:1C:59:94:BF:A7:C5:84:E8:CC
Certificate issuer:       /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633
Certificate serial:       6DE5B284CD90AD11D2E684D8B0DC07E28260463A
Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa
Signing time:             Sun 03 May 2026 02:36:56 +0000
ROA not before:           Sun 03 May 2026 02:31:56 +0000
ROA not after:            Sun 02 May 2027 02:36:56 +0000
asID:                     141664
IP address blocks:        103.26.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl
                          rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:b2:84:cd:90:ad:11:d2:e6:84:d8:b0:dc:07:e2:82:60:46:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633
        Validity
            Not Before: May  3 02:31:56 2026 GMT
            Not After : May  2 02:36:56 2027 GMT
        Subject: CN=5099CF34CD0D7F48255A021C5994BFA7C584E8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:1b:8a:8a:f2:e8:3a:6f:7f:eb:55:50:3e:
                    19:10:cf:55:7a:61:84:01:91:f9:22:00:0e:d6:22:
                    8c:e4:4e:57:1b:c8:34:9b:60:87:d7:b9:97:51:84:
                    32:e8:72:68:75:2d:f8:1c:11:10:24:b7:1b:d9:a2:
                    a5:9d:47:76:30:88:68:f4:f5:3b:0c:61:8a:34:fc:
                    51:65:b1:64:c5:01:60:8c:de:ee:97:76:24:f1:a4:
                    14:c6:de:5a:e5:ba:60:93:79:9d:2a:2b:c4:06:97:
                    86:8d:a4:a2:28:f5:be:b7:66:a8:77:96:52:b1:bd:
                    fa:6b:12:35:ca:7d:13:60:ab:2b:6e:90:4b:8a:83:
                    63:2d:70:66:5c:a9:e6:58:61:c9:1e:ca:1a:c5:f2:
                    16:33:5d:c3:d9:73:0d:ea:92:6b:ad:ed:f2:07:2d:
                    77:34:e6:f9:91:d4:6c:2c:38:4e:dd:00:80:f1:fc:
                    3d:9d:60:3e:44:37:c4:96:ca:da:29:30:43:41:9f:
                    8e:cc:22:36:fc:e0:85:f0:35:d9:f6:95:ae:7c:4c:
                    36:05:9a:aa:8f:67:9d:c2:27:8e:6e:07:c5:53:90:
                    61:e3:c3:2f:bc:3d:47:2e:3b:c7:87:0e:08:2d:e2:
                    84:f2:7f:11:84:3d:76:ca:6b:b9:1a:e9:ad:23:99:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:99:CF:34:CD:0D:7F:48:25:5A:02:1C:59:94:BF:A7:C5:84:E8:CC
            X509v3 Authority Key Identifier:
                keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:27:e5:ca:9a:85:69:cd:d7:9b:a3:5e:d3:48:38:50:be:4f:
         c5:00:0e:f3:42:73:c5:05:11:24:70:a2:6f:76:22:23:b6:ef:
         e4:c8:86:ab:da:35:cd:84:03:e9:c4:a7:65:36:6a:a9:8d:1c:
         01:eb:a9:96:af:f4:82:13:ce:c3:13:16:46:e1:85:3c:96:72:
         e8:c1:96:dd:bf:0a:e2:0e:b0:f1:44:64:54:96:7f:ed:18:97:
         ac:ee:0c:7f:c3:4f:45:7b:c0:54:49:52:21:52:79:f7:2b:1e:
         80:50:b9:af:78:32:23:77:cf:6e:38:f7:10:4f:00:46:35:2b:
         a6:e5:64:48:6f:0c:f8:81:fa:c5:86:cf:f4:ca:32:34:97:16:
         89:a8:53:7a:3f:e5:f1:98:e2:94:d1:83:d3:72:46:5b:61:a1:
         0b:39:34:9c:f7:8e:1c:54:f1:02:94:8b:da:f5:f6:e3:c5:89:
         0d:81:cb:4d:72:63:ed:ea:da:5d:ab:fa:ba:f9:15:91:40:77:
         8b:ed:24:31:16:84:07:67:bc:b4:9e:40:70:b4:81:e7:b9:8c:
         f9:ea:30:37:c2:0b:0f:df:49:3e:ec:9a:1e:05:fc:ce:28:43:
         55:da:8a:76:06:ad:e9:1b:d0:6e:fd:c1:84:d0:74:b2:a1:99:
         f3:9c:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:28 2026 by rpki-client