Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa
File:                     3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (raw, json)
Hash identifier:          sRKPnzGfUxDUkQc/uHwTXrV9y9ShQIMBUc92DmR5O3I=
Subject key identifier:   0B:4A:2E:1B:CB:4E:DF:0A:8A:41:A3:C0:41:E0:F7:3D:49:2D:69:DB
Certificate issuer:       /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
Certificate serial:       64084681875275973031007FFF65D00095120097
Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa
Signing time:             Sun 03 May 2026 02:37:44 +0000
ROA not before:           Sun 03 May 2026 02:32:44 +0000
ROA not after:            Sun 02 May 2027 02:37:44 +0000
asID:                     149943
IP address blocks:        103.191.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl
                          rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:08:46:81:87:52:75:97:30:31:00:7f:ff:65:d0:00:95:12:00:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
        Validity
            Not Before: May  3 02:32:44 2026 GMT
            Not After : May  2 02:37:44 2027 GMT
        Subject: CN=0B4A2E1BCB4EDF0A8A41A3C041E0F73D492D69DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:d1:96:d3:d6:fe:2b:3a:b9:29:7c:85:f9:
                    b9:9e:21:3b:0c:77:33:3b:af:8f:d7:91:0f:5c:92:
                    49:0d:d8:23:07:2e:7f:b0:f8:aa:5b:4e:fa:4b:9a:
                    31:5b:ef:65:70:1c:bf:8b:34:7f:33:63:af:4e:63:
                    1c:a1:89:94:76:39:e4:40:38:c1:39:0c:0b:23:d0:
                    77:47:04:7c:f9:5a:6a:ed:3f:eb:b2:3a:7b:d1:19:
                    7b:4c:e9:5f:97:cb:56:3b:7e:79:42:ab:40:6d:47:
                    66:62:d5:65:11:9d:24:b0:a2:a1:28:98:91:10:3f:
                    91:93:e9:74:c1:5e:ab:6c:ca:0e:09:9e:b9:84:96:
                    f7:3a:a6:56:ef:3d:95:18:2c:38:f4:dc:86:dd:79:
                    5a:6b:6b:44:86:d1:8c:fc:ca:5a:46:65:17:da:a9:
                    04:c0:a3:e6:3b:9a:ad:c5:d6:05:d8:57:49:a2:bb:
                    da:ed:28:0f:8a:b5:3b:45:df:08:5b:6e:e3:1e:2b:
                    d0:15:13:e0:88:6e:cf:97:63:4a:1b:a9:a7:f5:ff:
                    fe:3a:fc:5f:dd:71:f4:d9:f1:a3:b2:17:30:a3:0d:
                    76:84:8d:24:49:22:19:58:65:d2:f2:4a:aa:99:c8:
                    8d:7d:db:2e:35:17:52:79:8f:be:e4:aa:74:24:e7:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:2E:1B:CB:4E:DF:0A:8A:41:A3:C0:41:E0:F7:3D:49:2D:69:DB
            X509v3 Authority Key Identifier:
                keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:39:b5:4d:67:05:fd:83:0f:a4:f7:e9:20:30:28:b0:be:d0:
         c7:0a:6c:3f:75:1a:88:2d:6d:eb:07:24:1c:f8:70:d9:c0:24:
         e4:f8:91:d8:9b:af:50:a0:54:10:97:9e:0e:2c:de:e3:4b:1d:
         d9:b3:2f:d5:d5:97:a4:71:83:aa:38:e6:f7:88:5c:21:06:45:
         a4:fb:f1:ba:6d:7f:17:88:37:4d:6a:3c:bf:83:e5:d0:10:40:
         16:88:11:e3:49:d0:a4:43:6f:de:8e:47:3d:d1:dd:e9:e3:81:
         e3:6b:f0:65:d2:04:8b:49:c0:06:f4:92:97:5e:c5:08:02:04:
         2b:cb:3a:dc:6e:29:d1:e2:a0:71:fb:b6:c1:73:90:45:4f:dc:
         a2:cc:c8:50:14:1b:13:91:a7:56:5f:4b:c4:17:04:e7:93:8e:
         15:05:bb:0d:c2:ef:0d:42:a9:bf:45:a7:87:45:e8:97:e2:bf:
         a5:3f:62:3a:4a:29:36:a6:e7:90:77:a3:28:fa:06:2c:c2:ab:
         a7:b3:e5:e4:17:b9:0c:04:99:fe:ab:3a:4f:61:f1:f4:10:21:
         e7:b1:36:1d:03:34:22:f6:be:98:ed:c1:db:18:12:2c:36:1d:
         99:6c:31:9f:2a:a1:ac:23:b6:0d:f0:c7:c5:15:83:94:35:c8:
         5a:01:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:48 2026 by rpki-client