Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa
File:                     3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (raw, json)
Hash identifier:          ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=
Subject key identifier:   B8:74:D2:5A:B2:97:2A:AE:32:FB:2D:B2:14:FE:78:CE:3D:C2:D3:B6
Certificate issuer:       /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5
Certificate serial:       050E5BDEA6CE330B1427148067DF048BE914C8E5
Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa
Signing time:             Sun 03 May 2026 02:38:11 +0000
ROA not before:           Sun 03 May 2026 02:33:11 +0000
ROA not after:            Sun 02 May 2027 02:38:11 +0000
asID:                     147133
IP address blocks:        103.176.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl
                          rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0e:5b:de:a6:ce:33:0b:14:27:14:80:67:df:04:8b:e9:14:c8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5
        Validity
            Not Before: May  3 02:33:11 2026 GMT
            Not After : May  2 02:38:11 2027 GMT
        Subject: CN=B874D25AB2972AAE32FB2DB214FE78CE3DC2D3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:b1:80:6d:50:b1:89:01:0c:a5:16:bc:b0:
                    b2:9d:ea:0b:ce:d8:80:0e:68:ca:9c:dd:43:c7:ad:
                    7a:2f:9a:10:ef:66:03:3b:a9:7d:6b:13:9a:c6:24:
                    14:f2:6b:a0:d3:4f:8a:36:fb:96:44:75:d7:42:84:
                    d2:08:55:8b:e0:ec:16:2a:48:83:0b:75:4e:9c:4e:
                    8d:31:f7:f9:13:76:7b:52:6e:53:9a:68:22:e9:44:
                    24:b6:3b:0a:b2:91:30:37:cb:94:65:65:96:04:84:
                    18:20:06:94:2d:31:58:e3:36:35:0c:8f:fa:da:92:
                    8d:62:5d:45:24:90:8b:fb:f0:a7:e4:3d:74:51:1a:
                    60:96:52:37:89:6c:96:97:53:06:04:ad:33:27:20:
                    e6:3d:3d:c5:78:97:80:a4:81:53:f5:10:d8:d9:e5:
                    71:ab:da:4e:f4:a6:c9:66:0d:28:7f:e8:d5:19:ae:
                    5e:bf:a1:06:0d:f2:46:e9:41:af:a9:36:95:ad:51:
                    1b:5f:de:ca:f9:5f:9f:d8:84:1b:11:39:38:98:0f:
                    2e:8c:f0:3e:14:e2:ea:c1:fa:35:fe:8b:81:fb:c7:
                    fc:12:09:58:0f:b0:ae:40:03:ca:48:ba:8f:ac:17:
                    e2:e4:8f:d3:35:04:6a:31:e3:b0:a2:18:06:dd:a0:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:74:D2:5A:B2:97:2A:AE:32:FB:2D:B2:14:FE:78:CE:3D:C2:D3:B6
            X509v3 Authority Key Identifier:
                keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:9e:c4:1f:2a:fc:36:17:86:2a:48:1f:0d:1f:1b:32:65:
         61:20:04:31:7b:50:84:ec:29:08:0e:e6:93:21:29:d7:b9:16:
         fb:da:a6:0e:be:e9:5d:b1:45:83:be:44:76:de:51:b3:e4:42:
         ab:74:6d:3a:89:79:66:d5:a0:5e:f1:92:34:3e:d6:2b:b7:9a:
         8e:0e:a8:98:71:cb:4f:61:85:8b:b3:bb:b9:ba:b0:b7:d0:c5:
         3b:b2:35:4a:b9:1b:93:ab:16:ba:54:cc:03:9f:bb:99:1e:64:
         9d:0b:c9:1b:f4:c2:3c:62:44:59:7c:b3:09:9f:52:17:30:2b:
         ac:5e:66:c3:23:7b:1b:28:4c:68:02:b6:73:4b:09:bd:6a:96:
         75:52:a2:7a:88:79:a3:95:3c:16:2c:cb:d9:27:52:00:66:5f:
         56:1c:e4:ba:08:f2:55:8b:88:92:38:42:92:b2:70:79:df:dd:
         70:4d:e3:ac:e9:4e:12:b5:b8:4a:5c:1f:f0:39:c9:16:d5:d0:
         1b:c5:7f:d9:08:9c:0a:01:0f:cc:12:90:62:0d:3c:2e:16:1a:
         7c:4c:cd:78:df:de:e3:13:98:76:20:62:af:05:49:1b:e3:4d:
         c4:fd:82:a9:7c:b7:bb:fb:55:38:1c:60:87:ad:56:65:a9:68:
         ca:80:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:04 2026 by rpki-client