Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa
File:                     3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (raw, json)
Hash identifier:          bx46ncSYTvRKNt6l7eIGw4KadKwqVqeIYnxDZEiogWY=
Subject key identifier:   FD:52:04:BD:94:1B:9F:8C:2B:C6:90:9D:04:B8:BD:95:58:EB:12:51
Certificate issuer:       /CN=CF204D748DAD2D1A024DE66D85E425F06F541748
Certificate serial:       6A77413B2AF493D7D24D70DF8A0AB58BEDA41027
Authority key identifier: CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa
Signing time:             Sun 03 May 2026 02:38:19 +0000
ROA not before:           Sun 03 May 2026 02:33:19 +0000
ROA not after:            Sun 02 May 2027 02:38:19 +0000
asID:                     151580
IP address blocks:        103.216.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl
                          rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:77:41:3b:2a:f4:93:d7:d2:4d:70:df:8a:0a:b5:8b:ed:a4:10:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF204D748DAD2D1A024DE66D85E425F06F541748
        Validity
            Not Before: May  3 02:33:19 2026 GMT
            Not After : May  2 02:38:19 2027 GMT
        Subject: CN=FD5204BD941B9F8C2BC6909D04B8BD9558EB1251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:62:bf:ee:59:ad:98:1f:96:12:b3:af:27:
                    5d:7f:7f:12:da:e9:aa:f1:38:2d:05:83:cb:42:dd:
                    44:50:cc:74:73:62:b1:a6:ce:f3:96:ad:95:17:c4:
                    3d:67:03:dc:ff:c3:32:09:5c:21:66:bd:21:2d:f5:
                    88:1a:6c:4d:3d:3f:ad:a3:78:e4:d5:48:4b:20:e1:
                    de:f2:34:1c:82:f5:8b:7a:b3:20:00:37:b8:09:eb:
                    19:b3:75:f1:a0:85:5c:b4:e4:57:dc:ad:d8:aa:9e:
                    6f:7c:fa:dc:66:1f:c1:8c:a6:9c:29:b0:2c:c7:08:
                    0b:65:b6:d0:5e:b5:0f:d0:78:3e:68:15:63:04:fa:
                    a4:8f:ff:60:d1:bd:23:e1:c3:d8:59:c1:ca:65:4b:
                    2f:78:41:66:00:0c:2c:c1:09:ef:10:41:01:c3:64:
                    e8:d7:64:0a:9d:54:0d:f7:c1:59:85:9f:35:ed:0a:
                    3c:6a:30:07:91:ae:61:5f:2a:52:e9:79:c0:b5:66:
                    2e:bd:e8:c3:e6:4c:8d:e1:e1:ac:6d:f9:ca:0d:5a:
                    62:25:8f:15:89:ed:e5:73:99:e7:46:17:21:55:a7:
                    3d:00:21:12:b2:69:1e:14:b8:0a:4b:8e:f8:57:92:
                    a3:92:15:5d:4a:8e:aa:f4:4c:22:3c:fe:6d:6d:11:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:52:04:BD:94:1B:9F:8C:2B:C6:90:9D:04:B8:BD:95:58:EB:12:51
            X509v3 Authority Key Identifier:
                keyid:CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:db:d4:1b:68:2c:76:1d:c7:45:cc:cd:53:8d:e8:a1:33:1d:
         82:68:82:43:96:59:ff:87:9c:3d:24:01:b5:90:85:b2:51:c1:
         4e:e0:44:af:40:0f:c8:03:91:ef:9c:28:ff:e3:10:25:44:7e:
         1c:18:f3:bd:62:b3:75:62:15:54:37:4d:13:3f:5b:86:42:94:
         ef:ae:d2:80:11:0e:f3:51:bd:7d:2c:f4:6e:ea:7b:07:25:f1:
         1b:53:f0:66:c1:d7:26:9a:08:4f:0a:96:f7:1a:c3:31:0d:ab:
         4f:05:b3:6a:76:d0:86:b8:06:6f:58:8a:db:c5:9f:4f:64:b0:
         a5:9a:74:2c:56:cd:f6:12:dc:25:cf:fd:d6:48:c1:b2:88:e1:
         98:b5:09:3f:27:6d:b5:2b:a0:dc:f6:68:45:1d:71:19:ee:27:
         76:33:c2:5e:7f:a4:ff:52:97:e1:9a:1a:e4:28:89:16:ec:04:
         b9:02:35:e2:ed:76:d1:f8:ee:f1:2e:aa:b9:bd:06:dd:6f:a1:
         6d:ff:9a:ac:74:dd:c4:0e:2b:11:c7:c8:89:72:14:18:e4:a7:
         ff:be:d2:e3:2b:a5:a4:45:54:42:d5:b8:a9:d8:3f:98:77:5a:
         d4:e3:a6:3f:d3:05:43:e7:10:4a:4a:69:a5:1a:f9:8a:ad:a5:
         64:f3:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:33 2026 by rpki-client