Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa
File:                     3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (raw, json)
Hash identifier:          w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=
Subject key identifier:   31:77:40:02:DE:8F:D4:04:1B:9F:CF:4B:12:F8:25:28:71:09:D1:4C
Certificate issuer:       /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B
Certificate serial:       54A7006C91D90781EBAB2A14AA7C9C04D2110EA8
Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa
Signing time:             Sun 03 May 2026 02:39:33 +0000
ROA not before:           Sun 03 May 2026 02:34:33 +0000
ROA not after:            Sun 02 May 2027 02:39:33 +0000
asID:                     141114
IP address blocks:        103.157.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl
                          rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a7:00:6c:91:d9:07:81:eb:ab:2a:14:aa:7c:9c:04:d2:11:0e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B
        Validity
            Not Before: May  3 02:34:33 2026 GMT
            Not After : May  2 02:39:33 2027 GMT
        Subject: CN=31774002DE8FD4041B9FCF4B12F825287109D14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:50:5d:d6:38:1a:ec:6d:a9:4f:9c:56:94:d1:
                    8f:81:25:6e:9e:66:23:74:e9:ff:45:41:cb:5f:7c:
                    6e:28:dd:f9:84:0e:9e:a7:04:56:1e:38:75:15:3f:
                    ab:71:e6:57:c6:5a:ae:1a:dd:43:0d:19:b2:b0:44:
                    35:8c:9d:d0:e0:94:ac:40:b8:3c:6a:c8:50:f9:c3:
                    4f:11:46:fa:30:84:1d:ef:8e:43:e1:fe:9f:6a:a1:
                    15:4d:db:76:8b:8e:40:d6:bf:5e:12:f0:16:f8:68:
                    a4:2b:d9:ae:a0:8b:75:c1:3e:2a:72:ca:5b:bf:4e:
                    ad:eb:1d:79:0b:4e:b7:a0:3b:af:f8:48:5d:7b:89:
                    cb:54:8e:07:76:34:40:38:fe:c7:03:75:27:77:de:
                    10:6f:d1:c8:7f:4c:5d:2f:fc:05:12:a0:f0:48:17:
                    b7:25:34:54:b0:6e:e1:46:05:68:03:59:4e:8e:00:
                    29:2e:41:5e:4d:f1:c2:cd:8e:57:5d:3c:d6:f5:2c:
                    d4:e5:d5:1c:ad:96:7b:e7:6c:e4:7b:11:d3:50:56:
                    3c:31:b9:50:71:77:ab:c1:1b:7b:f2:e8:f3:d0:b1:
                    88:dd:41:b8:01:50:55:23:c4:6e:11:6c:cf:c9:08:
                    9d:11:f9:be:20:9e:2f:6a:42:ea:fd:d6:5c:ba:c2:
                    64:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:77:40:02:DE:8F:D4:04:1B:9F:CF:4B:12:F8:25:28:71:09:D1:4C
            X509v3 Authority Key Identifier:
                keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:b0:e2:06:38:1b:a6:4c:21:df:7d:de:7f:31:d7:26:9e:e3:
         1a:31:67:93:87:39:68:66:9e:b4:bc:b4:4c:42:b7:da:a9:f7:
         aa:04:57:59:ea:b2:de:d0:d4:22:38:3f:fa:74:e5:0f:30:79:
         12:c4:42:69:98:bd:af:58:97:1d:b4:03:78:d7:06:0b:fe:fc:
         d0:3f:fe:f0:64:f5:c6:66:61:98:c8:e5:9f:c7:ce:de:66:a6:
         33:03:ff:10:f0:41:0b:50:4b:31:5e:97:28:14:94:16:36:23:
         24:b8:44:e9:cf:b5:7b:29:0c:d9:4a:63:03:ad:b0:cd:f3:2f:
         9e:34:77:8f:9d:3f:95:c5:3a:82:52:b1:9c:a4:15:01:81:b1:
         5d:8a:f2:8b:ea:47:45:3a:a5:21:c8:ac:da:92:ee:dc:66:76:
         ae:57:d3:17:5d:41:4c:07:96:59:fc:70:c5:e7:8d:f9:bf:d1:
         58:ce:af:f7:d2:aa:55:65:3f:6e:31:e5:46:5c:07:df:36:be:
         7b:1f:4d:68:f9:37:c0:c4:c0:f0:c4:2d:aa:e0:11:58:e3:e2:
         58:c2:0e:f1:30:7c:13:87:95:72:8c:82:43:0b:a1:f7:c9:28:
         ba:1c:19:36:fb:d8:f1:80:9e:1e:be:f6:51:18:45:5d:d1:61:
         3a:db:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:52 2026 by rpki-client