Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32342e302f32332d3233203d3e203536323432.roa
File:                     3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (raw, json)
Hash identifier:          6dvxTqYXa9l0Nvb47oeD7uqupUUpey1d9KPx/TFkWZc=
Subject key identifier:   6A:06:C3:73:F7:C8:EF:9C:02:34:1C:E3:6A:D7:D5:73:2F:16:C3:4C
Certificate issuer:       /CN=636964CD271D2009F5B6D34255EB744F3791245D
Certificate serial:       3B1430906D6C78B078CBF0869786F94DD6C6A901
Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32342e302f32332d3233203d3e203536323432.roa
Signing time:             Sun 03 May 2026 02:39:39 +0000
ROA not before:           Sun 03 May 2026 02:34:39 +0000
ROA not after:            Sun 02 May 2027 02:39:39 +0000
asID:                     56242
IP address blocks:        103.143.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl
                          rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:14:30:90:6d:6c:78:b0:78:cb:f0:86:97:86:f9:4d:d6:c6:a9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D
        Validity
            Not Before: May  3 02:34:39 2026 GMT
            Not After : May  2 02:39:39 2027 GMT
        Subject: CN=6A06C373F7C8EF9C02341CE36AD7D5732F16C34C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:6e:1c:e1:4d:58:54:48:14:18:80:1e:f8:
                    9c:a8:42:12:e3:06:e7:9e:e5:e9:ee:5c:76:42:d1:
                    65:02:1a:d8:f1:67:d1:fd:fd:72:db:b2:5c:85:aa:
                    e5:d6:53:7b:d0:5d:cf:0c:23:f2:65:6b:ba:06:bb:
                    cc:9f:b8:e6:98:89:cd:61:0b:7e:c6:37:15:6e:c9:
                    2e:cd:74:d1:9b:e2:51:4e:6a:7e:3e:17:7e:ff:03:
                    f5:9b:8f:aa:2e:5c:ff:96:b3:c9:0f:06:92:90:79:
                    8d:16:6b:9a:f8:32:66:36:ed:b6:d1:4e:d6:53:0d:
                    ee:49:26:37:3a:2c:70:fd:c9:d2:76:1c:89:b0:2a:
                    42:6b:5f:7e:97:da:e0:b3:6c:60:19:2d:c9:db:4a:
                    e9:10:e7:76:bb:ef:49:c0:32:b1:40:9b:15:0e:83:
                    35:c8:d9:ed:34:a5:f0:19:b0:44:b0:ed:48:eb:41:
                    58:3c:4b:5a:ea:c3:95:d2:84:4b:aa:cb:9c:10:75:
                    0c:4c:b4:ad:0e:55:0f:3a:a9:f9:52:72:93:97:f3:
                    dc:a5:f1:3f:83:45:31:bd:6e:2a:f9:88:5f:27:88:
                    64:6d:8c:77:9d:df:99:2c:f0:8e:b5:89:60:1d:91:
                    27:f4:1c:38:ed:21:a9:dd:34:4e:2f:45:3d:1b:1f:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:06:C3:73:F7:C8:EF:9C:02:34:1C:E3:6A:D7:D5:73:2F:16:C3:4C
            X509v3 Authority Key Identifier:
                keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32342e302f32332d3233203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:3d:b7:98:ae:2c:5b:77:c8:29:62:a8:b3:aa:84:dd:84:e8:
         27:c3:04:ad:63:bd:fa:86:54:c9:4a:b0:e8:13:38:6e:bf:26:
         d9:cf:77:4c:b0:d2:f8:ea:77:64:fb:27:c3:40:96:96:8e:70:
         ad:6b:ab:21:1d:4e:63:c7:a6:de:c2:f8:58:0d:e2:59:fc:6c:
         03:35:27:5c:6b:f4:0c:b3:50:f8:d8:5e:3a:3a:52:b6:11:3a:
         61:54:90:a7:73:d8:b8:ab:d3:ac:9b:a1:1d:59:f0:a5:1f:d3:
         f4:42:ee:d9:e6:a6:12:c5:a5:b2:7e:72:3b:ab:25:61:27:60:
         f5:e0:0a:3f:83:e9:17:e1:20:63:4b:a4:18:b7:6f:81:97:cc:
         22:18:9f:da:5e:5d:84:75:f5:8e:8a:1d:4b:b6:e0:0c:38:4b:
         39:13:ca:61:c7:f4:62:a2:3a:54:f2:2c:16:a5:32:b6:0c:ca:
         5a:64:d0:be:1e:5a:39:d2:e2:8f:aa:f3:cc:c2:85:0e:9a:24:
         45:03:d9:a1:e2:aa:21:2c:04:f0:8f:d0:cf:b7:fc:8c:bb:0d:
         fc:bc:89:ef:2c:55:92:a4:df:55:5c:05:b2:ac:ea:ec:99:a5:
         6f:d9:d7:16:7e:c2:8b:bb:b9:2f:75:4a:5d:89:6a:dc:b2:7b:
         e1:33:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:59 2026 by rpki-client