Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
File:                     3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (raw, json)
Hash identifier:          d5BUk2IHCQz5cnQEHRFcfPlv6TvCXosv3ryqex1uhzo=
Subject key identifier:   5E:43:80:58:57:F2:49:F5:71:41:4E:C5:1A:71:3B:40:87:94:03:E7
Certificate issuer:       /CN=7B9D20A52D1839E0A747B27E30961527317BE820
Certificate serial:       5783B78834676E6F4166BD1122FD83FAD6A4743B
Authority key identifier: 7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
Signing time:             Sun 03 May 2026 02:40:05 +0000
ROA not before:           Sun 03 May 2026 02:35:05 +0000
ROA not after:            Sun 02 May 2027 02:40:05 +0000
asID:                     142354
IP address blocks:        103.169.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl
                          rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:83:b7:88:34:67:6e:6f:41:66:bd:11:22:fd:83:fa:d6:a4:74:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B9D20A52D1839E0A747B27E30961527317BE820
        Validity
            Not Before: May  3 02:35:05 2026 GMT
            Not After : May  2 02:40:05 2027 GMT
        Subject: CN=5E43805857F249F571414EC51A713B40879403E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:6e:b2:44:62:4c:6d:19:bc:11:23:3b:7c:
                    57:76:39:7b:8a:1c:e3:3b:b4:df:a8:a7:bc:7c:68:
                    ec:c6:ca:9d:28:07:6b:54:51:16:57:51:89:a3:52:
                    14:7c:a1:55:c4:e6:3b:e2:b3:94:48:3b:85:d8:43:
                    ef:d4:96:72:fa:99:58:7a:8e:35:96:08:17:39:d8:
                    7a:b0:f0:61:5f:67:7d:89:db:ad:97:28:c2:66:c0:
                    e2:56:14:0c:f6:94:90:f8:af:79:ab:00:ba:e9:51:
                    99:e3:96:11:ac:67:da:e2:bb:c7:24:2e:36:b0:7b:
                    24:b5:bb:67:3d:2b:62:f4:c1:82:13:e7:53:cf:89:
                    72:9a:c9:50:19:38:21:d7:8e:74:cc:55:12:d2:e3:
                    44:c0:1d:9c:16:93:ff:34:34:1f:a6:d4:e6:d8:a1:
                    bc:01:63:51:e2:6f:7d:54:9c:80:87:2f:a2:07:86:
                    ea:19:30:b3:e9:d3:62:ba:63:5c:17:9c:bb:04:dc:
                    f7:e8:65:ba:ce:7b:74:32:52:e5:2c:0f:70:11:17:
                    a2:b4:36:dc:9c:48:7d:84:6c:32:d6:13:dd:2e:ce:
                    3b:7a:4c:19:03:ee:e4:ba:d4:cb:bb:11:7c:10:07:
                    e0:88:38:97:82:ee:47:ba:4a:6a:42:25:b6:5e:6f:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:43:80:58:57:F2:49:F5:71:41:4E:C5:1A:71:3B:40:87:94:03:E7
            X509v3 Authority Key Identifier:
                keyid:7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:58:66:b0:aa:77:1e:6c:79:3c:4d:08:d3:51:dd:66:ab:69:
         e3:73:17:9a:74:2b:b0:fb:03:69:8e:79:9d:7c:36:d8:ec:01:
         1a:a1:46:e7:d1:49:5b:30:3b:81:75:ea:a1:bd:90:8d:d4:e5:
         c7:ee:a8:97:b8:40:c8:34:0e:cb:75:64:bb:ce:26:54:ad:97:
         8e:dd:c2:1b:e0:a5:9a:5c:ec:04:8b:9c:b4:36:41:fc:04:2b:
         99:74:18:b9:d1:11:b3:6e:2a:aa:21:57:b7:bd:40:55:db:73:
         d2:d5:1d:33:d2:73:5b:2b:d5:83:e0:d4:10:d0:44:08:31:f4:
         ff:d5:10:35:26:9e:e8:74:92:46:e3:ec:7a:35:b2:87:d8:62:
         3f:b3:64:0d:76:64:ec:79:01:08:91:8f:9a:f4:bc:ae:48:15:
         a1:b2:f4:e9:e3:16:d0:db:39:12:3c:d5:67:80:d0:b2:62:51:
         bb:af:86:e6:f7:72:9d:cb:2a:19:21:8f:4d:82:07:5b:a3:d5:
         d7:cb:01:2b:57:89:27:4d:21:80:cb:ac:ca:6c:ba:bb:52:44:
         05:b8:d2:71:b7:d2:32:ec:71:07:aa:d1:27:b6:86:64:61:18:
         cf:cb:cd:27:0f:95:a7:f9:95:fe:3e:c3:28:14:94:9d:2b:7e:
         0e:f0:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:30 2026 by rpki-client