Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa
File:                     3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (raw, json)
Hash identifier:          Z37bpImhHNs5LLivIYF8tbbP1TZLCfEz4nG3CbpQ6v0=
Subject key identifier:   35:E2:AE:2F:7A:46:C8:3C:30:0F:8A:73:8D:F2:6A:B2:5D:67:DF:B3
Certificate issuer:       /CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D
Certificate serial:       2A1E5C52FD940DFC0D6909D1A727A9CE074E7048
Authority key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa
Signing time:             Sun 03 May 2026 02:40:54 +0000
ROA not before:           Sun 03 May 2026 02:35:54 +0000
ROA not after:            Sun 02 May 2027 02:40:54 +0000
asID:                     147121
IP address blocks:        103.175.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl
                          rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1e:5c:52:fd:94:0d:fc:0d:69:09:d1:a7:27:a9:ce:07:4e:70:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D
        Validity
            Not Before: May  3 02:35:54 2026 GMT
            Not After : May  2 02:40:54 2027 GMT
        Subject: CN=35E2AE2F7A46C83C300F8A738DF26AB25D67DFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:c8:f0:94:e6:1e:37:4b:8d:ac:dd:e8:91:
                    8a:cf:4c:e0:b1:cc:be:f0:b8:34:07:37:b0:11:30:
                    45:6f:d4:16:48:c0:51:41:cd:61:9f:63:5a:46:f3:
                    80:2d:04:cb:a0:29:84:5e:52:06:c6:51:b7:20:ac:
                    e5:51:2e:49:2d:a9:5a:80:99:d0:3e:0b:29:ea:90:
                    4a:fb:73:07:9a:13:55:fd:af:eb:31:59:2b:09:26:
                    4e:0f:ac:d0:f9:d6:ce:95:73:95:b8:55:00:bd:3d:
                    ce:8f:a3:f6:c5:81:d3:51:95:ca:dc:ef:7e:87:9a:
                    f0:a4:f7:a8:d6:c0:a9:a9:b5:97:81:89:98:51:89:
                    87:e3:ee:8a:a4:bf:61:b7:b4:6b:9a:b9:4c:bc:d7:
                    e8:dd:b1:5b:d0:4a:53:33:39:ca:1f:c2:aa:b7:83:
                    0e:5f:0b:e9:e5:d7:d9:bd:38:69:63:db:51:c8:1c:
                    6a:6e:7f:07:8c:ae:fb:1d:61:f1:cc:2e:4d:4a:d5:
                    1e:31:38:40:f6:2b:fc:c8:e7:fb:09:90:0c:d0:bd:
                    15:e4:fb:88:04:68:eb:69:3d:67:30:e7:e4:7f:91:
                    7d:6d:6e:d6:7e:e4:6f:ac:0c:b2:0f:a9:36:57:7e:
                    ee:45:e5:97:5e:53:24:2c:b0:8f:61:f9:2d:df:03:
                    d0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E2:AE:2F:7A:46:C8:3C:30:0F:8A:73:8D:F2:6A:B2:5D:67:DF:B3
            X509v3 Authority Key Identifier:
                keyid:CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:f0:3f:af:12:82:8d:bf:54:62:c5:5c:79:72:66:c2:79:
         51:27:3b:08:02:40:3a:56:b4:1f:15:f7:a4:6f:b1:58:6a:4a:
         fc:9f:ab:3c:6b:ff:f6:d5:66:64:2b:0c:3b:bf:c3:76:85:63:
         08:ca:99:64:24:83:ac:6f:84:5d:2f:76:94:de:15:1e:db:58:
         88:07:5f:46:0c:c8:e5:86:3b:be:41:65:b7:59:86:25:83:20:
         68:12:a6:4e:5c:a7:4e:8c:e3:c7:a1:e5:5f:03:c5:da:66:a3:
         8b:70:61:d3:d5:af:89:59:7f:ea:13:d0:78:2b:16:5a:20:15:
         c6:12:3a:1b:26:7e:78:f0:54:7b:cc:c6:15:70:e2:a8:95:1d:
         4d:9c:02:a7:e8:ff:4b:b7:55:9d:78:79:e0:9c:97:4f:2c:ef:
         fd:f1:46:e9:f4:91:94:b7:d3:cd:3c:fa:a3:bd:b0:a2:52:f8:
         78:dc:e0:d0:f3:c5:a2:bd:e2:0b:e9:52:3a:92:e4:5f:2d:8d:
         83:0c:0a:04:37:12:70:54:58:e7:cd:78:9e:ed:e6:6d:27:a0:
         25:ca:3e:17:cd:ba:e8:fb:df:d6:a2:ea:ab:b3:a9:f5:b1:b1:
         f3:49:bb:2a:68:7f:6f:20:2b:ae:7e:09:ee:5b:22:4a:a2:29:
         2b:b3:64:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:17 2026 by rpki-client