Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa
File:                     3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (raw, json)
Hash identifier:          67tLYB0A33fJCbu/P8oKthW+WxAqMc2wdryTZw9cK1c=
Subject key identifier:   AF:44:9C:4F:B6:43:85:70:37:58:FB:DC:52:C5:97:F3:0D:CC:F5:B6
Certificate issuer:       /CN=7FAE1489FF53B0236543706FB85A70734890458C
Certificate serial:       4A70B3064CB761A9F6F73C8810C78117900191FD
Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa
Signing time:             Sun 03 May 2026 02:41:11 +0000
ROA not before:           Sun 03 May 2026 02:36:11 +0000
ROA not after:            Sun 02 May 2027 02:41:11 +0000
asID:                     150934
IP address blocks:        103.109.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:70:b3:06:4c:b7:61:a9:f6:f7:3c:88:10:c7:81:17:90:01:91:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C
        Validity
            Not Before: May  3 02:36:11 2026 GMT
            Not After : May  2 02:41:11 2027 GMT
        Subject: CN=AF449C4FB64385703758FBDC52C597F30DCCF5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:52:33:fb:03:b4:d8:6e:1f:75:f6:4c:0a:
                    98:3e:44:86:91:77:42:b8:a2:4e:0d:cb:c2:b6:7f:
                    87:ef:b6:21:76:c1:49:3a:07:bc:c0:9a:65:01:c1:
                    08:10:14:03:fb:45:25:65:31:9c:cc:0d:71:be:3b:
                    d9:16:7e:be:63:45:1b:fe:65:ab:95:2c:ee:45:72:
                    25:62:7f:53:56:48:47:14:20:2c:d6:5e:74:12:d0:
                    1c:cd:a7:04:d5:3f:80:b7:5c:8a:05:5f:75:5e:da:
                    c1:0c:78:8b:8c:fc:03:2f:56:7d:0e:19:33:4e:35:
                    86:ce:5b:4e:32:17:20:0d:b3:2f:46:5a:86:a0:f3:
                    ce:88:4c:fc:76:66:99:93:79:86:2e:ee:d2:47:22:
                    23:07:26:99:eb:9b:d8:57:87:9b:d5:71:ae:f8:0c:
                    8c:d3:6d:1b:84:38:5c:63:b7:ab:fb:52:6c:b0:6a:
                    f0:e5:db:a2:50:ac:66:94:01:b1:6a:d1:bc:b9:a8:
                    28:f4:03:5a:02:68:30:05:3d:4f:fb:2b:67:48:52:
                    90:78:86:c9:27:75:b9:c2:64:c3:ba:6b:44:95:48:
                    4b:15:62:0f:59:17:09:86:bd:73:a6:32:83:ad:95:
                    d9:6a:c3:cb:66:23:00:e1:97:fe:19:07:6c:c5:17:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:44:9C:4F:B6:43:85:70:37:58:FB:DC:52:C5:97:F3:0D:CC:F5:B6
            X509v3 Authority Key Identifier:
                keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:84:ed:25:7b:a6:f0:ee:76:a9:8b:13:41:80:03:bf:46:
         8e:90:67:6c:e8:a1:ef:f8:d0:04:56:ef:e9:b3:e2:60:27:ff:
         37:a0:3d:39:e8:94:80:7e:dc:24:82:a9:b9:b3:3b:f4:2c:4b:
         8e:4b:93:aa:52:6a:5d:3b:64:aa:95:06:6c:91:7f:a3:d0:2c:
         1d:55:d8:a7:35:6d:d0:6a:05:7a:86:57:bc:e2:89:24:c5:c6:
         8c:47:8a:6e:f0:2e:c4:6e:bd:d2:bc:2b:b0:49:76:cc:90:d3:
         fa:e3:71:7e:70:94:3c:40:01:13:d3:bb:54:d1:af:e5:b2:eb:
         7f:15:60:87:49:89:31:a0:74:8f:1e:2b:99:a9:4f:86:f0:b4:
         b3:8b:ca:db:01:11:6b:d4:4c:73:ff:41:2e:a3:2b:f2:01:35:
         f2:e7:f2:1b:9d:60:81:02:e1:7c:fe:f4:0d:e2:12:47:ae:35:
         e5:12:b6:d9:36:7b:e7:fe:05:9c:29:c5:f5:78:bc:7f:d5:20:
         36:eb:2c:03:a9:dd:3b:dd:f8:5c:7e:c0:f2:ec:eb:58:4a:6f:
         23:d6:b4:da:85:60:4c:02:e2:36:01:23:59:21:58:12:6f:c7:
         ef:1b:18:37:fe:40:cf:d2:52:dd:ed:b6:4f:93:05:7b:79:01:
         2e:bc:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:36 2026 by rpki-client