Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa
File:                     3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (raw, json)
Hash identifier:          1uWoWoJegNHqKMWEAg4BgqBtjqqoyxDasB7MVEGDJsI=
Subject key identifier:   11:A8:B4:04:F1:71:66:65:AF:D3:5A:78:8C:DC:A9:F3:69:9C:3F:FF
Certificate issuer:       /CN=0781BEC016DE19ED01FCF2FB47EA495EED3579EA
Certificate serial:       52CB862B6A9BD482512D83ADE164D45A0A556D4B
Authority key identifier: 07:81:BE:C0:16:DE:19:ED:01:FC:F2:FB:47:EA:49:5E:ED:35:79:EA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0781BEC016DE19ED01FCF2FB47EA495EED3579EA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa
Signing time:             Sun 03 May 2026 02:41:33 +0000
ROA not before:           Sun 03 May 2026 02:36:33 +0000
ROA not after:            Sun 02 May 2027 02:41:33 +0000
asID:                     151574
IP address blocks:        103.142.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/0781BEC016DE19ED01FCF2FB47EA495EED3579EA.crl
                          rsync://rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/0781BEC016DE19ED01FCF2FB47EA495EED3579EA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0781BEC016DE19ED01FCF2FB47EA495EED3579EA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cb:86:2b:6a:9b:d4:82:51:2d:83:ad:e1:64:d4:5a:0a:55:6d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0781BEC016DE19ED01FCF2FB47EA495EED3579EA
        Validity
            Not Before: May  3 02:36:33 2026 GMT
            Not After : May  2 02:41:33 2027 GMT
        Subject: CN=11A8B404F1716665AFD35A788CDCA9F3699C3FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:72:55:4d:b6:8d:5e:f3:f4:33:a8:8b:d7:
                    ea:e0:b3:c8:02:a8:af:99:96:48:81:4f:2c:6d:59:
                    d9:ea:e9:9e:4d:c4:61:38:c0:f6:cd:55:5b:76:b4:
                    90:73:e1:53:b5:59:f3:18:0d:5f:e1:b7:5b:b0:0e:
                    57:a2:d6:71:0b:60:74:6e:ad:c5:a0:67:97:5d:a8:
                    47:3a:68:20:d0:3f:79:1f:c5:1f:a9:6e:e0:76:d7:
                    54:62:24:a6:d4:6a:e8:b0:15:ff:47:d8:e1:51:ae:
                    25:17:bf:78:0f:84:04:4d:f6:a3:58:fa:f0:be:92:
                    74:21:38:31:bf:b8:81:49:b3:7b:7c:99:97:99:20:
                    69:46:f2:ba:ce:d7:42:3b:35:6e:b1:cd:22:25:2f:
                    c7:87:3c:7d:98:c2:18:26:5e:de:d0:60:b3:fc:33:
                    16:59:9c:32:c8:9a:28:ae:ca:b8:72:e7:46:9b:8d:
                    d1:63:9a:69:ad:6d:8e:bb:58:86:6e:c3:4c:04:bc:
                    3c:3f:70:57:1f:ea:37:0f:4c:80:17:48:a6:f6:00:
                    07:ff:a3:82:6d:26:54:8a:57:ca:0b:5e:a6:31:05:
                    28:0f:f7:c7:e3:10:09:0c:e9:cd:0a:9e:89:ad:7f:
                    8f:3f:68:5a:2e:41:26:e6:2e:5c:64:17:d6:64:44:
                    58:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A8:B4:04:F1:71:66:65:AF:D3:5A:78:8C:DC:A9:F3:69:9C:3F:FF
            X509v3 Authority Key Identifier:
                keyid:07:81:BE:C0:16:DE:19:ED:01:FC:F2:FB:47:EA:49:5E:ED:35:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/0781BEC016DE19ED01FCF2FB47EA495EED3579EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0781BEC016DE19ED01FCF2FB47EA495EED3579EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b2:27:d9:e6:09:fc:bc:b9:9e:cd:94:9f:86:27:a3:61:c4:
         d6:ca:dd:59:ef:c1:d5:dd:5b:3d:19:75:19:df:49:c4:7d:c0:
         e0:6e:18:5e:af:03:13:ba:cf:0e:1c:ee:b8:63:97:71:51:81:
         32:93:01:e2:e0:b4:3a:a0:ad:14:b5:99:7c:f5:9e:57:7d:e0:
         70:94:ae:6b:31:bf:ea:62:e4:68:61:f9:0a:dc:23:9a:da:e9:
         d8:c1:b2:f1:9f:e5:fb:b5:d4:23:08:04:45:48:a2:b0:74:a8:
         5e:64:89:8a:a3:ef:dc:cd:5c:c9:4e:71:5c:94:67:52:46:69:
         8e:13:f4:92:91:96:7a:fe:e3:7d:a9:36:aa:e4:00:cc:df:5c:
         99:33:f3:12:39:77:dc:b4:18:28:f8:9a:89:8c:c4:8b:bb:d9:
         fe:b0:ea:33:f2:2d:a9:4e:f0:0c:31:a9:6d:1f:89:dd:78:06:
         b3:c9:78:a8:85:e7:d1:77:ee:28:3b:9c:78:35:e1:c7:63:d6:
         ff:89:af:33:c0:f9:ba:88:4f:bc:ec:8e:6b:c7:1f:d1:52:d4:
         9c:a8:63:b7:0b:36:77:75:94:68:7d:f2:19:00:02:3d:b4:43:
         f3:81:f7:d3:41:78:f1:b5:03:c6:30:c0:6d:ef:28:c2:01:55:
         70:7a:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:51 2026 by rpki-client