Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa
File:                     3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (raw, json)
Hash identifier:          wBlZVCFHh8ftmHga3klWNVfbpWsl8jB+12tJjLB6RQ4=
Subject key identifier:   16:80:EA:59:45:43:82:A7:79:15:A7:2E:E6:AB:3E:47:C2:68:DE:41
Certificate issuer:       /CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A
Certificate serial:       7673FD831AF231E2D603843D8DAE81DD4B7C02F4
Authority key identifier: 41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa
Signing time:             Sun 03 May 2026 02:43:58 +0000
ROA not before:           Sun 03 May 2026 02:38:58 +0000
ROA not after:            Sun 02 May 2027 02:43:58 +0000
asID:                     136841
IP address blocks:        103.41.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl
                          rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:73:fd:83:1a:f2:31:e2:d6:03:84:3d:8d:ae:81:dd:4b:7c:02:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A
        Validity
            Not Before: May  3 02:38:58 2026 GMT
            Not After : May  2 02:43:58 2027 GMT
        Subject: CN=1680EA59454382A77915A72EE6AB3E47C268DE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:c0:a6:d7:53:ec:8a:91:4b:71:91:8a:64:
                    5f:cc:a2:6f:81:0c:c2:19:09:87:7f:67:0a:1e:59:
                    43:9d:f9:d0:9e:9d:72:b1:18:9d:1a:93:7b:cd:e1:
                    e1:dd:09:b2:fd:6f:e9:23:f5:1a:59:9d:93:38:de:
                    4f:42:f3:76:30:b0:60:d8:d9:42:54:74:20:12:8d:
                    29:1f:54:fd:58:93:64:92:c6:c0:4d:20:14:23:38:
                    34:4c:a1:00:8a:6f:41:f3:8a:fe:97:07:b5:9b:bf:
                    cd:a8:09:dd:0c:44:06:36:c3:ce:32:00:4f:b9:43:
                    3a:4b:a6:a7:d9:13:06:35:b5:c0:e9:92:33:eb:ac:
                    91:a5:60:47:a1:d0:b4:97:d4:5a:da:35:53:4c:b0:
                    a8:8b:fb:cf:fa:49:c9:08:3a:5a:6e:00:ba:9b:62:
                    42:af:4f:35:4d:09:65:f3:a9:74:34:30:d1:41:81:
                    18:bd:3b:9b:1a:a2:73:d9:cb:7e:25:e4:ad:5d:d1:
                    3a:31:97:92:68:10:b0:29:1a:cf:92:08:b2:83:68:
                    e2:de:bb:71:fc:c9:2f:64:42:55:71:4a:39:6f:15:
                    65:41:87:33:34:fe:43:b7:c7:e6:0e:12:f7:f8:1a:
                    fa:6f:4c:c6:fb:46:ad:2b:64:e7:fc:93:78:59:39:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:80:EA:59:45:43:82:A7:79:15:A7:2E:E6:AB:3E:47:C2:68:DE:41
            X509v3 Authority Key Identifier:
                keyid:41:C0:A6:F7:37:34:FF:B0:C7:D9:97:70:1A:62:B4:DF:A1:BA:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C0A6F73734FFB0C7D997701A62B4DFA1BAB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:c7:cf:3d:e8:a0:d3:93:dc:06:94:3e:0f:f0:46:f2:ea:c1:
         6c:8e:0c:c8:61:9d:0b:1f:ee:26:ba:3e:11:89:45:f9:a9:f1:
         10:8c:f7:ed:3d:44:0d:e3:05:98:2b:cf:e2:80:22:45:19:c8:
         2e:6e:13:d6:75:7f:6a:ca:7c:d6:b9:69:a3:6b:8d:66:94:54:
         9e:4f:85:58:58:e4:cd:a9:6b:f6:4a:f1:fa:a5:84:98:8a:7b:
         6b:d5:71:ce:fc:e5:07:8a:60:67:6a:9c:ce:01:6c:66:95:64:
         b2:c0:e8:ae:c1:02:a2:0a:80:24:48:58:f7:c6:7d:e6:67:f1:
         f4:64:a6:51:f4:de:9b:87:30:bf:c2:63:6e:cc:8b:cd:c5:47:
         66:59:c4:9e:94:6e:f6:46:e0:6c:84:ca:41:a3:17:76:e6:09:
         00:c9:17:46:6d:b1:97:d5:8e:2e:d6:87:78:a8:49:07:5d:3c:
         c6:8f:d0:d1:1b:83:96:62:e4:d1:c9:cd:d6:2d:b6:ad:bb:b8:
         85:8f:87:05:39:ad:c1:f2:35:0d:c1:c7:e7:84:f5:4f:34:76:
         d7:33:0e:6f:f1:fe:39:7f:91:cf:6b:4d:7d:04:2d:5e:b5:03:
         c5:6c:dd:de:d2:73:58:8a:b3:28:b8:ef:48:32:2f:10:b8:97:
         dd:a0:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:03 2026 by rpki-client