Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa
File:                     3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (raw, json)
Hash identifier:          UgZZy8XWAQC7dMaE1W2nYtaqKC3koOYnuPVDG8nU9r0=
Subject key identifier:   24:6A:F1:12:90:96:AB:74:68:A3:8B:42:2E:E1:E5:51:27:58:2D:5D
Certificate issuer:       /CN=5F441BABFBED234BB058636F31EC54F08F118D05
Certificate serial:       197B4778CD41532FD42C224664595DEF23950242
Authority key identifier: 5F:44:1B:AB:FB:ED:23:4B:B0:58:63:6F:31:EC:54:F0:8F:11:8D:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F441BABFBED234BB058636F31EC54F08F118D05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa
Signing time:             Sun 03 May 2026 02:44:31 +0000
ROA not before:           Sun 03 May 2026 02:39:31 +0000
ROA not after:            Sun 02 May 2027 02:44:31 +0000
asID:                     141922
IP address blocks:        103.165.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/5F441BABFBED234BB058636F31EC54F08F118D05.crl
                          rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/5F441BABFBED234BB058636F31EC54F08F118D05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F441BABFBED234BB058636F31EC54F08F118D05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7b:47:78:cd:41:53:2f:d4:2c:22:46:64:59:5d:ef:23:95:02:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F441BABFBED234BB058636F31EC54F08F118D05
        Validity
            Not Before: May  3 02:39:31 2026 GMT
            Not After : May  2 02:44:31 2027 GMT
        Subject: CN=246AF1129096AB7468A38B422EE1E55127582D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:a7:ad:66:f6:a7:9f:2d:62:a7:cb:af:c4:
                    1e:9a:9a:c1:01:f9:df:ae:eb:0e:51:a7:fe:7a:fe:
                    90:1d:78:43:48:d0:c6:5f:c4:4d:55:8d:ae:1f:64:
                    4e:64:c9:6f:1c:0e:fb:2e:68:d4:55:f8:44:96:e5:
                    35:d2:bb:eb:cb:66:7b:0d:61:34:ff:5e:f5:81:c5:
                    3e:8b:51:58:c6:2e:88:51:f2:8d:f7:50:8d:6f:01:
                    bd:f9:67:71:c3:58:ab:20:d6:e6:f4:87:c9:27:ee:
                    52:8a:41:53:4d:29:bb:ee:f5:2f:a8:fd:fb:d4:05:
                    bb:6e:7f:de:c2:1e:fc:90:fa:f9:44:ac:3c:2c:ba:
                    ec:be:85:c1:27:33:9a:5d:9c:69:71:e4:c4:41:ed:
                    ac:e6:98:b7:75:f1:b8:d2:fe:63:fa:5c:15:ce:59:
                    cc:8f:73:bd:8d:27:e1:93:68:4b:24:6c:6d:58:a8:
                    cf:c8:56:26:8b:fe:22:1c:10:12:11:b1:3d:ae:93:
                    76:78:6a:b7:f9:82:70:fc:49:d5:0f:ae:62:03:c1:
                    d1:3c:61:aa:89:73:84:61:4a:83:c1:09:1e:c2:0d:
                    3a:84:79:44:47:43:70:b8:e6:6b:b2:85:70:9a:03:
                    80:11:ba:a4:97:70:66:53:87:da:6e:86:29:5e:d4:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6A:F1:12:90:96:AB:74:68:A3:8B:42:2E:E1:E5:51:27:58:2D:5D
            X509v3 Authority Key Identifier:
                keyid:5F:44:1B:AB:FB:ED:23:4B:B0:58:63:6F:31:EC:54:F0:8F:11:8D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/5F441BABFBED234BB058636F31EC54F08F118D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F441BABFBED234BB058636F31EC54F08F118D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:f0:af:a7:c9:1e:74:3d:3e:66:52:3b:d9:f5:97:0c:32:
         44:be:17:04:96:60:fa:32:6e:ff:43:9b:e5:bc:ac:b8:de:08:
         06:0e:c9:7f:48:87:a8:bc:07:48:5e:14:8d:0b:e5:40:d1:11:
         56:bf:b6:4c:9a:0c:6a:09:6e:38:68:a4:6b:60:fc:48:bb:22:
         6b:0c:53:dc:b1:59:03:74:a6:f6:c8:86:7d:55:ec:65:7e:60:
         8a:8b:a5:fb:42:1c:de:36:5c:5f:f1:ac:07:e4:9c:39:9b:d2:
         bb:e4:50:6d:55:40:e0:b0:d5:c9:1d:2f:ac:22:3f:24:34:0e:
         cf:23:d6:84:86:5c:81:ba:a8:0b:30:f5:7b:59:80:e5:24:ea:
         6c:a6:f9:8d:7f:e4:4e:74:3e:f3:3a:f5:fe:bb:d2:41:fb:ba:
         cd:92:da:01:70:61:3f:e5:2c:07:de:6e:a9:85:57:9c:bb:c2:
         e9:5f:5d:76:6b:e9:96:c1:5d:83:c2:0d:91:2c:a2:6e:f6:ac:
         cd:b1:ad:9f:97:1e:fe:3f:99:4f:54:50:42:7a:76:c7:08:18:
         3c:9a:a3:b7:45:e8:19:70:ca:38:be:00:71:a5:60:c8:80:9d:
         8c:98:c3:87:31:31:b3:7b:0f:6e:80:77:be:12:38:73:0d:0b:
         9e:31:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:56 2026 by rpki-client