Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa
File:                     3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=
Subject key identifier:   26:38:D1:10:3E:E4:04:60:2B:CF:1A:5E:32:55:DC:57:E5:62:1B:19
Certificate issuer:       /CN=D61B761F0598B8998BF802A069F51103270C6CC0
Certificate serial:       3748CCD78192A382743341B23E3ACEF7099AFF79
Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:44:50 +0000
ROA not before:           Sun 03 May 2026 02:39:50 +0000
ROA not after:            Sun 02 May 2027 02:44:50 +0000
asID:                     4800
IP address blocks:        103.191.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
                          rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:48:cc:d7:81:92:a3:82:74:33:41:b2:3e:3a:ce:f7:09:9a:ff:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0
        Validity
            Not Before: May  3 02:39:50 2026 GMT
            Not After : May  2 02:44:50 2027 GMT
        Subject: CN=2638D1103EE404602BCF1A5E3255DC57E5621B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:70:83:df:55:84:ea:40:ff:92:a9:83:94:
                    87:98:32:3f:83:53:e6:59:5d:49:f7:58:df:de:35:
                    36:90:ab:83:92:76:0c:e7:69:04:5e:c5:d7:0a:64:
                    5b:5a:c2:c7:0d:ed:02:1a:f6:d2:1c:3c:81:28:bf:
                    95:83:12:a3:9c:7e:29:b4:7a:14:f7:1a:aa:02:a0:
                    51:d1:26:24:25:2f:d3:6e:f8:4f:59:61:38:a1:2c:
                    2f:8a:39:54:2b:4d:25:c9:6a:39:3d:c9:ef:2f:c9:
                    bd:ad:0e:59:8f:19:7f:ea:5f:6f:51:86:b7:83:ff:
                    91:9a:30:fa:10:1e:5b:a0:ec:63:9a:22:da:a2:e5:
                    78:29:d0:78:07:95:8c:ae:83:c0:6b:a1:8f:58:3a:
                    86:ea:d7:90:6b:af:e2:e0:eb:4f:60:af:5f:fb:d5:
                    2a:ab:54:61:88:7b:7f:74:f8:c9:7d:26:09:3c:fd:
                    08:fb:e9:d1:da:b8:57:f8:39:31:46:d6:13:9b:19:
                    08:05:cc:c5:9a:c0:02:c4:3a:26:f0:4a:f6:f1:16:
                    e7:06:f2:ec:bf:1d:0c:ce:c5:8a:ae:b5:09:6a:7a:
                    60:ec:6c:fc:f3:60:da:d7:77:d3:ef:86:d5:ae:a8:
                    70:8e:24:82:af:38:ee:06:b0:92:3c:23:e1:15:67:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:D1:10:3E:E4:04:60:2B:CF:1A:5E:32:55:DC:57:E5:62:1B:19
            X509v3 Authority Key Identifier:
                keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:d0:dc:4e:3e:e3:e5:a2:70:4f:f5:80:c5:c3:6b:0c:8f:d3:
         05:7d:b2:c3:21:8e:0f:6d:74:11:f9:88:3a:41:77:48:d7:d0:
         94:86:d9:e5:99:45:28:dc:18:00:02:9f:1a:0b:2a:25:20:02:
         67:61:11:c4:b9:2f:e8:0b:7e:9d:60:03:ee:ce:d6:11:11:77:
         60:09:a0:d9:1f:f3:bf:df:f1:46:d3:fb:e8:dd:4a:63:c9:e9:
         b0:86:9d:88:9f:8b:d5:0f:45:84:d8:4e:f6:da:60:18:1d:7c:
         1f:26:4b:2d:51:34:5e:16:cb:32:01:d0:2a:b9:e5:cf:88:c5:
         8b:32:bf:8e:bf:db:a4:f9:65:d0:2d:2d:da:2a:f6:b1:3a:40:
         8e:1c:a5:23:2a:20:4f:94:02:4f:24:5a:89:26:7d:29:87:0b:
         91:77:7d:c2:54:ef:0e:04:92:b7:5a:70:4a:9f:8b:ec:8b:f8:
         e6:6f:6f:e8:09:28:40:99:04:7e:b9:1e:ac:6a:5d:d1:61:7b:
         0b:53:cd:0b:1d:0f:d4:87:92:fb:d5:ed:3c:68:4f:6c:fc:0c:
         9b:e6:f7:1e:aa:35:89:8e:cc:12:73:bd:44:f3:bf:f5:64:5d:
         1c:84:ea:33:eb:6a:ec:2b:5a:03:54:68:85:54:ca:f2:5e:7d:
         90:5b:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:24 2026 by rpki-client