Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa
File:                     3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (raw, json)
Hash identifier:          3op/DC1qyBMxh0jblaumBv2zXbNO6+qEazCYObpo6AY=
Subject key identifier:   71:1A:6A:87:2C:E3:9E:F7:64:20:12:D1:87:AC:E0:FE:A6:7D:08:F5
Certificate issuer:       /CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B
Certificate serial:       2F69EB3272B01ACC511932130B5A966A2BFA261C
Authority key identifier: AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa
Signing time:             Sun 03 May 2026 02:45:54 +0000
ROA not before:           Sun 03 May 2026 02:40:54 +0000
ROA not after:            Sun 02 May 2027 02:45:54 +0000
asID:                     151533
IP address blocks:        103.245.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl
                          rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:69:eb:32:72:b0:1a:cc:51:19:32:13:0b:5a:96:6a:2b:fa:26:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B
        Validity
            Not Before: May  3 02:40:54 2026 GMT
            Not After : May  2 02:45:54 2027 GMT
        Subject: CN=711A6A872CE39EF7642012D187ACE0FEA67D08F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:2c:c4:ff:12:0e:5d:95:af:78:c5:2a:64:
                    6b:64:7d:f7:4f:ec:e0:5e:e4:dd:10:bb:49:44:a7:
                    5a:d3:e3:1b:30:de:23:50:a6:12:5c:6a:7d:2b:5a:
                    a0:69:93:92:7f:63:34:f7:d9:af:f9:c7:65:0b:f7:
                    dc:c6:9a:6b:e1:94:88:9b:97:ad:7b:a4:b4:af:71:
                    24:d0:65:76:b1:2a:d1:3a:f5:7e:f4:e6:3b:2c:7f:
                    a0:31:af:75:41:a2:33:08:48:0c:36:50:e2:72:59:
                    ce:4b:b4:87:fa:be:d5:68:2c:9a:46:1a:ed:bb:31:
                    db:82:77:fc:54:f1:d6:80:6a:f3:74:cd:df:5b:ba:
                    87:e3:a0:da:95:3d:07:77:27:6e:f4:17:34:57:8e:
                    d6:c7:9f:71:ee:34:71:56:28:7b:90:82:fe:5b:d7:
                    d6:0b:0e:55:5e:61:26:4b:de:db:b2:83:e3:c8:85:
                    bb:54:b9:b2:cd:1e:a8:0a:92:e7:41:c2:96:cd:7c:
                    dc:75:d7:f7:08:61:5f:21:40:36:a8:a9:31:c3:c3:
                    35:7e:33:db:7c:7e:dd:e7:d1:f8:80:2d:f2:cc:d1:
                    b1:a1:d8:88:bc:47:bc:88:f3:e9:c5:36:99:92:3c:
                    7b:62:ff:93:60:3b:4f:97:c7:3c:e5:96:1d:23:e5:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:6A:87:2C:E3:9E:F7:64:20:12:D1:87:AC:E0:FE:A6:7D:08:F5
            X509v3 Authority Key Identifier:
                keyid:AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:94:b8:0b:d8:f0:c0:3d:81:ff:cf:43:4c:85:b2:43:e2:
         ac:2a:fc:92:1f:80:a6:7c:e8:f5:16:fa:ed:27:f3:6b:54:8d:
         df:22:e4:ec:e4:7b:28:9a:92:b1:9c:79:23:2f:c0:35:5c:8a:
         de:86:46:ad:c7:7e:53:2b:46:33:0e:8a:b2:99:e9:7c:28:ed:
         25:a7:d6:f1:70:05:7c:f8:d5:27:12:84:a8:b4:15:a2:47:6f:
         7a:92:57:ad:27:77:3f:56:51:24:df:f2:ff:79:c0:2d:2e:0d:
         42:13:c9:6a:97:1a:43:d5:7a:1a:52:a2:20:ed:38:97:34:92:
         f5:5a:7f:6d:6a:7d:3f:59:83:30:bd:d4:f4:2b:75:6b:5e:8c:
         34:ba:1f:50:f1:4b:c8:3d:53:0a:ce:ca:e5:a7:22:b9:29:a9:
         15:12:47:b7:41:1a:10:da:e7:dd:66:8b:79:e3:2d:03:4e:74:
         2e:8c:46:f8:c7:8d:f4:36:11:a0:03:7e:43:50:a3:d2:dd:a9:
         b2:9b:86:31:27:86:82:87:4e:bb:f6:60:f7:32:6a:86:5a:1b:
         b7:87:77:b7:fa:94:9f:96:2c:67:b8:40:95:b4:62:6a:dd:4c:
         10:82:ff:be:a3:6d:bc:bf:79:82:0b:68:34:cf:d9:7d:6c:e2:
         06:3d:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:03 2026 by rpki-client