Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa
File:                     3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (raw, json)
Hash identifier:          TkJj4PfQ/aDGlDkDNfKuq4Lop3tC8gbIR74WO1bqwO8=
Subject key identifier:   84:12:F4:45:A6:12:45:25:13:00:58:92:B9:CF:57:09:5F:9E:10:CA
Certificate issuer:       /CN=00BA333E1070BAC4039454B475BAA9D7802B83D6
Certificate serial:       409E48D4BDF6883653FD93E84250407E97402BE7
Authority key identifier: 00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa
Signing time:             Sun 03 May 2026 02:46:52 +0000
ROA not before:           Sun 03 May 2026 02:41:52 +0000
ROA not after:            Sun 02 May 2027 02:46:52 +0000
asID:                     151542
IP address blocks:        103.244.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl
                          rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9e:48:d4:bd:f6:88:36:53:fd:93:e8:42:50:40:7e:97:40:2b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00BA333E1070BAC4039454B475BAA9D7802B83D6
        Validity
            Not Before: May  3 02:41:52 2026 GMT
            Not After : May  2 02:46:52 2027 GMT
        Subject: CN=8412F445A612452513005892B9CF57095F9E10CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:ac:fa:a2:92:ad:d8:99:fe:1c:c1:d7:cc:
                    31:c6:17:83:1b:9a:31:b3:bc:7f:79:df:9c:ad:f4:
                    ff:68:2c:b3:e1:c8:15:55:1f:09:5a:0d:7e:1a:21:
                    2f:47:cb:51:51:2f:b4:0d:4b:ca:d7:d5:8e:d5:6c:
                    d9:73:ca:4f:cb:7c:ad:0b:7e:4e:bd:9d:71:93:4a:
                    15:a8:62:45:5f:98:32:e2:f3:dc:96:74:54:97:eb:
                    1f:60:3b:e1:72:a0:8f:3f:a2:e8:7f:33:99:1f:71:
                    53:00:7e:9e:9e:0e:ef:ad:11:89:c3:2b:01:de:e4:
                    3e:45:fc:50:5f:33:a3:e2:e2:39:7e:2e:eb:4a:de:
                    a4:0d:79:06:97:57:29:b1:ea:cf:4b:15:98:69:e6:
                    9a:ec:c7:84:56:74:d7:6f:3f:d8:0c:42:82:c9:72:
                    4f:e6:0b:50:e7:3d:d4:e7:d9:b6:64:8d:77:88:cf:
                    fb:ac:f2:2b:62:de:54:27:b3:c4:6d:31:e0:b4:32:
                    31:3b:49:64:d7:8d:20:57:d6:2e:51:d6:ca:9b:bd:
                    3f:1a:93:ad:4a:72:d0:8a:f3:37:89:db:e1:d1:f7:
                    a9:36:14:89:9a:b5:e7:e6:bc:cf:01:fe:4b:3f:3d:
                    ba:a5:8b:3a:a6:55:79:5c:29:32:de:95:96:a2:9e:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:12:F4:45:A6:12:45:25:13:00:58:92:B9:CF:57:09:5F:9E:10:CA
            X509v3 Authority Key Identifier:
                keyid:00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:82:ad:0a:af:31:96:7f:f9:c0:81:4f:bd:90:25:31:4b:53:
         b9:c4:04:27:fc:f7:55:ca:7a:52:17:2a:bd:fa:60:86:49:9c:
         c7:86:60:e9:a8:0c:88:2f:94:d5:16:83:76:cf:85:8f:09:94:
         92:b5:1f:c4:ef:6c:af:11:fb:f8:a7:f0:20:79:80:07:31:3f:
         d5:e0:71:49:4d:ea:ee:b7:2a:62:07:11:d7:2c:27:39:5b:10:
         7d:a8:5c:0f:aa:87:5f:af:26:74:d1:e7:ab:0e:5b:f7:31:d4:
         37:1b:a0:a5:09:67:60:d6:bf:0d:8b:7a:0d:9d:d2:05:92:03:
         f3:6a:1f:e9:97:f3:5f:da:bc:f1:36:a5:e7:36:b3:52:99:f8:
         a3:27:94:ed:1a:fe:17:92:5c:75:78:b0:c7:5d:ff:7a:66:40:
         03:9c:df:95:a9:05:b7:d4:fd:c1:d2:2a:b2:d9:c2:62:43:f5:
         22:a1:15:c5:3b:1e:3a:8d:1d:61:39:f6:ce:51:9e:fb:a7:40:
         8d:4a:b1:c4:96:d8:d0:1a:79:89:a4:bf:f2:26:b8:88:32:65:
         66:8a:40:81:cf:36:60:4f:51:e0:ae:6d:04:6a:fb:16:9e:d4:
         c4:98:01:b5:15:7b:fa:be:26:80:d3:1e:2d:be:df:6e:13:d1:
         6a:e3:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:19 2026 by rpki-client