Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa
File:                     3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=
Subject key identifier:   AC:CD:B1:24:A9:C2:0B:DA:09:FC:38:D7:C6:A3:5B:EC:FE:73:34:57
Certificate issuer:       /CN=5D885821D2406437CDFEC04380E967515A67AECC
Certificate serial:       6C12BF6930B168002F99C8F176E5A6352520639A
Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa
Signing time:             Sun 03 May 2026 02:47:27 +0000
ROA not before:           Sun 03 May 2026 02:42:27 +0000
ROA not after:            Sun 02 May 2027 02:47:27 +0000
asID:                     136052
IP address blocks:        103.54.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl
                          rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:12:bf:69:30:b1:68:00:2f:99:c8:f1:76:e5:a6:35:25:20:63:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC
        Validity
            Not Before: May  3 02:42:27 2026 GMT
            Not After : May  2 02:47:27 2027 GMT
        Subject: CN=ACCDB124A9C20BDA09FC38D7C6A35BECFE733457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:99:b1:c0:a2:71:50:9e:aa:69:33:28:f0:
                    58:cc:6f:bf:97:17:07:06:d7:03:9e:a8:43:d1:13:
                    f7:6e:0d:01:92:8d:27:5f:00:8d:ee:4f:a6:47:8d:
                    13:41:1b:c2:ac:a0:44:47:9d:c7:c5:af:61:b2:ab:
                    95:51:19:20:1f:bc:92:81:07:2a:1c:be:77:20:96:
                    78:d6:65:4f:68:7c:84:eb:5d:4b:16:8c:d8:8b:e5:
                    a0:3a:a2:b1:ee:ff:04:8c:ed:6b:bc:e8:84:f1:b1:
                    1f:de:1c:3b:04:d0:b1:72:33:c9:e9:f4:19:db:10:
                    f6:ac:26:ba:3c:63:d9:3f:88:ec:01:96:42:c5:16:
                    87:a6:37:a3:6c:fb:03:67:f1:bc:7e:be:35:63:5e:
                    a8:7f:25:34:7a:0e:4e:8f:dd:11:e1:18:4b:51:ed:
                    bd:c6:a2:a1:e8:d3:a6:c0:3f:5b:46:75:8a:e7:5c:
                    d9:8b:7c:03:1d:70:3e:ed:f1:b3:78:9f:36:87:fc:
                    45:ac:32:2b:74:60:67:01:af:ad:31:3d:81:76:8a:
                    35:32:61:ee:c8:ed:39:44:36:4b:fc:75:93:ff:2b:
                    f0:c1:85:7b:4d:ad:c7:86:73:d0:b7:a9:22:ff:2b:
                    0d:2c:4d:61:ed:6e:7c:43:38:fc:1e:48:ba:dc:c0:
                    25:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CD:B1:24:A9:C2:0B:DA:09:FC:38:D7:C6:A3:5B:EC:FE:73:34:57
            X509v3 Authority Key Identifier:
                keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c3:19:10:4a:f1:b2:6d:a5:b5:35:e2:ec:a1:f7:f7:33:6e:
         c1:48:fa:3c:86:42:18:71:58:b4:d8:25:28:d6:69:59:fe:6d:
         67:5a:95:9d:21:d8:e3:8b:55:55:59:2f:89:82:7e:bb:66:54:
         48:65:9e:4b:fd:97:b2:e2:62:d6:e0:29:16:51:ba:65:f5:8d:
         5c:37:29:62:2b:cd:05:a2:f8:84:b4:fb:01:61:0d:1a:be:e7:
         33:c7:13:53:8a:34:44:0e:e6:4b:de:76:4f:aa:36:99:0f:58:
         13:7a:60:f3:be:fe:59:f9:b5:74:7d:65:42:ff:f2:1e:61:28:
         04:f2:a2:7b:17:ac:93:3c:43:6c:3b:6c:0b:24:b2:d0:c7:f2:
         25:a4:f0:a4:e3:7d:91:12:12:44:ba:7a:55:2b:bd:ea:76:be:
         3c:a8:df:0b:92:ba:7b:86:a3:bc:d0:98:2e:f1:d5:b0:44:1f:
         2e:1f:5e:33:fb:85:b9:da:ca:ad:36:04:f5:99:59:f2:4a:17:
         2d:44:53:c1:4c:7c:0c:1b:25:e8:23:4b:4f:a5:dc:3a:50:bf:
         6b:1a:ad:b4:7b:91:41:37:a3:32:a4:31:22:e9:c4:c7:99:39:
         41:f4:c9:2c:14:e2:ff:67:92:62:8c:69:11:db:24:07:bb:be:
         a7:3f:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:16 2026 by rpki-client