Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa
File:                     3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (raw, json)
Hash identifier:          TSYU0iwD60Xe34QfPIACUkCgRuYurT05KHU1s0QtGmw=
Subject key identifier:   4A:8F:86:E0:77:43:BF:79:67:E5:B8:B2:76:05:4B:74:EF:12:B4:DF
Certificate issuer:       /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Certificate serial:       0361E1BD526945634819D7CA02E329C3A8FD97CB
Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa
Signing time:             Sun 03 May 2026 02:49:55 +0000
ROA not before:           Sun 03 May 2026 02:44:55 +0000
ROA not after:            Sun 02 May 2027 02:49:55 +0000
asID:                     138139
IP address blocks:        103.133.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
                          rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:61:e1:bd:52:69:45:63:48:19:d7:ca:02:e3:29:c3:a8:fd:97:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
        Validity
            Not Before: May  3 02:44:55 2026 GMT
            Not After : May  2 02:49:55 2027 GMT
        Subject: CN=4A8F86E07743BF7967E5B8B276054B74EF12B4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:40:10:75:f6:a0:55:56:2e:a5:06:99:c9:
                    d1:f0:02:e6:4d:8a:cf:66:a8:6b:35:3c:4e:56:71:
                    f5:fa:ea:40:65:88:04:96:41:ab:49:1e:1a:c7:d3:
                    d4:4b:58:dc:76:c2:0f:4a:fb:69:d0:19:44:a0:67:
                    07:a3:61:95:2e:2d:af:72:a9:3b:ab:f5:f0:db:44:
                    64:5e:a9:b2:0a:58:ba:63:cd:3f:47:89:ec:1d:5d:
                    ad:dd:50:97:14:f3:58:eb:98:06:57:ed:dc:15:f1:
                    e1:8c:02:0e:80:f8:ab:fe:8e:3b:af:b7:03:b7:a0:
                    10:4f:3f:1b:14:90:4c:02:4f:39:7b:49:25:f4:47:
                    07:2c:04:aa:36:c5:dc:d9:31:24:22:e3:50:34:04:
                    bd:1c:b1:29:6c:70:ed:03:48:26:a7:cc:4d:40:a8:
                    89:99:db:c9:eb:c5:0e:f8:b1:de:25:61:a4:5f:d5:
                    71:f7:2c:e0:f9:ba:1b:0b:aa:ea:db:3f:27:c1:35:
                    17:cd:bf:bf:9e:68:88:ca:d6:f8:ae:d2:f3:6e:3d:
                    6d:87:35:d8:54:4b:e2:36:c5:2a:b4:3b:1a:a8:66:
                    bf:02:4d:12:0f:2b:81:29:67:d1:04:f2:20:3e:49:
                    71:b8:2e:e6:2e:c8:37:a1:1f:4d:75:cd:7a:ad:cc:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:86:E0:77:43:BF:79:67:E5:B8:B2:76:05:4B:74:EF:12:B4:DF
            X509v3 Authority Key Identifier:
                keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:04:ff:5a:d3:0f:e9:3f:ab:b5:60:75:a2:ac:17:81:fd:
         25:2e:17:e6:f4:bc:a1:a8:f1:57:42:d1:7e:9e:76:32:ef:09:
         7e:13:2f:e0:7c:2b:f0:77:c3:c6:d3:9f:91:f5:54:41:4e:cf:
         a8:d8:a4:62:3c:15:2c:00:f3:6e:7a:d3:09:33:57:4a:34:ec:
         70:e4:53:3e:a2:b8:d9:b4:d2:02:eb:8d:a0:08:49:91:47:7b:
         4f:7f:0c:b7:88:9a:34:ec:57:69:c4:5d:cc:fc:d9:93:50:09:
         e4:9a:f5:59:52:53:ce:99:75:07:24:40:0e:0e:e7:95:60:67:
         6d:b3:d2:38:39:78:f3:bf:61:76:c1:7b:78:c4:93:a9:d9:bb:
         48:b2:d2:3f:e5:af:6a:9a:f8:48:7c:08:93:11:4c:4b:fd:b5:
         2c:e5:50:5e:24:1c:da:d3:9f:f9:77:35:fd:84:88:2e:2d:37:
         9e:0e:a6:52:f5:f6:66:c3:d2:f0:5d:e8:af:39:92:41:70:98:
         b9:5c:40:99:cd:3b:d7:7b:fb:1e:de:3a:fd:9a:08:f6:b7:03:
         47:af:ee:0f:6c:27:19:ef:27:3a:16:ff:07:40:96:eb:0d:6f:
         ec:f3:df:12:d0:b2:74:09:06:4a:c4:f9:ba:c2:fc:f8:60:ed:
         79:8c:ab:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:54:23 2026 by rpki-client