Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa
File:                     3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (raw, json)
Hash identifier:          W/8+xRtFQTktxO0fuk7MAz6L6AHwxOnMCS8RTW7dGss=
Subject key identifier:   04:EE:A0:23:BA:E8:CD:E8:D0:F0:C8:3A:3D:94:EB:0D:B3:BE:77:E4
Certificate issuer:       /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB
Certificate serial:       6ACE1366F2706E992076F076B843E7EFADF605C2
Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa
Signing time:             Sun 03 May 2026 02:49:59 +0000
ROA not before:           Sun 03 May 2026 02:44:59 +0000
ROA not after:            Sun 02 May 2027 02:49:59 +0000
asID:                     137334
IP address blocks:        103.112.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl
                          rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ce:13:66:f2:70:6e:99:20:76:f0:76:b8:43:e7:ef:ad:f6:05:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB
        Validity
            Not Before: May  3 02:44:59 2026 GMT
            Not After : May  2 02:49:59 2027 GMT
        Subject: CN=04EEA023BAE8CDE8D0F0C83A3D94EB0DB3BE77E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:38:41:9a:68:09:92:a1:8d:0a:88:da:07:
                    04:83:8b:75:39:f8:ca:4d:e5:86:6a:6d:67:ad:1d:
                    d2:22:f7:2d:42:6e:63:86:28:0b:4b:6c:c0:e5:ab:
                    e8:d5:bd:99:9e:1c:9d:66:43:09:d0:30:aa:e0:50:
                    2e:74:b2:dc:56:b2:80:e6:39:2d:84:0c:c2:3a:22:
                    b2:d0:f1:1a:28:07:d7:f5:49:a9:0c:1b:ef:8d:5c:
                    0a:ba:48:3f:a8:fd:84:aa:0a:62:35:eb:83:56:cc:
                    e9:c0:a1:54:e0:0e:23:51:b6:9d:e4:6d:ae:27:bb:
                    5c:55:75:0c:d1:ef:04:a7:ed:8a:7e:bf:1c:8e:41:
                    63:51:0b:f9:32:c2:a9:60:43:7a:0d:1b:7c:fd:f3:
                    0d:0c:df:e1:e1:0d:9a:d1:a9:8e:90:c6:c0:63:09:
                    a8:d4:cb:5f:00:fd:b7:d5:7d:a5:1d:dc:7e:84:07:
                    07:8d:83:c4:58:b7:a1:1f:82:64:46:d7:e8:40:47:
                    05:dd:52:c3:f5:30:06:86:08:92:d3:73:1b:c4:3a:
                    df:b2:bd:b2:a3:da:4c:7b:4f:2f:b7:c0:74:55:c8:
                    df:25:4a:f2:67:0f:c6:a6:1d:b9:bd:e1:19:e8:1a:
                    a0:85:5e:43:2a:5c:b4:33:b7:e1:f6:12:70:d1:d4:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:A0:23:BA:E8:CD:E8:D0:F0:C8:3A:3D:94:EB:0D:B3:BE:77:E4
            X509v3 Authority Key Identifier:
                keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:9c:d8:a4:8e:44:c3:85:16:40:6b:1d:53:d2:c9:6d:0a:5a:
         a0:52:02:a5:5b:0d:c1:62:00:d0:45:8a:b7:61:fa:d2:11:3d:
         f8:c1:ca:d7:77:cc:8b:52:bc:d0:4b:a3:37:83:fc:24:26:f0:
         fb:fc:8b:ce:b6:4a:3a:16:b7:42:28:e3:06:b6:7e:9b:b7:38:
         dd:ac:5e:69:11:48:aa:b2:ef:af:f7:cd:ea:d1:d7:91:bf:60:
         78:50:53:e1:46:5b:78:bd:b1:c3:29:22:ac:76:30:9e:6e:42:
         2f:07:b8:2b:d4:67:8b:7c:e1:84:b9:5a:74:1b:a2:71:39:ac:
         4b:f2:93:f1:27:57:cd:f4:11:cf:96:5e:f0:01:db:60:cb:df:
         ac:92:67:af:d6:a3:22:38:1a:ec:ef:5c:47:86:d9:b2:7b:7d:
         24:25:bf:73:ac:27:3b:d3:e1:d0:7b:b7:34:46:8a:05:a1:3f:
         a3:3f:02:68:14:bc:c1:a0:5f:af:23:ca:1e:41:5f:d5:bb:88:
         27:22:84:10:42:eb:fe:64:b4:06:e8:32:1c:41:46:12:31:2e:
         cc:7b:60:7d:ae:2b:eb:83:77:c4:c6:33:15:4f:2d:26:8c:52:
         04:57:73:4c:8f:7d:6a:d4:ed:e4:04:0d:8c:e3:fe:e5:e1:8e:
         7d:10:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:10:22 2026 by rpki-client