Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133382e302f32342d3234203d3e203137363731.roa
File:                     3130332e31302e3133382e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          8DX88COV8RN13dDoUQg1+Qwq6dauzyOVYhPnSoXn+WI=
Subject key identifier:   B7:7C:48:06:D9:7A:20:7F:70:EB:09:61:D3:71:0A:F2:16:F3:51:50
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       102F3F816A9A0180DA6AE2D2089340CDDE9BC870
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133382e302f32342d3234203d3e203137363731.roa
Signing time:             Sun 03 May 2026 02:50:11 +0000
ROA not before:           Sun 03 May 2026 02:45:11 +0000
ROA not after:            Sun 02 May 2027 02:50:11 +0000
asID:                     17671
IP address blocks:        103.10.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2f:3f:81:6a:9a:01:80:da:6a:e2:d2:08:93:40:cd:de:9b:c8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: May  3 02:45:11 2026 GMT
            Not After : May  2 02:50:11 2027 GMT
        Subject: CN=B77C4806D97A207F70EB0961D3710AF216F35150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:b9:27:88:ca:45:d1:10:ef:80:66:74:1a:
                    69:d3:3b:a5:76:cf:61:8f:12:c3:31:56:bb:75:08:
                    e4:bd:4a:fc:47:fd:36:20:7c:0a:66:56:5a:ec:62:
                    c3:bb:e9:f2:90:7b:c5:9f:c4:71:13:c2:60:96:ae:
                    6e:e9:ee:1a:38:f6:1e:ae:31:f7:49:de:b4:1b:65:
                    3b:38:33:80:19:a9:e8:1f:73:64:fa:10:21:cb:c9:
                    e0:6d:eb:1c:e7:6a:07:8f:c8:ce:da:d3:65:f5:60:
                    fc:75:0d:d6:05:51:c6:10:63:b8:6f:1d:8f:7a:aa:
                    7f:66:c8:12:49:37:0a:60:4f:41:15:aa:0c:ec:74:
                    d2:5f:e1:7f:26:43:af:7d:6a:fc:01:bf:af:d5:48:
                    31:f6:1c:64:61:86:44:a9:82:e7:82:97:51:2b:c5:
                    10:9c:ab:44:46:44:9b:0b:ff:ae:61:b9:6b:31:53:
                    97:b0:3b:9e:3e:97:a0:de:09:6c:ea:47:67:97:dc:
                    55:e5:df:25:c9:7a:d6:9c:5c:87:d2:97:9a:28:3f:
                    ba:ae:c2:e8:89:1e:57:14:7b:5f:05:9f:0a:53:ee:
                    40:43:29:5f:40:ba:fd:0c:b2:76:48:f4:ec:ee:3d:
                    8a:a0:c7:3d:57:c4:61:f5:44:41:19:8e:5c:1d:36:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7C:48:06:D9:7A:20:7F:70:EB:09:61:D3:71:0A:F2:16:F3:51:50
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133382e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:93:d9:12:b7:8f:fb:b0:e3:72:80:12:ac:88:06:0b:01:3b:
         40:27:8d:a2:e4:ad:dc:d2:43:56:14:c7:e0:6b:7e:c8:0f:b5:
         de:6a:5d:b7:56:af:4c:9b:fe:82:df:b1:c8:43:62:da:4c:7d:
         82:3c:3b:e5:47:46:a3:5c:a8:5e:ea:1b:2b:57:af:18:f3:db:
         b4:5e:69:64:23:d4:c8:db:b5:db:fe:0e:12:d0:80:c7:66:04:
         16:f0:7a:19:31:75:1e:fb:a3:bf:f6:6c:ee:86:07:ab:64:11:
         88:68:f9:d8:66:a0:4f:37:46:e3:d7:2d:ee:0b:4a:4b:4e:a0:
         70:0c:ad:3a:2e:42:42:ec:28:b4:b6:cf:96:e4:ca:e9:63:97:
         8b:9c:b3:9b:f4:5a:b9:3d:1a:74:71:6c:f7:0e:c3:69:c9:39:
         8f:78:f2:4a:76:f9:03:1a:e6:08:cf:9e:9f:f9:35:bd:ba:ae:
         1b:8e:1a:e8:54:07:94:2b:56:ef:8a:40:ee:b8:2a:df:ab:e2:
         a5:e6:78:fa:59:73:8d:0d:d5:94:80:27:04:2c:15:e5:a8:51:
         4f:3a:82:02:57:30:ba:58:fd:f2:d8:4f:b4:c0:99:f3:23:08:
         88:ca:1c:75:74:c0:4c:3a:e2:77:06:ae:ca:e0:28:ff:e8:59:
         26:fe:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:15 2026 by rpki-client