Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa
File:                     3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (raw, json)
Hash identifier:          E7IAKB6a6rTg4NTZiJDgOunJYvwyhjz5dVHJcY29CuI=
Subject key identifier:   34:D9:87:BC:E4:26:6E:6F:C3:B0:46:0F:89:E4:55:89:31:0C:43:A7
Certificate issuer:       /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080
Certificate serial:       15873153661DF804E4D6BA3C666B7ADBC3977CFC
Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa
Signing time:             Sun 03 May 2026 02:50:52 +0000
ROA not before:           Sun 03 May 2026 02:45:52 +0000
ROA not after:            Sun 02 May 2027 02:50:52 +0000
asID:                     147081
IP address blocks:        103.173.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl
                          rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:87:31:53:66:1d:f8:04:e4:d6:ba:3c:66:6b:7a:db:c3:97:7c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080
        Validity
            Not Before: May  3 02:45:52 2026 GMT
            Not After : May  2 02:50:52 2027 GMT
        Subject: CN=34D987BCE4266E6FC3B0460F89E45589310C43A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:16:04:7e:a8:01:6f:0f:13:c7:bc:69:51:3a:
                    2c:8f:56:8e:d4:0e:79:17:c2:e7:bf:d6:d8:15:8f:
                    93:5c:60:b6:77:af:08:7f:57:6b:50:4b:e1:8d:1d:
                    fd:7c:a0:7a:40:23:76:be:87:2e:ce:2d:86:18:00:
                    46:f2:62:47:30:94:68:b8:25:c7:63:6e:eb:e2:9a:
                    2f:9b:15:05:ca:95:c8:84:b2:e9:1a:0f:bd:4f:75:
                    a4:fa:84:89:55:74:bc:ea:f0:e9:cf:f6:ab:61:12:
                    2d:21:81:da:09:6b:24:43:9b:f7:3f:e3:9b:3c:1e:
                    95:b8:9c:e5:99:37:c0:44:02:0d:2c:6b:9d:e2:2d:
                    cb:f7:8d:3c:30:fc:dd:9a:c2:0d:27:a4:3d:1a:0d:
                    b7:60:08:8f:ea:a5:cf:bf:97:4b:8f:4b:dc:b0:7f:
                    8d:50:de:62:8d:f0:54:ca:07:81:f6:69:ce:fc:22:
                    d5:bb:41:23:d5:5a:fa:49:b9:bb:63:cc:53:86:fc:
                    01:7a:ca:79:4f:dc:73:12:d4:4c:76:e7:0a:bd:92:
                    e4:89:97:83:de:03:ed:b8:35:58:ee:ab:f5:f6:a9:
                    78:f6:3d:d7:7d:b0:d6:d6:6e:9b:c3:ff:55:ae:83:
                    47:8c:fb:ea:fe:4d:d1:fb:1a:15:5e:bc:74:90:2b:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D9:87:BC:E4:26:6E:6F:C3:B0:46:0F:89:E4:55:89:31:0C:43:A7
            X509v3 Authority Key Identifier:
                keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:39:5d:98:ef:84:69:f5:8a:c6:d6:b3:84:2f:51:e4:ca:26:
         e0:e0:80:56:10:83:a7:a6:1a:62:a5:6b:df:1a:c9:a4:ea:29:
         29:c1:f6:26:6e:92:55:47:e4:b0:15:c0:93:ca:0b:95:e6:ce:
         4f:c0:2b:62:80:00:7a:98:22:20:4e:bb:6d:41:d5:ee:68:0e:
         11:4a:ec:21:02:e4:28:24:0e:8c:f8:dc:f9:4c:8a:79:78:94:
         28:85:00:a9:37:2c:cf:2a:83:39:19:97:fe:2f:87:e1:78:b1:
         d9:aa:67:5d:7f:e9:ad:98:97:30:20:ad:69:79:5d:42:cd:b9:
         39:21:cb:d7:31:18:59:e1:56:bf:e6:d8:b1:7f:e6:6f:f9:bd:
         d1:81:bb:b8:b1:90:fb:d9:54:fd:de:f9:09:40:f0:f6:46:96:
         34:9c:11:f5:fb:68:28:83:9b:da:a6:2f:7d:e7:b2:3b:c4:ae:
         4d:2e:90:ff:af:05:80:01:e8:76:f2:9d:0f:aa:be:df:9a:10:
         9d:ea:27:55:b2:72:5d:88:9b:e5:ab:b5:eb:7c:9e:41:46:f8:
         64:b6:f6:4b:68:16:66:08:14:7e:c3:6f:34:57:f1:91:d7:51:
         e1:95:61:2c:6f:ba:6a:48:c2:e0:ee:7a:4b:56:5f:c7:7b:f9:
         03:d3:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:24:14 2026 by rpki-client