Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa
File:                     3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (raw, json)
Hash identifier:          yOnWZNbCc8o1mKC0JiqTlN6+Y33PQ/Kc+NLmWQanxsY=
Subject key identifier:   A9:B3:CC:3B:FB:86:ED:C1:A6:BE:DE:CF:F5:A3:28:05:5A:70:46:5B
Certificate issuer:       /CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC
Certificate serial:       0C988A8FA49A1C58946B2E17059605CE272B879B
Authority key identifier: 78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa
Signing time:             Sun 03 May 2026 02:51:55 +0000
ROA not before:           Sun 03 May 2026 02:46:55 +0000
ROA not after:            Sun 02 May 2027 02:51:55 +0000
asID:                     152352
IP address blocks:        103.184.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl
                          rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:98:8a:8f:a4:9a:1c:58:94:6b:2e:17:05:96:05:ce:27:2b:87:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC
        Validity
            Not Before: May  3 02:46:55 2026 GMT
            Not After : May  2 02:51:55 2027 GMT
        Subject: CN=A9B3CC3BFB86EDC1A6BEDECFF5A328055A70465B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:72:77:f0:16:89:f2:0a:6d:e4:d4:f3:4b:
                    7f:4f:9f:1f:e7:5b:fa:2d:36:2e:f0:17:a0:e9:8d:
                    8e:93:ed:e7:ca:07:0e:8b:7f:37:99:56:76:c9:83:
                    9f:a2:c5:e9:65:8d:18:d7:e9:f7:22:d6:c9:47:11:
                    e6:b1:bc:fc:1d:73:5f:55:6a:47:78:af:2d:e3:7c:
                    1c:25:80:fe:5a:53:e1:dd:bb:75:50:a1:60:a3:93:
                    a3:71:51:36:e9:9b:94:67:b5:17:6d:5b:37:c7:1d:
                    3a:32:f1:0f:38:84:28:9e:06:cc:ac:12:9e:2a:e4:
                    d3:ed:c9:9c:7d:ff:68:5c:d3:07:f7:d4:25:29:2d:
                    41:79:de:a2:1f:cb:cc:50:c0:41:d4:50:5f:47:dd:
                    43:d1:7a:59:09:f0:0f:80:88:06:0e:70:a5:1b:5c:
                    14:c3:e1:41:cc:de:e7:89:55:0e:c0:3c:6b:c6:0d:
                    6c:de:a8:e8:0c:b3:c0:f4:ed:b3:29:ad:d6:01:90:
                    dc:4e:3a:fd:6a:10:1f:99:3e:5b:37:c9:44:95:94:
                    5c:a7:de:5d:88:2e:88:82:bf:80:e5:8f:54:b7:53:
                    4d:8f:bd:02:06:6e:8d:3a:a5:1a:99:8a:df:4b:20:
                    72:54:9f:7f:93:e3:f2:52:73:95:be:0f:de:ab:91:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B3:CC:3B:FB:86:ED:C1:A6:BE:DE:CF:F5:A3:28:05:5A:70:46:5B
            X509v3 Authority Key Identifier:
                keyid:78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:65:be:6f:e4:8e:d9:c3:eb:ab:ac:c9:41:17:ce:3d:e9:
         7d:ac:57:c3:8d:e0:07:ce:4b:3b:1f:df:9e:bb:6d:35:c3:19:
         06:0a:06:a0:c1:62:a7:93:28:c2:65:ce:77:2d:f9:fc:c9:80:
         97:49:a5:88:70:ec:74:ba:4f:b2:41:78:46:99:9b:97:76:83:
         a4:9b:22:dd:ac:60:c4:b9:93:23:de:c4:6f:97:af:15:a0:b7:
         49:75:8b:79:b1:d9:39:14:b7:40:e7:05:9f:fa:21:dc:21:e9:
         17:ca:a3:d8:0b:67:ea:b6:7f:31:c6:9a:dc:fa:ba:53:de:e3:
         70:1b:c7:d1:2a:74:fb:96:62:51:0b:51:0d:f3:59:39:db:49:
         80:62:5d:87:25:4e:68:9a:80:e8:f0:29:67:81:1f:5c:57:01:
         cc:b8:62:73:ce:75:4f:d5:26:7b:5b:44:8d:b6:d3:b3:d1:52:
         0d:9a:8a:3e:b4:f0:8e:f2:2b:34:07:bf:08:20:16:46:a7:9a:
         62:97:a6:09:ed:99:48:4d:02:91:fc:61:97:a6:a6:19:f0:b8:
         9f:e0:48:d4:89:7c:d5:73:8a:65:d1:ab:75:e8:2d:07:f0:96:
         70:4b:b5:b0:50:ac:0c:8c:9f:87:60:93:9f:23:32:42:e0:17:
         08:cd:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:46 2026 by rpki-client