Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa
File:                     3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=
Subject key identifier:   67:1B:81:84:F5:16:AE:AA:F8:A1:51:8C:BA:B9:B9:C0:4D:89:38:84
Certificate issuer:       /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
Certificate serial:       29AF85988C12DD4E074502221FD95DA769AF0B5A
Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa
Signing time:             Sun 03 May 2026 02:52:32 +0000
ROA not before:           Sun 03 May 2026 02:47:32 +0000
ROA not after:            Sun 02 May 2027 02:52:32 +0000
asID:                     38320
IP address blocks:        103.159.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl
                          rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:af:85:98:8c:12:dd:4e:07:45:02:22:1f:d9:5d:a7:69:af:0b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
        Validity
            Not Before: May  3 02:47:32 2026 GMT
            Not After : May  2 02:52:32 2027 GMT
        Subject: CN=671B8184F516AEAAF8A1518CBAB9B9C04D893884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:75:a3:79:99:a8:ef:0f:49:f2:fe:f0:b8:
                    42:ea:65:05:62:84:ff:b5:27:ec:30:e5:dd:04:ef:
                    19:08:46:ef:3d:5f:ad:3c:b8:9c:6d:be:88:a2:5a:
                    d9:9b:f9:e2:94:0a:7a:98:3e:f5:11:41:fc:25:cb:
                    9b:06:ad:a4:64:80:75:44:c6:f8:6f:89:b2:d8:d3:
                    86:14:9b:81:98:90:c0:63:7a:a1:31:e5:44:b7:b1:
                    49:c5:d9:42:3b:ee:31:7a:94:45:a7:da:71:0f:d9:
                    a6:bd:ab:23:11:81:15:85:0f:65:71:76:5a:3b:54:
                    18:df:40:83:74:6c:c6:76:31:dc:c7:ff:80:d6:7a:
                    25:f7:df:53:0b:45:cc:ee:79:46:60:53:7a:54:4e:
                    eb:8f:6f:55:3d:c1:37:67:73:96:7b:af:88:f2:ff:
                    8f:0d:87:5e:92:95:ac:c7:31:84:47:c1:77:66:62:
                    76:d3:ab:71:98:c0:7c:90:c2:e5:c3:1a:48:d1:fc:
                    40:ec:44:fd:13:aa:25:0a:94:b9:e3:d9:e9:51:a9:
                    c2:a8:9a:9d:d6:b2:a4:e8:3b:79:49:5f:89:a3:89:
                    33:75:18:2a:e6:45:d6:1d:9c:01:cd:fd:45:6f:32:
                    4c:5f:62:97:0d:6b:b5:a1:be:59:ec:8b:3b:8b:a7:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1B:81:84:F5:16:AE:AA:F8:A1:51:8C:BA:B9:B9:C0:4D:89:38:84
            X509v3 Authority Key Identifier:
                keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:91:25:3d:e6:96:cb:0d:f3:1f:5e:33:fb:be:5c:45:f5:bc:
         0e:11:67:52:01:40:d2:52:2c:ef:2b:6a:2e:9b:1a:b4:3b:73:
         71:70:8f:23:f9:ca:d8:c4:90:cc:c8:a9:0e:c3:c5:40:1f:39:
         a1:b7:ad:47:83:93:7c:08:85:3a:b4:9a:d6:d9:48:ed:71:84:
         61:9a:8f:27:fa:e4:87:22:43:f3:f2:29:1e:65:fc:56:8a:ac:
         dd:86:60:b6:0d:9c:6a:24:15:c8:aa:48:a7:49:fa:48:45:22:
         bb:aa:1c:34:78:83:c6:9a:20:40:c5:c5:cb:34:71:67:9f:5c:
         18:fd:ce:75:23:c8:c5:fa:fc:a1:1b:fe:79:44:79:82:1e:2e:
         f1:36:e3:21:89:d5:27:68:ee:18:ff:a5:d9:83:da:34:68:64:
         67:d4:40:40:5d:3f:54:88:b8:5b:ca:be:90:a8:04:55:8f:59:
         59:af:30:75:fa:24:fb:e8:68:e4:6d:62:2e:65:d5:85:ff:bd:
         cf:c9:af:00:45:b7:2e:18:da:7c:98:4f:aa:8b:d6:95:60:48:
         c7:0b:2f:f4:81:b3:fe:6e:66:25:da:2c:8b:78:13:3c:fc:97:
         08:c2:5f:32:89:9b:68:9c:71:3f:61:ef:ad:10:40:9b:4c:ff:
         85:d6:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:36 2026 by rpki-client