Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa
File:                     3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (raw, json)
Hash identifier:          WO/HZkeGMlCtfYP3+X9HhjaUkBzT5oOMey9taigK+SI=
Subject key identifier:   5E:75:64:A9:F3:32:9E:42:01:B8:FD:59:68:B6:26:55:B8:CC:BF:D9
Certificate issuer:       /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36
Certificate serial:       5497EE4FE76EBD58B890E6377335050A3F74A108
Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa
Signing time:             Sun 03 May 2026 02:54:17 +0000
ROA not before:           Sun 03 May 2026 02:49:17 +0000
ROA not after:            Sun 02 May 2027 02:54:17 +0000
asID:                     149737
IP address blocks:        103.188.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl
                          rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:97:ee:4f:e7:6e:bd:58:b8:90:e6:37:73:35:05:0a:3f:74:a1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36
        Validity
            Not Before: May  3 02:49:17 2026 GMT
            Not After : May  2 02:54:17 2027 GMT
        Subject: CN=5E7564A9F3329E4201B8FD5968B62655B8CCBFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:85:ac:1e:02:97:bf:24:36:4c:d9:f4:c4:
                    62:7e:36:c3:d0:f7:4e:c1:ad:62:7b:53:0d:ff:79:
                    14:18:ae:e0:2f:30:86:4e:b4:8b:bd:95:ed:e2:f4:
                    fc:6b:de:b5:9c:18:fc:b7:25:1c:ce:c2:52:44:11:
                    18:cd:66:44:05:f1:5e:11:2c:af:98:35:1b:b3:41:
                    97:e7:15:05:a4:f8:a6:ab:58:da:14:8d:b8:84:51:
                    ab:e6:36:d3:c6:b5:08:56:34:67:21:89:41:7a:44:
                    62:b9:45:ce:46:e9:ae:95:e6:6e:11:e7:fc:47:f1:
                    1d:12:26:a2:21:4c:f9:f2:a8:a9:ab:26:79:68:07:
                    c5:93:9d:2e:0d:59:e5:70:ec:17:6c:be:b8:f8:18:
                    8d:87:b9:ba:a8:8e:5c:f4:b2:24:44:29:72:93:37:
                    82:9f:d6:fb:ba:c4:29:98:1d:5d:dd:1d:08:17:ed:
                    e7:c6:e4:2e:21:7b:e7:37:04:10:5e:57:c9:c1:4a:
                    63:39:eb:ba:ee:a6:19:72:66:bc:8d:35:f8:52:7d:
                    a7:ed:87:b7:22:26:81:32:0d:32:cf:57:7e:64:ef:
                    1f:43:50:ad:11:5f:7a:1c:91:d9:15:34:3f:67:33:
                    14:1b:c1:91:76:4f:d6:f6:a9:ef:9f:08:71:86:6a:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:75:64:A9:F3:32:9E:42:01:B8:FD:59:68:B6:26:55:B8:CC:BF:D9
            X509v3 Authority Key Identifier:
                keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:a3:4d:f9:a3:44:5d:35:0f:75:21:bf:54:7c:03:65:a9:9b:
         91:e9:af:8b:aa:6b:50:ea:35:75:99:8a:0c:cb:b4:02:a3:66:
         41:7f:8e:fa:b0:f8:d9:ac:1e:aa:5b:35:af:21:5d:22:15:68:
         a3:3a:b8:f0:1c:85:bc:c3:52:58:c1:7b:80:40:47:42:2b:2f:
         27:ed:7e:b1:28:b4:25:4d:15:a9:77:a5:c3:9f:28:4f:cb:02:
         57:ce:da:43:b7:a4:b3:a8:03:fa:32:76:89:ed:47:97:9b:ea:
         0a:d5:37:1e:0b:b3:ef:f0:fa:90:80:74:be:f8:33:8c:6b:7e:
         29:32:6b:ec:a2:49:5d:fa:72:4c:0e:db:01:c7:22:79:0c:88:
         be:0e:c5:f3:cd:04:2e:22:29:9e:67:6a:4c:0b:7a:24:1e:ab:
         3f:93:3e:26:a7:a6:c7:29:08:7a:7c:5f:cd:10:a4:ac:1a:cf:
         a4:b3:0d:1b:ba:f0:ed:ea:82:73:99:7e:83:86:9c:4d:f1:cb:
         64:e5:4f:18:1f:0d:06:1e:bc:25:35:43:52:dc:22:c7:39:c5:
         02:8d:c1:90:fd:cf:41:8b:f0:4b:a9:ec:f7:23:bc:77:40:51:
         a0:82:1d:d0:84:27:07:f1:07:4f:ce:48:a1:fb:b1:3e:2a:68:
         a7:09:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:15 2026 by rpki-client