Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa
File:                     3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (raw, json)
Hash identifier:          oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=
Subject key identifier:   28:46:4B:69:8D:8A:80:C8:44:34:EC:95:AD:01:F7:51:45:AE:86:AB
Certificate issuer:       /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
Certificate serial:       1241A8D50FA538BA0613C91BD7375C6CA767870A
Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa
Signing time:             Sun 03 May 2026 02:54:43 +0000
ROA not before:           Sun 03 May 2026 02:49:43 +0000
ROA not after:            Sun 02 May 2027 02:54:43 +0000
asID:                     151554
IP address blocks:        103.244.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl
                          rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:41:a8:d5:0f:a5:38:ba:06:13:c9:1b:d7:37:5c:6c:a7:67:87:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
        Validity
            Not Before: May  3 02:49:43 2026 GMT
            Not After : May  2 02:54:43 2027 GMT
        Subject: CN=28464B698D8A80C84434EC95AD01F75145AE86AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:43:d0:5f:68:eb:45:e7:a5:b4:9c:28:e0:
                    ae:b0:d0:96:70:e1:30:fe:7a:68:e4:b4:03:0a:51:
                    6e:0f:48:07:62:c7:5f:cb:71:46:d5:ed:3b:11:f4:
                    ee:8e:1d:bc:ab:f3:9d:bb:68:af:35:06:c9:32:89:
                    c3:8d:63:ea:0e:09:a9:56:c4:0d:d3:8e:a3:21:ea:
                    f1:b1:7f:87:41:56:ef:eb:9b:55:4a:5c:4b:be:27:
                    fd:8c:b6:60:b1:2c:eb:f0:19:9c:db:4a:bf:a4:79:
                    56:50:6b:dd:2d:1a:95:42:07:64:ca:07:c2:e0:6d:
                    d7:5c:98:a7:c2:c8:72:37:c3:1e:59:e3:ee:52:1c:
                    dc:77:ae:39:cd:b1:c8:37:ef:5a:27:ac:ed:50:37:
                    fd:78:d3:6a:62:f0:42:b3:02:18:6f:22:eb:18:43:
                    95:ec:72:e7:05:8a:b9:1c:eb:7c:ac:67:5a:9b:6e:
                    1d:4c:00:21:c3:a0:90:7f:d3:95:5c:1a:d4:0e:cb:
                    49:54:f5:ad:18:18:58:ce:9c:ef:38:e7:6c:b7:9c:
                    98:86:ed:c2:8b:c9:93:3e:6f:d9:1f:2f:66:05:4d:
                    7c:49:df:0f:db:89:00:5f:65:27:75:ef:94:8d:0b:
                    73:16:9e:6c:02:e4:e7:02:2f:44:b5:27:b7:14:84:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:46:4B:69:8D:8A:80:C8:44:34:EC:95:AD:01:F7:51:45:AE:86:AB
            X509v3 Authority Key Identifier:
                keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:7f:4a:25:53:e5:be:08:fe:b7:be:a2:8d:b7:57:19:c6:47:
         e8:85:7e:4d:ef:b0:39:ec:05:89:56:68:64:d1:22:de:cc:fb:
         5c:40:7c:9a:1d:ef:17:94:0f:eb:41:f3:18:b3:98:70:b2:e8:
         fa:64:72:7e:72:89:d7:94:e4:70:a0:c3:d0:fa:1a:a0:3a:9f:
         7e:5c:fe:01:cf:62:9d:e0:08:59:9d:93:94:b1:83:17:60:02:
         93:db:83:7c:40:ca:eb:45:f6:7f:d6:78:75:1d:c8:4a:c7:3e:
         a0:57:ed:9f:a8:2b:35:28:73:e3:eb:96:1e:15:8c:51:a2:54:
         0f:5e:2b:28:94:df:16:19:6e:0a:28:20:b6:97:8c:5f:8a:be:
         ab:47:bc:cc:1f:1b:83:aa:80:70:aa:a8:53:f6:9f:1d:0d:aa:
         a0:7e:74:45:c8:f5:59:81:5b:4d:ff:62:43:6b:be:8e:0c:a3:
         81:b2:70:2d:19:b8:0e:ab:0d:62:55:19:91:ff:8f:c9:e2:61:
         84:06:3d:16:28:58:d2:a1:82:60:80:1f:ee:91:0a:eb:86:a1:
         bf:fb:04:d2:00:eb:bd:9a:1f:a1:c1:2c:ab:82:05:93:6e:9b:
         c3:f7:95:28:58:47:af:d8:50:db:65:ce:72:bf:62:cc:94:66:
         3f:3a:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:44 2026 by rpki-client