Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
File:                     3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          VTF9DKsDDs5XXBhLFlLnAOGE0dR7pXYnN3FimbyGZt4=
Subject key identifier:   8A:9A:47:2D:36:0F:18:1C:A2:70:7E:61:EA:BF:EB:A0:A5:59:0C:7B
Certificate issuer:       /CN=1F3B2D12BD297463BA7717F257A40F73DE290B89
Certificate serial:       0652795FC54FDCCB76D5687420EBA0621E747DE0
Authority key identifier: 1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
Signing time:             Sun 03 May 2026 02:54:56 +0000
ROA not before:           Sun 03 May 2026 02:49:56 +0000
ROA not after:            Sun 02 May 2027 02:54:56 +0000
asID:                     4800
IP address blocks:        103.190.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl
                          rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:52:79:5f:c5:4f:dc:cb:76:d5:68:74:20:eb:a0:62:1e:74:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F3B2D12BD297463BA7717F257A40F73DE290B89
        Validity
            Not Before: May  3 02:49:56 2026 GMT
            Not After : May  2 02:54:56 2027 GMT
        Subject: CN=8A9A472D360F181CA2707E61EABFEBA0A5590C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:d8:0b:97:b3:2f:0d:19:9a:d3:51:0c:75:
                    bc:a6:e9:cc:e5:39:70:39:77:8b:13:0e:f0:02:42:
                    77:0a:d8:e2:1c:78:76:84:a6:9e:d4:d6:ca:2b:fe:
                    e8:db:71:35:10:e9:18:d5:03:f5:ae:37:24:14:b4:
                    e5:ca:05:ea:a2:38:50:12:96:a1:2e:61:34:00:f2:
                    95:a3:e4:10:0f:a7:00:f5:1b:e0:bd:ce:4a:41:bf:
                    57:e3:7b:da:1b:f0:cf:b4:c3:6c:51:b2:9a:9a:69:
                    10:3d:e1:30:98:c4:4e:44:7a:2d:21:b2:6e:35:96:
                    70:e3:58:e4:23:cf:1a:0c:37:a7:e5:6f:c1:0a:77:
                    03:3c:a9:6c:66:c6:35:78:58:c8:1e:24:cb:a3:47:
                    ee:fa:2c:37:c9:98:a1:52:70:8b:01:7b:7d:b6:d5:
                    82:4a:f1:a2:f5:9c:e3:23:53:41:cd:fc:0d:ef:e6:
                    99:98:25:12:6e:2b:c7:02:9a:e1:4d:bc:75:88:54:
                    fd:20:39:cd:b2:1a:26:c7:0b:99:02:8a:7d:88:ed:
                    04:ed:dc:ca:3e:d9:97:9d:d6:d0:ea:ad:82:3f:20:
                    ff:22:4d:db:46:8e:31:09:d2:0d:fa:12:88:58:74:
                    a0:27:0f:1a:db:5d:86:a6:b6:72:39:b5:5c:fb:ee:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:47:2D:36:0F:18:1C:A2:70:7E:61:EA:BF:EB:A0:A5:59:0C:7B
            X509v3 Authority Key Identifier:
                keyid:1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:58:f5:a3:91:61:93:73:aa:c1:99:d2:e0:92:aa:6e:4c:35:
         9f:cf:2c:9d:d7:61:b7:e3:fc:b0:57:31:ec:57:f2:a5:d2:a5:
         31:ff:d6:61:33:e9:52:d0:ce:06:6e:84:2f:64:ff:4f:05:84:
         6a:6f:8a:ca:68:2a:38:51:0b:c1:72:0b:40:81:e7:b1:11:d4:
         df:ec:ec:f6:69:09:3f:eb:0c:06:29:a3:f1:4f:24:2e:29:26:
         0d:08:67:d9:70:08:1b:bc:6b:d7:27:dd:52:73:04:3d:52:9a:
         4a:b8:5b:11:0d:30:b0:a8:45:82:3a:d7:9b:54:12:5d:05:40:
         32:79:a6:25:2b:64:75:58:a9:8e:8b:9f:fd:2e:64:66:d4:b3:
         ed:43:c5:04:50:d9:f3:41:51:b2:d8:89:6d:5d:ad:15:87:a0:
         15:17:33:28:59:8d:7c:82:14:8e:43:45:7c:3c:99:1c:6d:df:
         0a:5c:50:e3:10:7c:71:09:76:2c:bf:61:67:93:bc:ec:4a:53:
         3e:1e:69:22:b8:82:23:b7:b8:d2:dd:76:55:0b:c2:ab:45:14:
         24:21:2f:b3:26:39:30:f9:f5:b4:26:b4:84:8a:5c:74:18:16:
         97:7b:88:ec:0d:dc:67:6a:14:92:41:82:75:60:29:7f:fa:18:
         03:76:d1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:18 2026 by rpki-client