Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa
File:                     3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (raw, json)
Hash identifier:          3K7HIaNZHq6siHJ1rjKjSGagB9KT2fdBKPyuyy2IpIc=
Subject key identifier:   7C:3A:EF:9A:93:32:B4:DE:D9:E8:47:8F:04:71:0F:E2:46:01:41:80
Certificate issuer:       /CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E
Certificate serial:       750A27A0FD54A1AA0BBDF5C9697EBF68DCCA53C5
Authority key identifier: E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa
Signing time:             Sun 03 May 2026 02:55:52 +0000
ROA not before:           Sun 03 May 2026 02:50:52 +0000
ROA not after:            Sun 02 May 2027 02:55:52 +0000
asID:                     131786
IP address blocks:        103.17.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl
                          rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0a:27:a0:fd:54:a1:aa:0b:bd:f5:c9:69:7e:bf:68:dc:ca:53:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E
        Validity
            Not Before: May  3 02:50:52 2026 GMT
            Not After : May  2 02:55:52 2027 GMT
        Subject: CN=7C3AEF9A9332B4DED9E8478F04710FE246014180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c5:7c:ec:1f:00:2c:90:49:08:4a:a0:fd:8c:
                    7c:82:ba:1a:34:51:89:9d:db:47:56:f4:84:09:1d:
                    17:1f:3c:80:29:ef:e3:1e:37:1a:e2:78:51:a0:45:
                    04:6a:e9:35:06:c4:94:ec:fe:7f:4b:bc:47:b5:2b:
                    a3:57:0e:fa:17:c2:17:c9:53:f9:5b:2a:ec:a1:6f:
                    fd:6d:28:c0:7c:6f:33:69:66:81:ad:b2:f7:3f:a2:
                    47:be:5b:11:5b:0d:24:0f:7c:2d:37:fd:dd:17:1e:
                    5a:8a:b8:f3:ff:bf:53:36:f1:4d:3e:57:63:40:40:
                    77:48:90:6a:cf:51:78:7c:03:a2:88:10:78:d3:74:
                    ff:23:42:77:89:2c:97:1a:c2:2a:59:7b:ab:66:10:
                    1d:49:88:f1:5c:03:e8:0f:fd:1a:0d:32:8a:b1:60:
                    dc:32:31:14:b2:54:07:92:0a:77:c0:a8:1b:c5:7e:
                    6a:14:e4:1b:81:d5:28:14:c4:4a:37:73:a5:e7:49:
                    6c:8d:74:50:b8:05:a9:91:df:bc:57:f3:89:8c:62:
                    1d:cf:14:2f:72:73:05:7c:a2:9b:b3:58:da:aa:81:
                    5c:a5:67:16:b4:46:63:58:7f:27:7d:2d:5e:8c:6e:
                    42:ee:59:bd:41:0c:e1:8d:bb:7e:c6:a7:57:43:d6:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3A:EF:9A:93:32:B4:DE:D9:E8:47:8F:04:71:0F:E2:46:01:41:80
            X509v3 Authority Key Identifier:
                keyid:E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:15:88:3b:e2:41:26:4b:56:b5:51:80:d1:58:f5:06:d0:
         e1:bd:3f:2d:99:c7:3c:5f:2d:84:3a:b0:e4:dd:4f:e1:c7:a4:
         0a:5a:76:1f:8c:01:c0:a6:91:66:24:b2:c9:7e:b7:57:db:76:
         33:03:ce:f2:5a:30:6b:2d:b3:35:6c:e0:75:e0:3e:57:4c:0c:
         56:82:72:74:50:60:6d:2c:6b:1e:b1:98:06:ba:e0:75:20:c8:
         21:31:06:17:f7:a8:cf:78:9e:73:91:90:81:ab:70:d8:22:bc:
         62:d4:4a:3f:95:8c:67:5c:bb:12:90:c1:4f:3f:d8:76:58:da:
         21:cd:2d:fd:77:f2:97:21:21:43:41:39:5e:54:70:5e:86:9c:
         09:f6:39:4e:0f:6c:43:10:19:16:eb:39:73:e7:4a:70:9f:93:
         0a:64:f8:62:87:79:73:41:b1:1c:d9:3f:36:ed:71:4c:75:aa:
         9a:3e:14:d2:0a:52:1c:af:e4:28:aa:8c:03:40:65:cb:6d:a2:
         6e:78:c3:ee:9d:92:f8:5c:67:1f:e7:b1:e9:85:b0:ab:22:3d:
         7a:79:97:b2:1b:eb:1d:20:73:22:ae:d0:fc:55:f9:27:09:2a:
         cd:d1:3e:6a:5b:f9:83:ba:da:37:4b:d0:89:22:1d:0c:de:59:
         b9:f3:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:00 2026 by rpki-client