Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa
File:                     3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (raw, json)
Hash identifier:          50gojjHGXgJ+6nXVYxXceIc5Q4+LdUoXKFR2P9HxySs=
Subject key identifier:   F9:82:A1:E4:F0:68:A5:86:5B:61:E3:93:E0:6D:5B:54:E3:6D:58:A6
Certificate issuer:       /CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E
Certificate serial:       26750017D0BFE280E8B4FBE606FDB7C581200593
Authority key identifier: D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa
Signing time:             Sun 03 May 2026 02:56:03 +0000
ROA not before:           Sun 03 May 2026 02:51:03 +0000
ROA not after:            Sun 02 May 2027 02:56:03 +0000
asID:                     150954
IP address blocks:        103.117.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl
                          rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:75:00:17:d0:bf:e2:80:e8:b4:fb:e6:06:fd:b7:c5:81:20:05:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E
        Validity
            Not Before: May  3 02:51:03 2026 GMT
            Not After : May  2 02:56:03 2027 GMT
        Subject: CN=F982A1E4F068A5865B61E393E06D5B54E36D58A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:e6:ef:f9:e1:28:f6:cf:10:22:ce:f8:75:
                    7e:54:9e:7b:d2:8a:55:11:8c:a8:9a:fd:fa:25:48:
                    b6:c6:c6:77:b1:94:a1:17:ef:a4:f5:73:e0:b3:2b:
                    53:f3:34:ab:57:f2:35:1a:ea:e2:91:a9:72:a8:6d:
                    0e:6c:f2:4b:db:62:df:f6:ca:69:ab:a3:6f:34:7a:
                    61:7b:77:e2:36:ef:d5:fb:34:3d:b0:1c:fe:7f:c3:
                    4a:89:73:df:82:79:a8:44:5a:17:08:31:d9:f8:39:
                    9d:23:e1:eb:a7:8a:1f:15:9c:d2:70:2e:48:b1:f2:
                    7a:1f:9b:95:e6:e0:66:20:6b:30:ae:b6:ef:a4:2e:
                    75:f8:3f:b4:4c:02:21:88:60:79:32:98:a7:24:9a:
                    90:04:e0:7e:51:2b:59:9a:bd:70:ce:c4:8f:74:44:
                    b3:95:ab:77:2b:bf:e2:62:67:35:da:ea:c7:04:36:
                    35:f0:89:71:42:7f:d0:24:5a:e8:b7:a2:f6:8a:ab:
                    b9:b5:09:a9:a6:cb:c8:aa:f4:55:ed:f0:9d:29:36:
                    c3:60:c1:5f:81:eb:25:11:2b:8e:b1:58:c3:cb:e7:
                    35:2d:07:b4:3a:e1:33:f0:0f:df:b2:f3:28:87:bc:
                    bb:c3:78:9b:2c:c4:98:b3:e9:7a:6c:e5:b9:b7:bc:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:82:A1:E4:F0:68:A5:86:5B:61:E3:93:E0:6D:5B:54:E3:6D:58:A6
            X509v3 Authority Key Identifier:
                keyid:D6:BB:B0:4A:96:DE:95:BA:1D:B1:CF:B1:59:DA:9A:E0:30:BB:39:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6BBB04A96DE95BA1DB1CFB159DA9AE030BB398E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:44:0d:32:98:c6:c6:49:e1:6f:fb:86:ff:c0:a8:79:8c:d8:
         3a:70:f4:8a:e4:b2:99:8c:61:cf:4b:1e:44:de:52:c0:86:29:
         36:cf:a3:21:a2:82:b1:2e:31:a6:31:a8:58:b3:d7:a5:8e:a1:
         3a:f8:4b:d2:19:53:49:d0:a2:ee:f6:df:f3:04:2c:83:c5:94:
         3b:58:21:32:37:5d:8d:1b:fa:7f:c4:c0:60:4f:de:02:a6:fe:
         d2:7f:62:19:55:05:36:f2:2c:39:c4:ae:06:31:f3:59:ed:66:
         21:47:40:10:55:b6:15:b2:4f:bd:9a:c6:2e:ed:f1:af:36:5e:
         05:a9:35:8d:ce:07:e2:d5:ac:52:91:b5:c3:93:8d:e0:d6:04:
         55:19:aa:b0:83:50:fe:4e:41:f6:42:18:97:0a:08:87:35:2e:
         b9:28:c1:78:8a:9d:4f:7b:11:c5:a3:3c:82:2d:9f:80:13:a1:
         ec:67:fc:d6:87:b5:02:5f:0d:b8:e7:a2:cb:53:5b:9d:27:2b:
         31:4c:bd:53:4a:f7:1a:c4:b1:4e:fa:81:9e:78:4f:27:6f:70:
         98:70:c9:95:5f:c5:f2:6e:59:eb:16:58:96:47:47:08:60:a2:
         90:87:58:80:15:c5:f8:90:ce:fe:0b:1b:54:ff:02:bf:b0:f6:
         56:2e:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:08 2026 by rpki-client