Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3131312e302f32342d3234203d3e203538383230.roa
File:                     3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (raw, json)
Hash identifier:          3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=
Subject key identifier:   F2:32:4C:96:47:25:F9:9B:DC:04:37:37:72:6E:A6:F6:E2:15:32:ED
Certificate issuer:       /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584
Certificate serial:       5451E696DDFE5241C8119937D26054332C378113
Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3131312e302f32342d3234203d3e203538383230.roa
Signing time:             Sun 03 May 2026 02:56:25 +0000
ROA not before:           Sun 03 May 2026 02:51:25 +0000
ROA not after:            Sun 02 May 2027 02:56:25 +0000
asID:                     58820
IP address blocks:        103.97.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl
                          rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:51:e6:96:dd:fe:52:41:c8:11:99:37:d2:60:54:33:2c:37:81:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584
        Validity
            Not Before: May  3 02:51:25 2026 GMT
            Not After : May  2 02:56:25 2027 GMT
        Subject: CN=F2324C964725F99BDC043737726EA6F6E21532ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:21:ea:e0:54:8f:96:d4:be:db:a5:97:0b:
                    cd:9f:8a:6f:65:1c:53:ff:e5:8a:7f:26:66:c2:fb:
                    b0:de:8e:d0:51:c9:6d:ad:11:38:8f:73:18:bc:c8:
                    69:83:2a:1b:95:9c:5c:ec:44:29:3a:c1:c8:41:6b:
                    ea:07:93:92:fd:b0:a0:96:dc:81:a6:0a:c2:3c:6b:
                    b6:4e:1d:0c:03:6a:eb:40:5d:ae:ab:18:84:3b:55:
                    81:93:8d:93:2a:fb:8c:dd:93:4f:8b:95:ec:b5:3b:
                    3c:e4:62:a4:98:5a:39:0f:da:68:cd:1f:df:a7:49:
                    93:62:8e:fb:56:3b:1d:75:a6:77:35:76:eb:e5:a3:
                    89:dc:93:11:c5:3e:de:e2:a4:6b:63:20:e5:6e:e3:
                    f3:8d:8a:48:a6:84:55:3a:ea:21:98:3e:21:f2:82:
                    6c:c8:b2:95:86:dc:13:5b:ba:43:16:b7:c1:83:77:
                    25:88:77:4c:6c:a1:0e:e1:0b:fe:69:b4:ed:56:7e:
                    19:48:b0:1d:ae:66:77:0b:6f:6b:16:85:4d:c3:fe:
                    85:f8:7f:3d:37:65:4c:10:98:1d:5f:1e:ca:05:21:
                    b2:ff:94:43:98:d5:20:3b:31:40:c9:14:8a:86:05:
                    78:73:08:37:a5:09:53:cb:eb:7c:10:b5:cd:32:60:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:32:4C:96:47:25:F9:9B:DC:04:37:37:72:6E:A6:F6:E2:15:32:ED
            X509v3 Authority Key Identifier:
                keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3131312e302f32342d3234203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:78:05:9e:46:f5:3a:31:57:a6:7c:0d:80:3a:10:01:52:89:
         8d:36:91:30:af:3e:4a:ba:cd:a4:95:f8:ce:61:28:21:1e:16:
         02:8e:f7:e4:36:b3:0c:1b:c5:8a:f4:43:1f:6c:5a:4c:86:50:
         1c:c6:66:22:b0:b1:eb:09:d0:6b:b9:e3:54:b4:45:fe:a8:ca:
         b7:ee:41:4e:b9:0a:93:5d:ff:2c:35:2f:cd:2f:74:78:68:74:
         42:7b:2a:d9:fa:6e:85:90:92:cf:56:7a:51:de:12:88:fa:f5:
         8f:2c:fa:3e:f0:fb:7f:52:34:e9:1b:91:55:f5:76:89:6d:f0:
         75:f4:26:00:e8:9d:55:9c:21:f8:1c:ac:4a:f3:19:fa:f1:f3:
         0d:60:da:db:90:b6:f9:8f:0e:75:77:93:cf:9f:5e:57:73:6c:
         16:61:dc:6a:76:1b:5e:c0:bc:b9:47:85:52:14:ea:2c:18:7d:
         47:1b:bc:ed:cf:0b:ef:00:76:80:8b:f0:a9:39:64:e9:54:aa:
         0f:3a:5a:40:02:8d:3f:06:31:73:e4:63:9c:a3:f5:ed:c2:d5:
         6e:0c:c0:fb:5d:ba:8e:f2:6c:8f:d4:88:cf:21:ae:02:9b:aa:
         16:43:1e:cd:d9:3f:77:cd:0a:03:33:20:67:7b:3e:cc:9f:5d:
         3e:d1:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:02 2026 by rpki-client