Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32332d3234203d3e203435333035.roa
File:                     3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier:          MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=
Subject key identifier:   35:3B:A6:89:45:71:B9:B6:A4:F0:33:21:E0:7E:6A:F8:54:AE:1B:86
Certificate issuer:       /CN=02A914400077F3E213C8972280DBD775A6B4C27C
Certificate serial:       5150896032412FB7FBFC9C9734C5FB2CE4587E08
Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32332d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 02:56:29 +0000
ROA not before:           Sun 03 May 2026 02:51:29 +0000
ROA not after:            Sun 02 May 2027 02:56:29 +0000
asID:                     45305
IP address blocks:        103.189.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
                          rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:50:89:60:32:41:2f:b7:fb:fc:9c:97:34:c5:fb:2c:e4:58:7e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C
        Validity
            Not Before: May  3 02:51:29 2026 GMT
            Not After : May  2 02:56:29 2027 GMT
        Subject: CN=353BA6894571B9B6A4F03321E07E6AF854AE1B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3b:b0:6d:38:3f:d9:c4:3f:a2:6f:00:b5:4f:
                    29:65:89:84:b2:cb:2b:44:02:46:18:56:d6:cc:f7:
                    41:43:8e:2c:7f:29:a2:68:46:a9:a3:c9:55:d6:35:
                    94:59:4b:3a:c7:c0:38:a1:76:14:26:d6:b0:f4:e1:
                    76:b1:8b:c3:77:8e:6a:bb:e1:9c:ce:9d:23:0b:b4:
                    2f:7d:f5:97:a2:95:7a:4e:6b:94:08:67:79:61:38:
                    24:d1:7b:d4:c9:0d:1e:07:f3:b3:ce:5a:d4:ae:b3:
                    df:59:ea:11:15:2f:b1:73:10:64:0b:81:43:49:d2:
                    85:8e:4c:ae:62:fe:35:cb:fc:8d:61:f9:0b:05:a9:
                    d3:ff:f4:ac:9f:ed:d6:e1:f4:2b:e8:3d:4b:09:d6:
                    5e:17:2c:1d:07:b4:47:20:81:b0:1f:ab:5e:74:08:
                    f6:da:bc:84:03:bf:10:92:66:b4:75:a2:8d:8f:be:
                    7a:e8:6e:4e:f7:fe:6a:17:2b:5f:ce:02:91:83:f8:
                    43:5d:26:e3:7d:b5:85:1f:b2:ca:76:89:0d:4f:96:
                    ac:3c:07:41:8d:73:26:85:c3:89:d0:4c:7c:0b:b4:
                    a5:bf:09:d7:3d:80:89:83:c7:ec:b0:3e:5b:ca:6e:
                    7e:ba:f0:c8:81:7e:77:79:28:c3:42:2d:5d:a4:4f:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3B:A6:89:45:71:B9:B6:A4:F0:33:21:E0:7E:6A:F8:54:AE:1B:86
            X509v3 Authority Key Identifier:
                keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32332d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:10:25:0c:22:f0:c5:68:27:08:03:78:8e:0f:65:cd:b3:
         72:8f:86:dd:e3:e9:ab:5a:dc:bc:27:01:78:db:a0:c0:c9:85:
         eb:21:63:5c:93:3d:c3:8c:73:01:04:1e:3d:bf:00:f8:a5:97:
         16:dd:45:53:af:61:e0:95:19:9d:dc:23:86:c1:11:81:7b:d7:
         8b:cb:39:9d:7d:79:82:99:1d:4b:72:13:0b:0f:d1:70:1c:69:
         67:05:be:22:93:35:3f:dc:98:d6:6d:dd:7c:5c:b8:a6:4e:62:
         cd:a5:e7:f1:d5:c4:70:48:ce:a8:b6:c7:65:b3:a6:df:e8:34:
         2a:19:7f:39:48:8c:ce:e3:52:6d:9b:38:28:c3:1c:c9:d8:b4:
         67:3c:e5:d9:9f:be:d6:bd:01:2e:ac:ae:87:4b:e0:95:7e:f7:
         bd:3e:26:a3:b7:cf:79:13:68:72:8f:8a:e0:27:a1:eb:74:c9:
         31:00:94:2a:6d:3b:1b:c5:cf:6e:d0:e8:c6:51:8c:f2:af:a6:
         13:ae:06:30:e4:73:17:01:25:c5:48:11:fe:f4:ff:be:64:ec:
         15:18:99:17:1f:1e:44:68:0e:a3:b3:ee:00:f4:13:de:a4:8b:
         d7:b3:a5:cf:a1:6a:19:3b:19:45:5f:4c:ff:f3:71:6b:e3:31:
         b1:45:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:39 2026 by rpki-client