Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32332d3233203d3e203539313335.roa
File:                     3130332e372e3232362e302f32332d3233203d3e203539313335.roa (raw, json)
Hash identifier:          AzwawxbCEg5H+zE23E5y6RqY3/0LQRvHyDvmDqo+Klw=
Subject key identifier:   ED:8F:7B:19:C9:E3:15:AD:F1:3B:3F:13:AB:E3:99:A2:D0:16:A8:7B
Certificate issuer:       /CN=E6782977133FCE90213CEBEC30761D98F47C2F41
Certificate serial:       70E7F4334BF89A54FC432550BCFF2A8D2A948364
Authority key identifier: E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32332d3233203d3e203539313335.roa
Signing time:             Sun 03 May 2026 02:56:53 +0000
ROA not before:           Sun 03 May 2026 02:51:53 +0000
ROA not after:            Sun 02 May 2027 02:56:53 +0000
asID:                     59135
IP address blocks:        103.7.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl
                          rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e7:f4:33:4b:f8:9a:54:fc:43:25:50:bc:ff:2a:8d:2a:94:83:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6782977133FCE90213CEBEC30761D98F47C2F41
        Validity
            Not Before: May  3 02:51:53 2026 GMT
            Not After : May  2 02:56:53 2027 GMT
        Subject: CN=ED8F7B19C9E315ADF13B3F13ABE399A2D016A87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:56:b1:0d:b2:41:e7:7d:7a:80:87:11:ac:
                    9a:e2:ae:0b:d0:70:3f:7d:05:23:bc:a6:18:91:a9:
                    06:95:a0:aa:61:48:dd:86:8e:1a:d3:b7:eb:4d:7c:
                    7d:dd:34:2a:dd:f2:e5:9e:5b:e3:c9:8d:d7:c1:85:
                    ea:61:0d:a3:be:7a:34:f4:86:de:64:ae:79:30:ef:
                    09:8c:87:52:7b:95:95:ee:69:ab:fc:e8:cf:4e:c6:
                    bf:c4:38:51:c6:25:24:ad:e8:f2:8e:44:81:32:63:
                    56:7a:ba:6f:68:89:01:b6:d4:62:86:0e:84:1f:65:
                    16:58:f8:85:8b:89:5a:5e:a2:9e:b1:99:66:b6:31:
                    5b:ee:93:6c:33:2e:bf:1a:aa:31:1d:4d:9a:fd:c4:
                    f2:fd:ad:95:e8:da:08:b7:1e:ba:1a:8f:c2:ed:f4:
                    0b:e7:79:07:64:16:3e:36:43:4b:8c:0f:24:8f:49:
                    6d:f1:42:14:31:cb:fe:f5:71:b5:1f:08:bd:12:7f:
                    c3:3c:49:03:c3:3f:b2:86:3a:cd:df:b7:b0:f5:23:
                    a1:38:03:2f:a1:06:00:7d:dc:ff:bf:f6:76:fa:30:
                    2d:05:1e:58:26:fc:c8:d1:4b:a9:a7:44:0e:76:32:
                    f6:9f:05:82:f6:0a:25:a7:93:db:37:9f:c3:9e:04:
                    38:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8F:7B:19:C9:E3:15:AD:F1:3B:3F:13:AB:E3:99:A2:D0:16:A8:7B
            X509v3 Authority Key Identifier:
                keyid:E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32332d3233203d3e203539313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:82:39:3f:fa:c0:7d:af:e8:66:8a:db:99:78:ed:e5:30:e2:
         29:49:3f:67:80:c5:50:bc:31:ac:d3:71:bd:0b:fd:c5:4a:8f:
         1c:57:28:56:e7:06:51:d7:c1:a9:cd:69:f4:46:a3:33:6c:eb:
         d5:0e:8a:88:df:47:96:db:67:39:e9:d2:58:2d:aa:7d:2b:c9:
         51:05:5c:95:60:04:78:f2:de:6a:2e:3c:03:05:fc:e5:8e:ca:
         64:73:89:15:48:b6:b9:78:e0:90:51:22:b5:5a:51:eb:e8:3e:
         3b:9a:e0:56:9e:0d:a9:26:ca:7f:ff:8c:2e:5d:12:c3:be:76:
         a7:fa:25:5c:37:8b:b0:a7:6a:d8:49:61:b3:aa:4f:b4:bc:d3:
         40:4f:c8:08:20:e7:3b:1c:e5:35:38:30:17:7c:ce:dd:e3:a6:
         d4:bd:b8:7c:92:c1:f4:75:a0:c2:51:44:c3:a9:02:9f:70:1d:
         90:0e:ee:5a:06:71:88:53:1e:3b:ea:fe:8f:77:ef:cd:90:14:
         22:01:d5:49:18:a3:ac:8d:72:66:2d:59:35:28:6d:df:ec:3b:
         e6:30:f7:e5:86:b2:37:f7:09:bd:94:59:23:bb:40:f6:0b:2d:
         66:4c:f2:11:87:4f:ee:29:4f:63:42:0c:76:01:b0:b9:83:9c:
         36:41:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:26 2026 by rpki-client