Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa
File:                     3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (raw, json)
Hash identifier:          GF5sw5TIyMg/HEZpyvFvO1rBAEJgs3CpQYQY8RN9uRY=
Subject key identifier:   C1:2A:24:60:E2:C0:1E:AF:23:F2:B1:52:E6:B1:FD:A1:E1:A4:58:36
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       787F0D82ABFD40B3D7ADF20E135484A7683F1821
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa
Signing time:             Sun 03 May 2026 02:57:02 +0000
ROA not before:           Sun 03 May 2026 02:52:02 +0000
ROA not after:            Sun 02 May 2027 02:57:02 +0000
asID:                     132647
IP address blocks:        103.19.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7f:0d:82:ab:fd:40:b3:d7:ad:f2:0e:13:54:84:a7:68:3f:18:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: May  3 02:52:02 2026 GMT
            Not After : May  2 02:57:02 2027 GMT
        Subject: CN=C12A2460E2C01EAF23F2B152E6B1FDA1E1A45836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:09:cd:e9:a0:5a:34:57:18:87:30:91:44:
                    0d:4a:f8:1c:ef:cb:9c:a0:ca:58:f1:1f:0e:07:45:
                    5e:62:c5:f7:bd:be:30:57:d7:42:5c:e7:4c:58:77:
                    ff:cd:bf:d0:8d:20:32:7a:c7:22:93:90:10:99:c7:
                    2c:35:57:cd:be:4f:29:16:6b:9b:42:3b:3e:42:8b:
                    59:86:55:7c:7b:11:ad:71:60:1b:86:36:41:53:60:
                    b2:96:34:c1:ed:5e:44:2b:8b:10:40:6e:73:aa:b0:
                    d1:3b:22:99:41:3f:82:e4:a8:30:05:84:15:c1:0f:
                    45:d5:4a:2f:d4:c8:ce:4a:56:de:1a:e3:c0:da:f9:
                    30:c8:bb:48:29:4d:9b:48:f8:4e:96:2e:73:c5:a8:
                    af:88:a7:49:c1:d4:21:c9:43:4a:9e:59:3d:5d:27:
                    e4:25:42:61:34:2c:bc:20:39:35:d1:43:0a:67:e2:
                    97:b2:25:7f:62:c2:1c:63:64:93:0b:46:7e:35:5d:
                    32:03:e5:d4:8e:7a:b2:f1:1c:94:65:be:e3:0c:78:
                    29:ee:19:10:92:7b:63:76:c0:df:3a:8f:bf:a0:39:
                    75:7d:ae:4a:3e:97:5c:ae:3c:bb:94:c1:16:19:28:
                    a8:28:98:c9:42:1e:98:b8:16:31:97:2b:ca:05:06:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2A:24:60:E2:C0:1E:AF:23:F2:B1:52:E6:B1:FD:A1:E1:A4:58:36
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:09:a5:e9:a4:29:d1:99:f0:6b:ae:93:63:68:6d:a1:e5:ab:
         8a:d9:6c:76:18:c3:52:03:03:7b:12:46:ab:a3:8d:bf:ca:26:
         f1:06:8e:f2:3c:fd:d8:75:d0:8f:73:4d:20:69:cd:1d:40:69:
         be:9e:8c:10:fb:a8:31:66:f1:28:4d:59:48:7f:ed:74:ae:26:
         56:66:21:b1:a0:93:18:5e:3d:6c:6d:c0:73:1a:44:2e:c4:1b:
         8b:9f:2d:67:c6:56:51:52:c0:70:97:27:15:d7:6e:23:8c:63:
         85:a0:7f:9b:b5:52:65:43:36:8d:5f:ef:bc:13:c3:1c:4f:12:
         38:69:d1:3c:7b:49:ed:ab:db:4d:d6:d7:e0:c2:6a:30:d3:9f:
         67:52:28:18:10:0d:2b:e3:94:c2:28:81:86:bb:d2:52:42:63:
         9a:80:55:26:a5:9b:ba:e2:81:15:2a:6a:c5:70:af:a9:1d:32:
         94:bf:a0:f9:d2:c6:ce:b5:11:58:76:07:13:c0:f6:7c:d5:51:
         30:85:07:c6:1a:24:32:2b:82:aa:7d:6e:b2:35:cb:e6:4a:b5:
         55:0e:e5:82:48:8e:a6:12:03:59:88:b3:d0:c9:18:91:c7:e1:
         ea:d0:3b:0a:c7:39:6c:ac:ea:6e:51:7f:34:cc:10:64:0b:ba:
         80:b3:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:35 2026 by rpki-client