Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
File:                     3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (raw, json)
Hash identifier:          8eEz6hzQ+vunwmpuzCRDL78SRiuZLqQtnLKEvllRxT8=
Subject key identifier:   0F:39:08:3B:0F:CF:98:56:6D:F5:83:2C:83:AA:53:2F:79:8E:DE:1E
Certificate issuer:       /CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D
Certificate serial:       0AE95CADC86BA42DCE93C6D6813339FB12E67685
Authority key identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
Signing time:             Sun 03 May 2026 02:58:33 +0000
ROA not before:           Sun 03 May 2026 02:53:33 +0000
ROA not after:            Sun 02 May 2027 02:58:33 +0000
asID:                     139400
IP address blocks:        103.143.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl
                          rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e9:5c:ad:c8:6b:a4:2d:ce:93:c6:d6:81:33:39:fb:12:e6:76:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D
        Validity
            Not Before: May  3 02:53:33 2026 GMT
            Not After : May  2 02:58:33 2027 GMT
        Subject: CN=0F39083B0FCF98566DF5832C83AA532F798EDE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:4c:d0:43:dd:89:55:ab:c1:72:9e:6c:b7:
                    e0:8a:1c:c6:c3:21:b1:26:3f:9e:63:44:88:f0:1d:
                    fb:fc:b1:e8:07:ff:77:a0:81:9c:3a:d2:ca:b7:bf:
                    cb:72:bb:ab:41:8b:11:76:a0:f8:64:ca:b8:d3:20:
                    e2:b8:bd:a4:bf:d7:c3:0e:29:dd:45:1d:f2:7b:dd:
                    53:4c:0d:13:9c:01:af:ee:93:5d:f0:b9:c7:5b:e9:
                    a1:98:cf:ed:28:9a:62:8e:7a:e1:81:e7:8d:d1:e1:
                    e7:90:d7:3b:e6:8b:61:c6:3c:17:bf:cf:5a:52:3d:
                    d2:12:01:18:35:23:c4:5c:ca:11:e3:e6:bd:48:80:
                    b1:06:71:83:5e:44:aa:36:6a:a0:83:b6:17:51:f6:
                    bc:fc:f1:c4:0a:db:2a:bb:04:97:59:f6:f6:ff:7d:
                    cd:a7:5e:74:bd:9a:63:d8:23:d1:0a:1e:f3:50:1c:
                    d6:42:17:3d:50:84:db:4e:32:e7:6d:76:a1:5e:23:
                    80:f0:1c:ac:b4:4b:af:10:fe:04:f6:d9:5f:82:25:
                    a8:74:05:b7:9b:36:9d:fe:75:33:a5:8d:0d:43:f7:
                    e5:63:ac:22:4a:d6:93:c1:3e:33:72:3e:24:12:ed:
                    ed:3d:38:16:dc:b5:f4:fd:dc:c2:d2:19:f4:12:6f:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:39:08:3B:0F:CF:98:56:6D:F5:83:2C:83:AA:53:2F:79:8E:DE:1E
            X509v3 Authority Key Identifier:
                keyid:A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:b1:5b:34:8c:0c:f2:fc:3d:ab:29:07:de:46:f2:5e:6f:04:
         5b:30:62:3e:d5:5b:81:40:e8:5c:29:7a:b0:1f:b9:52:33:e4:
         5a:1f:89:38:a1:c7:a6:dd:31:55:e1:38:22:5b:b0:df:01:3f:
         48:01:eb:34:bc:85:3c:63:23:25:0b:2c:54:6b:aa:09:a5:2b:
         12:a1:f1:d3:7c:a1:9a:7c:b3:67:e8:7d:55:f4:be:b7:a8:26:
         ca:9c:ab:b1:9b:19:58:98:98:d2:20:c6:d2:57:a7:79:0c:5c:
         72:c5:e8:d6:a6:f9:1e:9f:86:97:6b:08:5f:2b:93:ba:ec:11:
         e2:e8:77:95:f0:3c:b3:fe:0f:a3:34:57:52:66:c0:24:9d:ae:
         5b:69:ca:b9:a1:c9:c4:ff:50:87:55:4a:de:88:45:47:f3:51:
         7a:91:fb:1f:08:e4:06:f7:d9:cd:24:9c:40:47:45:f6:d8:f2:
         5a:93:eb:ac:83:29:9d:69:0d:47:72:97:a5:97:23:9e:93:a1:
         e7:9a:18:0c:6f:29:55:e2:d3:46:a7:d4:b9:5e:61:6f:c9:60:
         57:e6:f1:27:78:0d:33:18:fd:98:56:da:ee:ac:9a:61:cc:49:
         58:cb:c9:67:da:65:77:b8:b8:0b:2b:2b:be:4b:0e:7a:d5:e1:
         4c:d6:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:12:12 2026 by rpki-client