Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa
File:                     3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (raw, json)
Hash identifier:          vkf0yRO25ABbOz67XbB5ZjYKpcZhyMtCimxrRdXql3I=
Subject key identifier:   BB:23:BF:10:81:69:F2:7D:B8:37:BB:97:FE:57:5C:74:1E:20:43:C9
Certificate issuer:       /CN=375BB2985478673C260242A779568A4435FE5916
Certificate serial:       6EC720129FF24DAB9813359A486BC3FE3575123B
Authority key identifier: 37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa
Signing time:             Sun 03 May 2026 02:58:36 +0000
ROA not before:           Sun 03 May 2026 02:53:36 +0000
ROA not after:            Sun 02 May 2027 02:58:36 +0000
asID:                     150942
IP address blocks:        103.77.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.crl
                          rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c7:20:12:9f:f2:4d:ab:98:13:35:9a:48:6b:c3:fe:35:75:12:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375BB2985478673C260242A779568A4435FE5916
        Validity
            Not Before: May  3 02:53:36 2026 GMT
            Not After : May  2 02:58:36 2027 GMT
        Subject: CN=BB23BF108169F27DB837BB97FE575C741E2043C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:ae:b7:4b:61:a3:44:c9:e6:85:6d:58:f4:
                    ca:e0:2a:b0:99:90:c6:e5:92:cd:f9:51:fc:d4:c8:
                    1e:96:2e:2e:90:08:da:be:8c:20:b8:b4:cf:1b:7f:
                    b4:df:89:0c:67:b9:47:b9:ae:fc:c4:c5:a5:81:38:
                    4c:65:97:5e:ba:7b:18:de:d8:f9:e7:05:7a:ca:a9:
                    92:95:5c:ea:08:32:9b:41:a9:fa:e2:12:63:50:74:
                    ee:6f:95:a1:4d:1e:d9:20:05:fb:cc:6d:d5:de:7d:
                    31:f2:a3:9d:61:03:43:fe:c1:c8:87:cd:be:02:ec:
                    c5:df:b5:7e:5d:c3:f7:62:a3:ed:cf:f2:9b:42:8c:
                    20:ff:32:75:0d:ce:57:d0:1b:b5:6c:14:a7:57:13:
                    a3:95:db:7c:81:4d:14:df:0b:0d:b2:45:69:4c:47:
                    f6:f0:3d:a0:2b:0f:af:9d:00:35:43:20:62:2f:79:
                    58:66:af:e8:b7:6e:b9:dd:bf:88:e3:e0:11:91:a9:
                    52:e2:32:56:79:a7:2b:c3:e4:a4:dd:eb:f5:bf:2b:
                    3c:d7:5a:a3:10:cc:f3:69:02:a1:a4:b7:8e:19:e6:
                    94:79:11:54:e3:53:f6:60:97:47:42:c1:d6:8b:e1:
                    36:ad:cc:58:57:5e:23:c3:ee:4a:96:16:f8:a5:d4:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:23:BF:10:81:69:F2:7D:B8:37:BB:97:FE:57:5C:74:1E:20:43:C9
            X509v3 Authority Key Identifier:
                keyid:37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:84:b7:16:cb:68:6d:62:ac:66:0f:cb:16:93:23:2a:16:80:
         87:e5:1f:4b:ce:67:d2:f3:07:ed:b8:16:fb:19:ff:e6:cd:7d:
         57:25:a2:ec:66:b6:87:6d:6e:75:72:f2:b9:56:bb:c5:27:05:
         a5:91:1e:31:1b:72:48:7c:40:d3:ab:b3:8c:e1:d5:d2:53:f7:
         74:0c:2b:81:b1:d2:1c:03:05:93:9c:30:66:14:f9:a3:a9:65:
         76:10:bf:d8:4f:2b:c9:53:db:46:5f:7a:9a:08:53:1a:db:62:
         61:f9:64:b6:11:88:9f:91:d9:40:72:8d:ef:99:ea:bc:87:fb:
         dc:19:41:52:26:c9:a3:7d:8d:a8:e3:ff:71:37:a7:55:dd:5e:
         d6:e1:f1:fb:de:21:be:b2:02:5a:8f:fd:81:ee:d6:5d:1b:49:
         58:16:b4:9e:0d:29:73:22:7a:00:4a:d3:3a:70:3f:d2:94:d0:
         58:90:89:0f:96:75:a9:e3:6c:f3:2e:96:1e:9f:12:04:a7:80:
         8c:b1:14:b1:79:53:e7:6f:d6:f2:c0:93:38:58:59:43:40:fe:
         a1:4b:89:e3:0d:49:11:82:db:f9:04:c8:2a:6e:bb:fd:98:b9:
         33:fc:e1:98:6c:88:0d:67:00:b0:a0:dd:44:2f:3a:fd:97:59:
         7a:00:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:39 2026 by rpki-client