Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa
File:                     3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (raw, json)
Hash identifier:          6ANd8eDpGDry4TmWd8klyvoxo3+q5EgqhgVj7CcAyKQ=
Subject key identifier:   7B:E7:8C:6A:B2:9E:BF:F5:54:66:56:86:F3:59:1C:02:66:F5:71:C5
Certificate issuer:       /CN=A337D214F1B15825AC6178574C28712521D64B38
Certificate serial:       7C4EE0889CCBA88657C03B26C53BE22033FDC5AC
Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa
Signing time:             Sun 03 May 2026 02:58:50 +0000
ROA not before:           Sun 03 May 2026 02:53:50 +0000
ROA not after:            Sun 02 May 2027 02:58:50 +0000
asID:                     154217
IP address blocks:        103.20.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl
                          rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4e:e0:88:9c:cb:a8:86:57:c0:3b:26:c5:3b:e2:20:33:fd:c5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38
        Validity
            Not Before: May  3 02:53:50 2026 GMT
            Not After : May  2 02:58:50 2027 GMT
        Subject: CN=7BE78C6AB29EBFF554665686F3591C0266F571C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:58:1c:04:65:75:64:4f:e7:02:2a:ed:ae:
                    62:03:48:60:58:de:5a:c3:99:21:38:31:a9:9e:bc:
                    09:41:1a:8e:73:59:a8:8e:c0:e4:fc:70:16:1f:2f:
                    68:09:d8:1f:85:49:bc:db:10:8a:91:2e:b5:6f:78:
                    15:b3:e5:03:09:7d:9d:52:12:dd:2b:b2:58:93:92:
                    49:68:c4:21:8c:5a:01:ea:10:cd:f4:ff:46:89:29:
                    c0:e6:12:ad:4a:0a:d9:c9:1d:c9:30:cf:20:18:40:
                    19:2b:10:23:a0:de:09:37:92:84:48:92:0a:84:7d:
                    f7:86:1e:6f:b7:2b:d6:a6:e7:9c:f4:45:a6:bf:0f:
                    e6:ab:6a:a8:b1:88:1c:69:22:fa:8a:bf:ff:ac:86:
                    bf:18:47:d7:ee:51:c2:b0:02:bc:3d:ba:4b:22:29:
                    d7:5f:26:85:dc:47:7f:b0:cb:46:be:05:a8:09:4d:
                    0c:6c:be:8a:d7:f2:02:17:1c:4f:67:4d:53:3e:2f:
                    bd:61:6a:7f:70:f8:65:d4:8f:13:bd:a3:72:31:7d:
                    a6:e5:b6:06:2c:5a:31:46:78:aa:a2:8d:b3:3f:1f:
                    85:7c:22:bc:9d:38:a7:f3:b4:31:8d:4f:d3:e3:35:
                    46:05:2f:90:78:ea:e3:ba:b5:5c:63:fb:a5:49:b1:
                    e4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E7:8C:6A:B2:9E:BF:F5:54:66:56:86:F3:59:1C:02:66:F5:71:C5
            X509v3 Authority Key Identifier:
                keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:30:b0:ed:38:ec:d2:0a:6a:ac:66:b5:10:5d:5f:bc:ad:71:
         a0:0c:d8:b8:f4:ef:1b:02:fa:c4:b9:dc:1e:33:92:c5:04:7e:
         08:14:af:71:43:27:09:a1:4e:8f:de:b6:e6:e2:2f:6e:51:04:
         3a:7d:83:c9:d1:8c:85:49:ec:ee:13:b3:49:b4:ba:94:e0:02:
         fe:9b:3a:dd:a5:5b:b3:5b:e7:12:11:45:97:4f:40:8d:47:a0:
         36:56:d3:24:39:18:0a:68:1f:37:a3:05:29:8a:e3:e9:e7:ee:
         a0:56:3b:b9:49:81:58:5c:ae:7f:0e:2a:8a:df:de:82:01:fa:
         df:28:f5:b1:6c:bc:7a:cd:90:8e:94:aa:1b:0e:aa:ff:95:00:
         73:ed:5c:3d:b8:dd:39:b5:64:82:e6:e5:99:fa:5f:d3:64:cf:
         7a:80:fc:69:ed:2a:45:ca:93:7e:93:be:36:e8:48:bf:b8:3f:
         ea:a2:a1:80:65:12:a7:8f:cc:00:3a:32:0d:30:09:b5:d2:49:
         71:5c:b8:e4:8f:92:01:f9:68:77:73:91:1d:de:af:f6:72:dd:
         ca:d2:aa:eb:24:ce:e8:b5:4e:36:15:dd:cc:c5:30:51:c8:ac:
         ca:2c:00:00:b0:65:5e:ab:a7:c3:66:d2:62:3a:cf:41:cd:01:
         92:39:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:42 2026 by rpki-client