Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32332d3233203d3e203633353031.roa
File:                     3130332e33392e34382e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier:          CeBkRSXwqlM0pNEXkAQs8zEBeMyuQUf4Of0fLbjQYLE=
Subject key identifier:   63:5A:79:06:7F:C7:67:96:20:5F:47:80:38:53:D7:25:02:9F:5F:5A
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       5AB2C760F8758DFD77DF2A11AA73C2C484650834
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32332d3233203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:02 +0000
ROA not before:           Sun 03 May 2026 02:54:02 +0000
ROA not after:            Sun 02 May 2027 02:59:02 +0000
asID:                     63501
IP address blocks:        103.39.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b2:c7:60:f8:75:8d:fd:77:df:2a:11:aa:73:c2:c4:84:65:08:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:02 2026 GMT
            Not After : May  2 02:59:02 2027 GMT
        Subject: CN=635A79067FC76796205F47803853D725029F5F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:f7:e5:c1:63:cd:5f:d6:d8:83:31:9a:be:
                    0b:81:56:da:e5:ba:11:c9:0c:cc:8d:3f:c6:40:2f:
                    99:6d:86:27:76:9d:63:9a:0f:ba:58:55:e6:90:1c:
                    83:33:c8:3c:88:a5:ca:49:d6:f0:ff:51:26:31:11:
                    d7:38:e6:76:25:d0:8f:e4:6c:04:1c:b7:fe:c0:14:
                    97:0a:d7:34:c1:ce:b4:53:73:c4:a6:1d:ab:06:b2:
                    b3:ff:b5:95:1a:ce:4e:7b:2b:84:c6:c9:8a:6f:18:
                    5e:2f:1e:5b:d7:6a:0f:44:06:e3:70:a6:78:25:73:
                    1c:e0:64:36:31:8d:71:a9:07:64:17:3f:83:0c:e0:
                    ef:46:25:08:41:f2:aa:46:c9:3a:5a:51:07:99:f5:
                    43:f0:2f:83:f7:62:38:fc:e5:53:dd:e6:e8:6e:63:
                    66:5e:c0:6a:02:8f:c6:4c:1b:a7:af:ed:a8:80:5e:
                    de:2d:77:63:c4:da:01:c4:2c:b3:94:6d:f1:ac:b6:
                    f3:4c:4d:65:0e:e1:c2:92:40:d2:93:97:71:e2:a7:
                    b9:06:74:67:d1:1c:3c:37:b5:f5:b7:96:46:82:ba:
                    05:46:1f:c9:3c:73:43:f6:3e:6e:a9:f7:57:e7:74:
                    4a:f4:2c:84:03:c1:85:4f:b4:9c:5c:da:c1:a4:8f:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5A:79:06:7F:C7:67:96:20:5F:47:80:38:53:D7:25:02:9F:5F:5A
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32332d3233203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:af:a2:fc:82:c9:56:0d:ff:0c:7e:73:4b:3a:dc:6a:1f:fd:
         be:ed:39:5c:9a:35:c2:83:56:80:53:7f:77:fc:d0:38:5b:b1:
         d4:a4:18:a0:fb:ba:2f:a2:9a:52:ed:7c:b6:34:15:ee:3d:6d:
         55:ae:8a:fa:42:c7:77:71:23:1c:15:b9:75:62:83:c4:19:9c:
         c9:04:ff:e7:33:1e:f0:8f:cd:f3:11:ec:47:b7:a3:c1:f8:46:
         8b:d9:92:2a:ef:e1:25:ff:97:da:52:64:07:01:2a:d6:11:b0:
         a8:0e:65:a2:e8:ce:17:82:e7:86:13:9d:d5:71:ae:76:37:f3:
         f9:c2:2b:74:63:e3:3c:01:6b:47:ed:bb:42:31:c2:5a:1e:06:
         35:3e:05:e4:e8:3a:58:f1:65:44:a0:e7:96:3b:88:4b:3c:3d:
         cf:5c:7b:f6:64:53:32:d8:3a:78:13:8f:60:46:2f:59:49:00:
         9f:84:59:14:41:63:ef:2c:5b:68:d6:5b:41:47:ef:87:13:7c:
         bc:f6:0c:ba:7b:50:7a:6d:29:55:d0:77:c7:de:b7:a2:8d:f4:
         61:10:41:b1:5e:8c:22:d9:1e:9c:00:85:76:5e:b3:15:ad:80:
         b4:60:1e:f1:d8:88:96:98:99:f1:53:9c:8f:33:a2:99:e3:ab:
         d5:6f:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:30 2026 by rpki-client