Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa
File:                     3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (raw, json)
Hash identifier:          I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=
Subject key identifier:   15:E5:B9:C9:04:79:2F:F7:0A:8F:00:89:33:A8:8A:42:4F:18:62:73
Certificate issuer:       /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial:       68C0A969D38B7C2B708AEFB0BE36F4ED50BD1A64
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa
Signing time:             Sun 03 May 2026 02:59:37 +0000
ROA not before:           Sun 03 May 2026 02:54:37 +0000
ROA not after:            Sun 02 May 2027 02:59:37 +0000
asID:                     55666
IP address blocks:        103.17.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
                          rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c0:a9:69:d3:8b:7c:2b:70:8a:ef:b0:be:36:f4:ed:50:bd:1a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
        Validity
            Not Before: May  3 02:54:37 2026 GMT
            Not After : May  2 02:59:37 2027 GMT
        Subject: CN=15E5B9C904792FF70A8F008933A88A424F186273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:60:9f:95:a5:ae:96:1e:76:43:fc:bb:6a:
                    d9:3c:3a:75:52:35:95:82:25:1a:7f:00:22:7f:8f:
                    09:5f:a0:5f:f0:5c:50:63:ed:78:4e:ff:c0:7f:ea:
                    7c:ac:2d:f7:8f:3a:a0:e4:86:75:7a:c6:fa:b8:7f:
                    4e:df:1b:c3:9c:94:39:16:1e:54:e7:34:65:cf:bf:
                    1c:35:6c:fd:5d:e5:d3:0d:97:65:68:b3:ae:36:39:
                    d9:13:f2:1b:ad:6a:d4:61:bc:86:3b:8b:4a:fe:f0:
                    5a:0f:0d:35:bc:69:f3:80:31:43:ad:81:d6:85:1f:
                    8f:ce:c6:b5:8b:eb:e6:d3:79:e2:c4:de:ed:56:f7:
                    42:58:f2:b3:6f:34:cb:f0:2b:40:1e:4c:ee:37:b3:
                    be:24:18:61:6e:d5:4c:77:9e:98:ff:1e:c9:a6:8c:
                    36:e8:6a:7e:b5:b3:26:0f:06:f4:7a:a7:6e:5d:8a:
                    32:54:b2:d9:09:0f:b7:6b:eb:f0:3c:51:d7:51:cd:
                    4c:7e:07:76:a3:9f:87:9c:c2:1f:94:b8:98:c3:a4:
                    83:23:fd:3a:fa:96:31:cc:f2:98:c0:b0:54:42:40:
                    4c:29:b0:c3:68:f5:78:33:ec:7f:8b:4b:c9:18:23:
                    a4:ae:e2:fd:8b:89:8b:4b:af:df:15:d2:c5:a1:eb:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:B9:C9:04:79:2F:F7:0A:8F:00:89:33:A8:8A:42:4F:18:62:73
            X509v3 Authority Key Identifier:
                keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:92:68:37:47:fa:94:b7:05:5f:f1:8b:07:9f:2b:50:92:c9:
         09:38:c4:c8:39:89:95:23:b2:72:b3:27:f4:08:4e:9e:f5:e9:
         ac:7f:2e:05:d9:a9:5f:da:3e:3b:8b:a3:32:f8:24:bb:b8:e8:
         e3:51:ce:a2:07:bc:a3:5b:2c:fd:de:0b:7b:6d:4b:8e:39:4b:
         07:95:b3:dd:0d:7b:7e:64:db:48:f7:b4:c1:20:ee:3a:75:a2:
         fa:1c:52:74:b7:d2:35:89:ce:dc:58:4f:8b:34:91:33:81:4d:
         9f:08:9e:fd:4e:da:0e:a2:0f:f9:fa:b3:7f:a9:b9:ff:ca:b3:
         84:a9:8f:36:54:73:0f:cc:ba:e1:99:9e:63:cd:3f:00:4d:87:
         23:86:89:e8:d8:d6:63:ab:52:83:bf:9e:f1:b6:94:b1:2f:a6:
         84:dd:cd:7c:8b:d5:55:4c:0c:f2:f9:42:c1:d5:5a:0f:09:30:
         02:f6:71:02:b3:01:de:42:65:c5:8f:0a:ab:6b:41:cd:50:57:
         ad:b7:cd:31:e8:0d:50:ca:a0:dc:f7:db:1b:ff:13:ab:80:e0:
         34:62:65:b4:87:8a:ee:5e:9b:c4:15:2b:c3:bf:c9:81:5f:e7:
         67:91:24:fc:e6:d3:ac:f3:76:63:a9:fb:7f:e8:78:b9:2e:65:
         40:5c:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:38 2026 by rpki-client