Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa
File:                     3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (raw, json)
Hash identifier:          uK0BRaW/xJFX4xoOs5c+Wr7pOkzcDPXliVBiSDQWuQY=
Subject key identifier:   11:A7:F9:F4:34:E1:C4:E3:7F:9E:3F:3A:F0:6C:FE:7E:69:1D:1D:81
Certificate issuer:       /CN=914D306354D2880E2D8000A84096A7D0FD93DB6F
Certificate serial:       0482E590B7BC10322CDE2DA8DBAE3930C5DA4F75
Authority key identifier: 91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa
Signing time:             Sun 03 May 2026 02:59:39 +0000
ROA not before:           Sun 03 May 2026 02:54:39 +0000
ROA not after:            Sun 02 May 2027 02:59:39 +0000
asID:                     151577
IP address blocks:        103.76.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl
                          rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:82:e5:90:b7:bc:10:32:2c:de:2d:a8:db:ae:39:30:c5:da:4f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914D306354D2880E2D8000A84096A7D0FD93DB6F
        Validity
            Not Before: May  3 02:54:39 2026 GMT
            Not After : May  2 02:59:39 2027 GMT
        Subject: CN=11A7F9F434E1C4E37F9E3F3AF06CFE7E691D1D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:ea:68:f1:88:d7:76:ba:8e:0b:36:b7:a3:
                    83:4f:95:70:f8:78:20:5c:7f:12:35:eb:f4:f9:d4:
                    10:61:2e:1d:45:58:5d:00:82:07:16:e5:0c:20:df:
                    bd:ba:56:a2:6a:e9:8b:47:c9:e0:80:a1:9f:6c:ae:
                    ea:c4:b6:05:48:ad:2d:cf:17:5b:b2:6d:71:d3:58:
                    d9:8b:16:33:3a:93:4d:dd:01:8c:c4:c6:9f:2c:cc:
                    dc:09:77:49:b1:7c:6b:ba:ea:ff:a8:c9:84:82:14:
                    f9:ef:e2:68:bd:b6:56:32:2b:de:56:a4:b0:dd:37:
                    c0:df:c8:20:42:b8:79:6c:56:57:da:42:97:8b:fb:
                    d9:cd:3f:35:5f:ca:de:1b:3f:8c:8c:3c:f5:fc:0d:
                    06:98:30:23:74:99:2b:8b:23:8c:0b:48:20:2f:91:
                    06:b0:61:a4:53:7c:ff:9d:97:da:32:20:91:8a:ee:
                    64:f7:f3:e3:0b:8a:10:a5:cf:61:29:53:4d:35:96:
                    36:8d:4f:78:07:26:b6:d8:86:56:40:f3:aa:68:dc:
                    58:55:67:ed:b0:7b:2d:0f:6e:bc:41:be:4b:6c:c5:
                    9d:1a:1f:f6:6a:e0:fa:a0:c7:97:51:0b:ae:49:76:
                    29:81:26:b2:3a:19:c8:a9:3f:73:9b:29:ac:9b:8b:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A7:F9:F4:34:E1:C4:E3:7F:9E:3F:3A:F0:6C:FE:7E:69:1D:1D:81
            X509v3 Authority Key Identifier:
                keyid:91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:2d:7d:d3:27:1f:7a:3f:d7:e5:7a:ab:2b:15:21:cd:f7:37:
         1d:2f:f7:b1:74:22:2b:21:92:d2:01:c3:bf:ea:85:46:db:02:
         fc:5a:bd:2e:35:ec:6a:08:51:d3:a6:b8:3a:b4:c2:b6:6b:9f:
         db:4c:43:be:46:9d:19:f7:4b:2c:29:c0:73:e2:0e:03:df:5e:
         d1:df:11:5b:04:18:a1:52:34:e5:8c:f6:c9:41:06:75:87:18:
         67:59:bd:8a:80:54:ac:35:47:22:40:ec:02:ef:34:a8:7a:ff:
         ec:5b:7b:56:47:6c:1d:e4:b9:c3:d6:e2:23:07:8b:af:5d:1e:
         ea:00:83:ae:0b:67:4c:90:c4:72:4a:39:f5:fd:54:8f:1d:d9:
         46:4f:c0:a4:46:7b:eb:cf:a9:7d:e0:0b:e3:3f:8d:5d:97:0c:
         74:ba:85:f2:34:cf:6a:7e:00:23:6d:8d:6b:0b:82:8b:76:e4:
         96:8d:12:5c:8d:75:94:12:e5:ef:1a:8c:fb:d4:96:a5:b2:d3:
         8d:46:ec:21:fd:bf:fd:bb:5c:c3:5d:c8:23:ee:73:c3:67:5f:
         c6:d1:b4:33:2c:e3:a3:99:7a:20:85:27:99:98:9e:ed:af:b9:
         5e:68:e6:a6:a9:72:42:0b:cc:26:86:2c:68:4c:ad:a1:11:1e:
         86:c4:3d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:37 2026 by rpki-client