Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa
File:                     3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (raw, json)
Hash identifier:          nkkFu7O3K8B/AyuvsEsau+DSlTgImFo/RgKno+4L8tw=
Subject key identifier:   5C:AE:C7:46:CA:20:64:E4:B5:06:0D:C6:DD:36:BE:17:15:01:9D:DC
Certificate issuer:       /CN=C7B88124E27943001DCBEF12B94411DF803E6864
Certificate serial:       7880F6715492121C497FCE874C502E83A7F2BB44
Authority key identifier: C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa
Signing time:             Sun 03 May 2026 03:00:38 +0000
ROA not before:           Sun 03 May 2026 02:55:38 +0000
ROA not after:            Sun 02 May 2027 03:00:38 +0000
asID:                     139415
IP address blocks:        103.143.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl
                          rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:80:f6:71:54:92:12:1c:49:7f:ce:87:4c:50:2e:83:a7:f2:bb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7B88124E27943001DCBEF12B94411DF803E6864
        Validity
            Not Before: May  3 02:55:38 2026 GMT
            Not After : May  2 03:00:38 2027 GMT
        Subject: CN=5CAEC746CA2064E4B5060DC6DD36BE1715019DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:4e:a7:fa:9b:01:c7:d4:62:17:7e:f3:c4:
                    f5:85:fa:2d:d5:d7:b1:20:ce:0e:f6:19:4c:a6:fa:
                    97:31:8d:cf:c8:f7:8a:78:87:4f:fa:b1:bc:b4:f2:
                    bc:01:89:e1:2d:9b:cf:25:9d:c9:c9:a1:66:a5:0e:
                    08:1a:a7:4a:5e:6c:49:cc:4b:dd:cb:ef:e5:14:a2:
                    6b:7b:34:f0:93:4f:bb:e4:88:7f:1d:c6:95:60:50:
                    dc:07:1c:9c:56:bf:97:86:16:9a:33:89:e6:5d:75:
                    d1:ee:59:de:e0:32:a7:6a:c6:9a:9d:d5:b0:8d:e8:
                    d9:16:57:4c:bf:03:72:54:3d:3a:ac:cd:18:53:3c:
                    32:ad:01:1c:de:4a:ca:8d:be:b4:08:a1:39:89:49:
                    05:5a:48:28:63:0c:ad:39:59:5b:54:17:e3:17:79:
                    64:5a:b5:d1:88:92:5c:5f:92:d5:d9:49:8e:9f:e3:
                    23:a1:7f:6c:ec:50:7a:59:fc:b6:6b:af:49:7c:cf:
                    6d:9c:34:67:74:e9:73:c7:2d:68:2b:57:f8:7d:b8:
                    99:4c:88:0c:73:dd:15:25:d5:d5:08:66:6e:59:d1:
                    80:5f:4b:61:30:6e:60:a1:66:b2:50:65:9c:94:44:
                    7e:a1:b0:d0:77:a5:ee:e6:6c:44:39:63:06:20:63:
                    fb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AE:C7:46:CA:20:64:E4:B5:06:0D:C6:DD:36:BE:17:15:01:9D:DC
            X509v3 Authority Key Identifier:
                keyid:C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:12:12:87:b5:83:87:53:b4:fe:8d:5f:35:b6:fb:12:01:16:
         7e:2c:e3:a6:a7:29:55:47:a3:3d:bd:ad:73:48:43:72:bf:6b:
         42:4e:39:dd:d6:73:3c:29:43:f0:e4:21:b8:6b:23:01:7c:02:
         7e:71:b6:9b:c6:06:77:11:88:63:96:7a:75:6e:12:ce:fa:2f:
         e4:f6:ea:13:19:07:45:69:a9:49:45:b9:c6:69:cb:0c:73:19:
         33:97:e1:c0:80:83:9e:bd:6f:9b:04:a6:90:a8:b6:b8:ed:96:
         69:30:8e:cd:83:95:35:93:e0:ec:fc:0a:79:97:77:25:10:cb:
         82:7a:72:1e:81:09:5e:63:96:05:9b:ad:a9:86:4f:4c:17:35:
         16:5e:e1:fa:89:7f:4a:c2:a1:ea:0f:8a:1d:6e:ef:8f:d1:52:
         a4:4c:9f:aa:81:c6:7e:f0:3b:6d:61:8c:e2:59:aa:82:d2:81:
         5d:17:4d:99:45:6b:10:83:77:d7:9b:22:26:8e:47:2d:ca:71:
         5c:6e:44:85:63:ec:6a:7e:b9:cf:41:67:ab:78:02:7e:6a:7b:
         ba:e7:eb:c4:43:33:8b:ef:94:9f:60:d2:c7:c0:12:4f:a0:41:
         be:26:03:87:20:e0:81:dc:6f:32:88:b3:93:fc:b1:a4:e4:fe:
         c8:02:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:10 2026 by rpki-client