Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa
File:                     3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (raw, json)
Hash identifier:          zgZkOJSYpMwgECdH+bRBUbnyYSMNnazg9GbYpqDCf/E=
Subject key identifier:   0A:33:ED:B7:C1:81:7F:63:16:6C:DC:E0:79:6C:CE:55:E0:57:3D:79
Certificate issuer:       /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F
Certificate serial:       10F7292C2D8FCCECB9BEB2456F6D2847EC9CDBCE
Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa
Signing time:             Sun 03 May 2026 03:01:09 +0000
ROA not before:           Sun 03 May 2026 02:56:09 +0000
ROA not after:            Sun 02 May 2027 03:01:09 +0000
asID:                     136854
IP address blocks:        103.102.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl
                          rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f7:29:2c:2d:8f:cc:ec:b9:be:b2:45:6f:6d:28:47:ec:9c:db:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F
        Validity
            Not Before: May  3 02:56:09 2026 GMT
            Not After : May  2 03:01:09 2027 GMT
        Subject: CN=0A33EDB7C1817F63166CDCE0796CCE55E0573D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:af:25:1d:96:21:a0:09:a6:f3:99:34:82:
                    4e:ec:63:fd:92:12:f6:d6:9f:d4:e2:0e:3a:ce:31:
                    16:4f:2a:d3:f4:57:d6:c8:e5:e3:02:1e:35:e8:22:
                    36:2a:cb:da:a9:33:9b:23:f9:47:b2:f5:8c:f3:b1:
                    f5:2b:6d:85:b6:b9:fc:e1:e1:d9:c4:c7:18:66:df:
                    b4:82:40:fd:ec:18:60:32:85:73:e6:36:2b:b7:fb:
                    87:35:8f:e0:ef:0e:e6:f2:25:d1:9c:be:e7:5d:3e:
                    29:ba:74:ee:e2:da:a6:9c:60:ec:65:ce:0f:42:df:
                    3d:13:a3:fb:c0:01:2a:0e:e7:9e:b1:be:2f:01:2d:
                    59:0a:c4:e6:1c:f9:1f:3c:1e:e5:eb:90:e4:30:96:
                    bc:1e:21:bb:05:d3:05:4a:36:e9:04:f1:21:5b:3a:
                    69:11:22:85:3a:71:f5:83:b9:55:d7:42:88:77:29:
                    1c:c1:5a:66:91:39:df:a8:92:b6:72:4a:09:2c:82:
                    7a:a0:10:c2:11:95:78:76:10:9f:0f:d6:03:6c:3a:
                    e3:26:50:19:57:47:85:2b:d4:c9:fc:44:60:c2:ea:
                    3f:a3:8c:21:80:82:74:fb:87:5f:47:2d:27:73:aa:
                    d0:e7:e2:8b:1f:a9:4a:63:81:1a:de:dd:38:bb:90:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:ED:B7:C1:81:7F:63:16:6C:DC:E0:79:6C:CE:55:E0:57:3D:79
            X509v3 Authority Key Identifier:
                keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:ac:40:14:c9:dc:17:41:ed:b7:04:b6:91:ac:8c:35:f8:
         1d:30:74:62:2f:a7:2d:e4:b6:02:2e:e9:31:13:3b:57:bf:c2:
         34:6d:49:b7:25:9b:71:56:ba:d8:3f:4f:04:bb:00:41:82:a8:
         e0:a0:ae:17:14:02:a6:da:9a:32:c0:99:4f:02:90:86:6c:ec:
         44:c4:c6:5e:3f:55:c9:8f:38:b2:37:38:df:a1:12:bd:ec:fa:
         7a:ad:64:ba:58:e1:63:65:a0:26:99:01:72:a6:67:b3:bd:22:
         c3:3c:02:e6:1a:72:1e:a6:b9:06:4d:bb:3b:a8:9c:92:97:32:
         db:4f:f9:3c:b0:aa:69:d3:ad:5e:0b:89:4e:12:fa:ee:dd:ab:
         3a:f6:3f:0b:d9:31:ce:ce:0d:ba:fd:30:c3:25:b9:3d:2f:0a:
         c1:28:90:f4:ce:48:a1:de:de:bf:5e:eb:3b:e7:82:9c:a4:af:
         78:b2:f8:1e:3d:3f:cb:2b:39:df:0b:51:f6:07:e3:cd:ed:e4:
         59:64:ec:c8:b8:70:ac:db:05:22:11:28:6e:71:77:8b:cd:c8:
         95:95:bf:06:35:d9:bc:08:0a:9a:10:a4:6c:4a:86:cf:79:e1:
         50:0e:a9:39:e4:2e:99:28:19:af:13:71:a6:7b:19:b9:d9:1e:
         cc:ab:86:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:18 2026 by rpki-client