Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
File:                     3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (raw, json)
Hash identifier:          7ZieTOqY/KGyiMIehZ/2Tvd324Qe4ByAnaKXnii8UnM=
Subject key identifier:   AC:0D:ED:23:2C:05:6F:C6:B1:39:32:AB:11:53:AE:D5:D8:DE:FB:85
Certificate issuer:       /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39
Certificate serial:       5C0896DE3942B3F43D483CF51D48A09A7CCAD733
Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
Signing time:             Sun 03 May 2026 03:01:35 +0000
ROA not before:           Sun 03 May 2026 02:56:35 +0000
ROA not after:            Sun 02 May 2027 03:01:35 +0000
asID:                     59278
IP address blocks:        103.184.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl
                          rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:08:96:de:39:42:b3:f4:3d:48:3c:f5:1d:48:a0:9a:7c:ca:d7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39
        Validity
            Not Before: May  3 02:56:35 2026 GMT
            Not After : May  2 03:01:35 2027 GMT
        Subject: CN=AC0DED232C056FC6B13932AB1153AED5D8DEFB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:7c:95:80:33:ef:05:77:e8:79:25:cd:56:
                    77:00:d3:00:d6:09:7d:1d:9b:d0:99:a8:c1:a7:7b:
                    41:70:fe:1f:3a:d8:69:cb:7f:89:28:43:3e:3e:61:
                    31:93:f3:b5:58:59:db:64:8c:14:0c:17:df:54:6d:
                    4c:7a:7a:88:75:e2:7d:77:2d:3d:93:ef:ab:c6:c3:
                    3c:32:1b:4d:bb:1f:dd:34:9e:97:ff:83:48:99:99:
                    37:e7:04:be:da:d4:5f:5e:ae:d9:c8:e7:7f:53:18:
                    c0:14:76:93:a4:64:1c:0d:67:a3:b5:27:4f:0a:a1:
                    31:93:2c:bc:3c:4b:d6:9e:85:60:af:d2:f9:1e:64:
                    a5:00:f5:1a:92:77:c8:ab:46:d6:56:f1:91:90:a3:
                    36:ef:16:f5:30:52:49:c0:d6:82:6f:3a:0f:65:8c:
                    d7:b4:b6:f2:40:5c:2e:fa:90:64:d7:61:ed:e0:cf:
                    3c:9d:96:1f:35:60:e8:a1:98:6f:2c:a4:f2:00:1f:
                    38:a2:27:b3:29:c8:b6:0e:5b:e0:2a:c5:8f:27:7f:
                    f9:d5:87:c3:ef:1e:8f:ce:f0:80:7e:8b:c1:d8:70:
                    f6:ea:a0:8c:88:51:a8:74:7d:d7:d3:8b:8a:9d:cd:
                    e4:29:ff:b6:9e:cf:81:f3:b5:d6:4d:64:f0:3b:f8:
                    95:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:ED:23:2C:05:6F:C6:B1:39:32:AB:11:53:AE:D5:D8:DE:FB:85
            X509v3 Authority Key Identifier:
                keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:f5:5a:a6:89:f0:e3:2a:47:a6:12:21:ed:88:9f:41:04:9b:
         60:59:67:63:f4:c1:b1:4e:9e:6b:74:a0:22:af:a5:df:dc:a5:
         9c:9f:0f:d6:b2:62:1e:d4:0e:09:24:df:ba:94:a0:4a:24:4a:
         7f:fc:b9:4f:9c:d3:76:5f:31:b5:37:b5:a3:32:e4:3f:2f:85:
         f7:69:d0:6a:58:9d:b3:19:ab:ca:7d:b7:a5:f3:9f:a0:e9:65:
         0f:70:46:de:9d:f4:8c:61:40:26:2b:af:67:8b:20:7d:71:a9:
         41:c7:d7:8b:cd:f8:d7:d7:5a:c2:30:a9:6a:2f:88:39:b9:ca:
         49:ef:dd:1c:7e:d9:a4:bd:7b:49:cf:7c:89:50:09:7c:dd:75:
         a5:f5:d4:39:f4:a3:61:30:c5:55:77:ff:7a:40:47:f3:32:29:
         b9:8d:e7:1a:6a:91:58:2a:b0:e5:59:20:cc:56:46:1c:a5:c0:
         cc:86:03:ed:ad:b7:83:8a:73:92:a5:79:18:91:5e:c3:62:5b:
         1e:ef:54:ba:b1:12:ad:66:ce:69:e0:76:39:4c:de:34:31:e6:
         af:92:67:7e:85:d7:f8:31:2a:84:0b:df:f1:dc:d6:4c:40:08:
         e3:f5:7c:56:c2:93:2c:a4:7c:e7:f2:94:04:b7:b4:89:7e:9e:
         92:9a:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:50 2026 by rpki-client