Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32332d3234203d3e203436303233.roa
File:                     3130332e37352e35342e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier:          oefIxPzlv3TEUPHxjAyLabVndRBzhgACi+FePcVpcT0=
Subject key identifier:   A7:1C:50:20:69:B9:AF:78:B8:CF:E1:53:5E:CC:9C:DC:6D:A1:88:A6
Certificate issuer:       /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
Certificate serial:       7104C33D96967F22FD947A363780AFAE5055307B
Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32332d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:01:38 +0000
ROA not before:           Sun 03 May 2026 02:56:38 +0000
ROA not after:            Sun 02 May 2027 03:01:38 +0000
asID:                     46023
IP address blocks:        103.75.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl
                          rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:04:c3:3d:96:96:7f:22:fd:94:7a:36:37:80:af:ae:50:55:30:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
        Validity
            Not Before: May  3 02:56:38 2026 GMT
            Not After : May  2 03:01:38 2027 GMT
        Subject: CN=A71C502069B9AF78B8CFE1535ECC9CDC6DA188A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:ca:82:18:94:7f:5e:3a:2d:a4:73:9e:2d:
                    d4:69:2d:28:57:1c:ed:21:c1:4d:36:2a:eb:04:d8:
                    e1:6e:83:42:67:70:e5:4e:c6:08:82:6c:95:a3:a6:
                    00:c8:f0:e6:56:55:fe:ce:22:48:5f:36:2b:6e:d8:
                    1f:bd:4e:b0:29:37:68:ea:37:86:86:ff:b3:b4:e6:
                    7f:c6:16:3f:25:d4:be:c7:c8:81:3f:9c:13:49:15:
                    10:e0:55:52:20:0f:ee:3c:fd:1c:19:de:98:e1:3e:
                    4b:a3:6b:06:0b:64:15:79:58:9f:23:82:96:af:37:
                    f9:fb:d5:56:3f:1f:40:ed:55:c9:43:60:76:15:37:
                    fd:db:fd:63:d7:54:3b:9b:f4:8b:58:37:55:e5:a3:
                    9a:52:7b:e2:b4:8d:bd:c6:fd:4a:f3:a2:c8:c5:1d:
                    dd:57:67:d7:eb:80:7c:62:de:89:85:77:aa:f5:6c:
                    22:e9:e7:4e:a8:e8:fe:05:9a:ba:8b:5b:cf:9a:47:
                    4b:fb:19:67:1e:6c:aa:4a:58:a3:67:18:0f:9c:0f:
                    24:51:21:f6:e6:e9:3c:fd:22:4b:0d:c3:33:4a:9d:
                    7b:59:e6:78:16:21:c5:c9:f4:a5:f6:e6:8b:d0:b6:
                    2f:e4:6a:15:13:7b:8d:9b:56:f5:51:e5:5e:a8:c7:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1C:50:20:69:B9:AF:78:B8:CF:E1:53:5E:CC:9C:DC:6D:A1:88:A6
            X509v3 Authority Key Identifier:
                keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32332d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:8f:32:0e:31:da:5b:bf:f6:7e:71:3f:f7:e2:4b:be:68:be:
         7f:fb:71:b4:65:41:73:60:bd:2e:a3:d7:ac:0a:b6:f9:f0:2a:
         b6:c9:a7:dd:3c:16:55:67:49:3d:ac:00:74:1d:06:e5:03:97:
         0e:6a:fa:9e:dd:24:12:08:bb:bc:5b:d8:c0:ce:c4:58:0f:2b:
         02:2b:b0:36:fd:4f:88:bf:8c:db:bc:ba:44:05:2d:61:b1:87:
         38:8c:b1:4c:f5:db:5a:c5:fb:93:da:6a:4b:26:c0:2c:ec:2c:
         8b:df:7f:f1:ff:00:51:62:9f:7f:98:18:98:73:9c:41:25:c4:
         4b:cc:59:81:e7:c2:65:39:b1:c3:51:17:63:51:b0:5f:9c:19:
         75:62:ce:92:49:4f:f7:8f:49:37:3b:ea:71:d3:73:6e:12:f1:
         f3:56:55:f7:b8:72:74:a7:14:87:9b:5f:b5:45:a3:67:89:ad:
         13:f4:9e:2c:25:1f:1a:0f:9c:b9:69:aa:21:f3:e3:7f:62:4b:
         cc:7b:16:63:8d:c1:91:e0:4d:23:ba:29:dc:53:3a:cf:27:32:
         24:73:22:12:f1:95:cd:13:a3:5b:f0:58:c1:32:d0:d3:e4:85:
         5e:41:7c:3e:46:18:c8:3c:70:59:c7:e9:5c:51:92:68:0b:16:
         f0:1e:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:09 2026 by rpki-client