Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35352e302f32342d3234203d3e203436303233.roa
File:                     3130332e37352e35352e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          C5clxgUYP9XHGfKX/9C3tvM41BGIrTvX3FcxM91X8hs=
Subject key identifier:   13:3B:C7:42:6A:A9:4D:8B:02:DC:12:90:3D:E5:86:11:46:A1:74:D7
Certificate issuer:       /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
Certificate serial:       77B784910B43A02E0DAEE1E6F8775D868EF345B4
Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35352e302f32342d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:01:36 +0000
ROA not before:           Sun 03 May 2026 02:56:36 +0000
ROA not after:            Sun 02 May 2027 03:01:36 +0000
asID:                     46023
IP address blocks:        103.75.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl
                          rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b7:84:91:0b:43:a0:2e:0d:ae:e1:e6:f8:77:5d:86:8e:f3:45:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA
        Validity
            Not Before: May  3 02:56:36 2026 GMT
            Not After : May  2 03:01:36 2027 GMT
        Subject: CN=133BC7426AA94D8B02DC12903DE5861146A174D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:dc:a2:a1:23:c3:a1:2f:a7:6a:65:96:13:
                    51:69:25:00:42:df:8d:7b:1b:46:e4:30:cb:d9:80:
                    b1:65:ca:f3:08:ef:df:94:cf:90:6b:24:81:88:65:
                    74:93:8c:64:a0:bd:4e:41:58:5c:29:43:f2:e0:2f:
                    5c:d4:8f:6c:4a:5b:46:40:f6:c1:44:ed:86:6a:42:
                    6f:f6:19:1e:db:92:b4:5d:e9:45:69:a4:09:6b:55:
                    2c:1b:43:07:7e:ab:78:8a:8e:fc:34:69:3c:f5:9f:
                    8d:89:24:a4:16:1c:61:49:be:51:37:51:c2:e8:62:
                    9f:e9:ce:0c:63:93:d9:df:84:f6:ee:b6:2e:f7:2a:
                    c0:07:a2:88:d9:20:12:64:68:53:1c:dd:43:11:d1:
                    b6:e9:e3:85:8a:28:9c:41:af:64:1b:d2:72:6a:98:
                    3d:88:b9:79:b1:53:c9:b9:87:e7:ff:92:8e:14:f1:
                    60:ff:ba:39:45:c8:e0:58:bc:00:43:c2:bc:7c:2f:
                    aa:de:15:d2:3b:c0:a8:dc:c0:d7:b2:ec:0d:07:a2:
                    22:9f:b1:7a:d7:57:ee:c9:d3:19:a1:89:42:44:74:
                    15:0b:03:71:9c:d2:9c:07:61:6d:47:e3:90:1a:00:
                    66:cf:27:07:68:67:df:0f:4a:4b:b3:23:ef:d5:ec:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3B:C7:42:6A:A9:4D:8B:02:DC:12:90:3D:E5:86:11:46:A1:74:D7
            X509v3 Authority Key Identifier:
                keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35352e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:07:d7:de:f4:9a:94:98:f1:bc:6d:4b:61:1a:cd:a4:99:18:
         b0:54:05:e1:f7:0d:9c:6f:d3:90:04:9c:f6:e9:31:b1:94:2a:
         5c:a3:fb:1b:41:9b:60:f1:ad:a4:f2:ac:c9:81:24:83:b4:67:
         cd:76:5a:3c:32:52:1e:d4:5e:cb:09:0a:78:8f:3e:b6:5d:88:
         38:59:f0:71:4b:e0:34:d6:cc:11:58:a7:85:f1:46:75:0a:d3:
         5f:1b:d6:8d:29:8d:c7:fa:60:50:2f:8f:d8:d8:00:55:b1:4b:
         11:e8:66:7e:b5:4e:12:5f:aa:3b:83:c8:9f:8f:22:11:5a:85:
         db:61:c7:fa:d6:4b:bc:23:a2:bd:53:3e:f2:18:67:a7:09:cb:
         b7:93:aa:74:62:ee:5b:95:1b:a0:71:61:dc:68:23:4d:90:a7:
         b7:9a:70:3d:0e:6f:6f:e6:a5:51:34:e8:49:0f:39:52:3b:34:
         a4:f1:c9:4b:7b:94:a0:0d:f7:99:59:21:8a:c6:5c:29:15:17:
         5e:72:5a:a1:03:f3:1e:d6:5b:8d:6d:83:1f:7b:05:10:c8:dd:
         ce:c9:8e:30:c7:87:02:42:a1:0b:20:19:b3:5f:43:e4:5b:b1:
         f1:75:02:6b:84:70:3d:e4:f1:a6:9f:53:b4:15:fe:b3:d5:89:
         ef:54:ca:31
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUd7eEkQtDoC4NruHm+Hddho7zRbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZG
QjE2N0NDQTAeFw0yNjA1MDMwMjU2MzZaFw0yNzA1MDIwMzAxMzZaMDMxMTAvBgNV
BAMTKDEzM0JDNzQyNkFBOTREOEIwMkRDMTI5MDNERTU4NjExNDZBMTc0RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCba9yioSPDoS+namWWE1FpJQBC
3417G0bkMMvZgLFlyvMI79+Uz5BrJIGIZXSTjGSgvU5BWFwpQ/LgL1zUj2xKW0ZA
9sFE7YZqQm/2GR7bkrRd6UVppAlrVSwbQwd+q3iKjvw0aTz1n42JJKQWHGFJvlE3
UcLoYp/pzgxjk9nfhPbuti73KsAHoojZIBJkaFMc3UMR0bbp44WKKJxBr2Qb0nJq
mD2IuXmxU8m5h+f/ko4U8WD/ujlFyOBYvABDwrx8L6reFdI7wKjcwNey7A0HoiKf
sXrXV+7J0xmhiUJEdBULA3Gc0pwHYW1H45AaAGbPJwdoZ98PSkuzI+/V7Oo/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUEzvHQmqpTYsC3BKQPeWGEUahdNcwHwYDVR0j
BBgwFoAU7Y3XRHw3YYE5brYsdZpvJvsWfMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjZlNTA0YzUtZDdiYS00ZmU5LTllNTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3
QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZGQjE2N0NDQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRDhERDc0NDdDMzc2MTgxMzk2RUI2MkM3NTlBNkYyNkZCMTY3
Q0NBLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I2ZTUwNGM1LWQ3YmEtNGZlOS05
ZTU2LTc5MmRjMDFhOTdjYi8wLzMxMzAzMzJlMzczNTJlMzUzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzYzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnSzcwDQYJKoZIhvcN
AQELBQADggEBAMUH1970mpSY8bxtS2EazaSZGLBUBeH3DZxv05AEnPbpMbGUKlyj
+xtBm2DxraTyrMmBJIO0Z812WjwyUh7UXssJCniPPrZdiDhZ8HFL4DTWzBFYp4Xx
RnUK018b1o0pjcf6YFAvj9jYAFWxSxHoZn61ThJfqjuDyJ+PIhFahdthx/rWS7wj
or1TPvIYZ6cJy7eTqnRi7luVG6BxYdxoI02Qp7eacD0Ob2/mpVE06EkPOVI7NKTx
yUt7lKAN95lZIYrGXCkVF15yWqED8x7WW41tgx97BRDI3c7JjjDHhwJCoQsgGbNf
Q+RbsfF1AmuEcD3k8aafU7QV/rPVie9UyjE=
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:05 2026 by rpki-client