Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa
File:                     3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (raw, json)
Hash identifier:          X6m+xeJ0gpaLFRDzspoO6SIub/jpD7DBy+UlBcZmfKs=
Subject key identifier:   5E:C5:DC:64:F3:2F:02:BE:EB:E1:3A:EC:9F:89:2D:C3:0C:71:8C:1A
Certificate issuer:       /CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
Certificate serial:       0604EF8C1E3018B9195326402ECDAABDC4E2D03B
Authority key identifier: 33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa
Signing time:             Sun 03 May 2026 03:01:40 +0000
ROA not before:           Sun 03 May 2026 02:56:40 +0000
ROA not after:            Sun 02 May 2027 03:01:40 +0000
asID:                     17884
IP address blocks:        103.155.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl
                          rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:04:ef:8c:1e:30:18:b9:19:53:26:40:2e:cd:aa:bd:c4:e2:d0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
        Validity
            Not Before: May  3 02:56:40 2026 GMT
            Not After : May  2 03:01:40 2027 GMT
        Subject: CN=5EC5DC64F32F02BEEBE13AEC9F892DC30C718C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:f0:40:b8:6c:e9:5f:9a:27:90:b3:2a:cc:
                    c0:ef:64:56:f1:cb:b2:86:9c:44:b2:a8:ce:fe:93:
                    61:b9:8b:3f:7f:aa:db:0d:43:2b:16:cd:bb:da:74:
                    00:90:f1:39:1f:02:2a:07:35:48:95:9a:8d:50:b1:
                    b2:d2:3d:54:8f:e9:6c:6e:fe:da:9a:0b:ab:ea:5b:
                    3a:52:f3:a9:ce:a2:96:b5:1d:08:9e:53:a4:53:49:
                    c3:92:17:d7:30:7c:7b:e8:e3:8b:02:11:11:e2:30:
                    54:de:3d:ff:29:90:81:61:80:44:78:b7:aa:46:35:
                    9b:45:b4:88:54:70:78:3b:de:b7:d0:6a:34:60:bf:
                    e1:25:50:ea:2b:5c:77:23:da:84:02:be:b8:98:1b:
                    59:cd:b7:2b:ef:1c:c7:f5:7b:5d:9b:bb:f8:f2:77:
                    d3:95:ce:de:78:ad:2a:b0:98:c9:64:cc:f0:06:28:
                    76:31:2a:ca:21:d6:0f:9e:4b:b5:19:26:d5:ff:36:
                    0e:41:47:54:82:80:33:35:3c:02:10:5e:03:9f:35:
                    3f:46:4b:f9:dc:03:7d:68:9f:81:48:f8:d1:67:7f:
                    1f:cc:a8:88:5a:c5:32:1c:5e:7b:d9:2e:63:d9:e7:
                    c5:78:33:90:48:3e:f7:a0:46:cb:5c:28:3c:c2:2a:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C5:DC:64:F3:2F:02:BE:EB:E1:3A:EC:9F:89:2D:C3:0C:71:8C:1A
            X509v3 Authority Key Identifier:
                keyid:33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:9a:46:0e:b6:c1:ce:58:bc:8e:8a:39:1a:7b:3b:17:30:3f:
         2a:eb:b7:90:29:81:89:7e:7e:3b:fb:5c:dd:67:7c:9b:58:85:
         d6:59:29:90:be:19:42:81:18:b1:6c:3f:32:5b:ad:22:b1:84:
         fe:8e:09:b6:58:be:53:df:de:91:27:03:4b:72:79:0f:62:8e:
         85:55:7d:26:36:bf:39:b4:ad:5a:d2:09:56:d0:b1:98:a7:3e:
         53:e1:23:a6:d7:56:d0:73:05:88:44:03:92:c3:7b:5d:4f:f5:
         5d:73:aa:30:89:37:6e:5d:47:75:99:2c:88:94:de:3f:9e:9e:
         92:91:b0:f8:99:f6:88:e7:c4:80:b2:9d:ae:4f:64:de:a2:8e:
         6f:0a:e6:24:93:71:4d:2f:ab:8c:8d:ab:d9:9c:77:0b:3b:b8:
         ce:18:a9:d0:88:e6:77:08:98:07:e2:b2:cf:e3:21:af:a2:60:
         59:21:3f:ae:2d:ee:e7:b9:45:56:db:36:ca:bf:12:52:c6:ac:
         bc:53:84:9a:bb:c9:2b:6c:94:8b:92:df:51:aa:2c:71:3e:4a:
         eb:88:e2:df:df:1a:c1:56:57:29:25:cd:8b:25:eb:00:18:2a:
         35:89:22:ca:50:7e:5d:93:2f:f0:03:ab:00:24:c7:c2:6b:e2:
         99:c2:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:12 2026 by rpki-client