Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa
File:                     3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (raw, json)
Hash identifier:          9jew+9sCaLR4uEzM2fOlDSLlwcDUwMl5EIbO/d6WI20=
Subject key identifier:   EC:B3:47:72:11:B7:08:33:FF:56:C8:A8:D9:E0:4A:25:A5:DB:F1:FE
Certificate issuer:       /CN=A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36
Certificate serial:       79BCB485AAC32A9A6371C428EC5D03D89E14B5CF
Authority key identifier: A1:DF:67:76:AD:2D:FE:35:EE:13:69:E0:2E:52:4F:DE:56:AE:EB:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa
Signing time:             Sun 03 May 2026 03:02:11 +0000
ROA not before:           Sun 03 May 2026 02:57:11 +0000
ROA not after:            Sun 02 May 2027 03:02:11 +0000
asID:                     134658
IP address blocks:        103.175.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl
                          rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bc:b4:85:aa:c3:2a:9a:63:71:c4:28:ec:5d:03:d8:9e:14:b5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36
        Validity
            Not Before: May  3 02:57:11 2026 GMT
            Not After : May  2 03:02:11 2027 GMT
        Subject: CN=ECB3477211B70833FF56C8A8D9E04A25A5DBF1FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:78:33:fe:01:31:37:0d:12:83:92:ef:33:
                    c7:7f:2d:15:d6:e4:87:7e:7d:5e:33:cb:aa:03:e0:
                    a0:03:99:0f:43:fa:3a:d7:f3:aa:db:4c:76:e6:97:
                    30:16:47:48:d0:6c:f4:ab:ef:61:1e:d8:2b:ff:e5:
                    df:a4:89:87:81:ea:b9:f4:1f:dc:f6:a4:ed:13:a1:
                    7e:b9:8d:c2:e8:fa:3d:30:fe:d1:08:5b:a5:3d:dc:
                    50:7e:59:fc:e8:0c:29:f6:f4:bb:31:1d:00:2a:90:
                    5f:a9:20:11:13:40:df:2d:ae:4d:c5:1e:bf:05:b9:
                    3b:c0:20:d7:be:23:35:e4:01:bc:6b:fd:ee:55:60:
                    2d:38:9d:af:3d:92:b7:ff:b8:1f:da:5a:dc:0b:1e:
                    29:25:3c:95:cc:cb:b4:35:78:25:14:b2:f2:9c:3c:
                    b3:53:75:ee:c3:06:5f:e6:cf:9f:8e:07:ad:cc:6a:
                    ee:aa:a0:81:92:76:dd:8f:00:16:3d:88:90:e0:01:
                    38:aa:10:f5:67:e4:6e:8c:54:23:7d:81:3a:7c:22:
                    2f:1c:d0:80:ce:e0:35:5c:88:93:5a:4d:a6:cc:6d:
                    89:24:94:ef:7c:95:59:0e:15:1d:2a:47:fb:f8:b6:
                    27:7f:ea:34:d6:1a:2b:aa:ae:2b:12:84:5f:6e:73:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:47:72:11:B7:08:33:FF:56:C8:A8:D9:E0:4A:25:A5:DB:F1:FE
            X509v3 Authority Key Identifier:
                keyid:A1:DF:67:76:AD:2D:FE:35:EE:13:69:E0:2E:52:4F:DE:56:AE:EB:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:a7:61:de:e1:cc:ce:17:95:fa:ff:bb:7e:0f:9b:77:6b:cd:
         12:26:9e:c4:a2:ef:f7:33:9b:96:1a:0b:32:97:a5:0b:50:5c:
         17:f8:4c:0f:1e:5f:1a:39:f4:3c:de:db:ad:c8:72:52:5c:aa:
         fe:78:77:a3:d4:4c:d6:67:8c:22:29:f7:95:c9:5a:45:0f:63:
         09:44:97:6d:90:34:91:a2:c0:f1:1a:22:1f:aa:10:b0:ff:be:
         b3:89:63:d6:b0:3f:b8:4b:0f:31:8e:55:e8:cb:e0:28:26:9f:
         bd:26:b7:15:70:03:c1:2d:85:ae:df:4f:45:6f:38:88:1b:8b:
         f3:f8:9c:b0:b4:1c:42:4c:b7:7d:3f:92:eb:76:ec:66:34:c7:
         8f:8c:06:e9:47:67:ab:91:0e:44:53:72:50:42:e6:44:31:b2:
         5d:3e:cc:86:0f:b9:4b:2d:39:d1:d3:32:55:a8:89:fd:95:3e:
         71:b4:f3:4b:42:84:2f:c8:94:10:81:da:70:4d:6f:ec:95:39:
         e5:4c:6c:f9:bb:0d:01:b5:ec:52:de:b6:89:64:b1:df:ee:5d:
         ea:75:3e:17:d4:62:7f:55:24:c6:ab:fd:e9:59:c0:cc:56:d0:
         71:38:31:56:91:e5:b6:0d:59:c3:6f:cf:ea:37:2e:d8:1c:84:
         67:9c:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:30 2026 by rpki-client