Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa
File:                     3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (raw, json)
Hash identifier:          cdTAWLi8m26n5P7CJT3lqMoZoU5FXrpIaSroPqf5DL0=
Subject key identifier:   FF:F9:0F:0C:C4:BC:4D:13:2A:0F:37:E0:17:F5:AF:5C:52:8E:FE:29
Certificate issuer:       /CN=62201E20A182AFCB9985132733F2FBD1BB09C210
Certificate serial:       28577915EF09D5DC5F6E6C8C547674C8F6F3CDC7
Authority key identifier: 62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa
Signing time:             Sun 03 May 2026 03:02:26 +0000
ROA not before:           Sun 03 May 2026 02:57:26 +0000
ROA not after:            Sun 02 May 2027 03:02:26 +0000
asID:                     142370
IP address blocks:        103.82.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl
                          rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:57:79:15:ef:09:d5:dc:5f:6e:6c:8c:54:76:74:c8:f6:f3:cd:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62201E20A182AFCB9985132733F2FBD1BB09C210
        Validity
            Not Before: May  3 02:57:26 2026 GMT
            Not After : May  2 03:02:26 2027 GMT
        Subject: CN=FFF90F0CC4BC4D132A0F37E017F5AF5C528EFE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:f7:6e:50:ea:ca:62:4a:26:d9:53:1d:ca:
                    a9:ea:3a:dd:31:6f:1f:a4:aa:30:0c:3e:42:2c:87:
                    83:56:8b:b5:38:14:af:e4:e8:63:57:32:d3:87:fe:
                    a7:f6:a4:1f:c5:6c:20:a9:05:f2:e8:aa:62:f1:70:
                    56:83:d2:49:2e:db:57:4d:5d:8d:00:ee:e6:47:c1:
                    e9:dc:f6:47:7e:d2:84:f2:b6:7a:3a:89:43:8c:b4:
                    92:de:93:77:75:b2:28:d1:ea:3d:72:e3:03:94:ef:
                    ba:75:19:0c:9e:a1:f4:a2:3c:bd:2f:53:82:33:09:
                    95:ae:1a:3f:1d:aa:5c:b9:53:d2:8c:ba:27:22:d2:
                    2b:fe:11:31:94:e6:6f:dc:8d:4b:e8:b6:49:0c:11:
                    ad:4b:a4:de:b9:f2:a1:1b:52:87:f7:35:5a:99:9d:
                    2a:c4:12:43:9c:5c:fd:c9:ad:c4:6c:55:0c:97:1e:
                    6e:12:ba:7b:67:4c:00:3b:6c:10:36:1e:a6:8f:52:
                    14:5a:5e:85:a3:68:ec:ea:96:2f:a6:c3:07:81:a8:
                    79:1a:43:1a:48:e7:13:1f:2f:c2:54:ba:54:77:78:
                    26:5d:6d:1b:f6:4f:60:98:a0:ff:a9:82:ad:37:97:
                    86:e4:8b:c1:bd:6b:04:77:f2:91:1d:1c:e8:56:08:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F9:0F:0C:C4:BC:4D:13:2A:0F:37:E0:17:F5:AF:5C:52:8E:FE:29
            X509v3 Authority Key Identifier:
                keyid:62:20:1E:20:A1:82:AF:CB:99:85:13:27:33:F2:FB:D1:BB:09:C2:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/62201E20A182AFCB9985132733F2FBD1BB09C210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62201E20A182AFCB9985132733F2FBD1BB09C210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:1d:8f:09:f1:d4:d0:1e:96:87:b6:9e:75:e0:0f:9b:21:
         7b:c2:07:3f:e8:81:91:6c:a1:9a:23:e0:10:ce:30:21:61:d8:
         6d:33:cf:d8:24:04:02:1d:39:5c:36:5a:24:27:a0:29:bf:20:
         d6:e3:73:03:b9:56:6f:54:f2:22:b9:8f:14:9e:a2:5d:84:8c:
         bf:31:34:dc:fd:a2:68:c8:62:9b:7c:0e:0f:7b:2b:d2:07:8d:
         3b:e3:4c:8d:f7:75:10:49:a4:5a:50:75:14:8d:41:bc:2d:0b:
         9f:d2:c9:03:63:fe:2f:7b:fe:00:16:93:09:f9:9a:33:06:a0:
         39:1e:77:71:f3:a5:58:96:c2:29:3e:de:d3:63:1f:36:37:49:
         ca:ce:b2:90:00:11:cc:7f:2a:3b:76:84:46:9c:2f:69:c0:ce:
         91:b7:8b:0f:7d:eb:66:37:bd:2b:a6:c7:e9:8f:5a:a1:fa:db:
         e2:21:4b:7d:51:a5:25:06:cf:82:8c:52:40:70:f4:5e:58:de:
         63:ab:eb:4f:63:0f:f1:da:b0:52:b7:04:10:c4:18:f7:9c:bf:
         e3:78:18:40:72:d1:a7:dd:3b:25:cc:05:31:5c:86:71:54:6a:
         74:70:10:5f:1d:cf:bb:3e:9d:e8:f1:2f:0b:ce:75:ea:61:8b:
         67:3e:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:21 2026 by rpki-client