Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa
File:                     3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (raw, json)
Hash identifier:          I0jTp/Lb+KlyYGeSMZScDem+MblcbAhoI37lZDiIvac=
Subject key identifier:   A7:97:C5:0A:E4:21:88:DC:93:64:57:3F:C3:9F:92:68:93:78:4F:6D
Certificate issuer:       /CN=5AE2131384B411127BE4CF7467B12F83CBAD9996
Certificate serial:       439A1D5F26B7D3CEBD0B9B4DFCBE8BE6AE14057C
Authority key identifier: 5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa
Signing time:             Sun 03 May 2026 03:02:27 +0000
ROA not before:           Sun 03 May 2026 02:57:27 +0000
ROA not after:            Sun 02 May 2027 03:02:27 +0000
asID:                     147164
IP address blocks:        103.177.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl
                          rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9a:1d:5f:26:b7:d3:ce:bd:0b:9b:4d:fc:be:8b:e6:ae:14:05:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE2131384B411127BE4CF7467B12F83CBAD9996
        Validity
            Not Before: May  3 02:57:27 2026 GMT
            Not After : May  2 03:02:27 2027 GMT
        Subject: CN=A797C50AE42188DC9364573FC39F926893784F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:46:22:b3:ab:19:09:c4:40:42:85:e7:79:
                    a7:af:5d:15:5e:84:b2:34:48:7f:b9:93:0f:35:f2:
                    f6:b4:e9:14:81:f2:d1:9a:55:ab:e5:f7:1e:80:e5:
                    0c:74:16:c7:dd:3b:82:0d:34:a7:12:d4:11:85:5c:
                    b7:da:51:6b:cb:3c:06:78:16:a4:7f:8c:ae:63:ac:
                    72:b3:f7:19:3d:b3:b4:e4:d6:ad:7c:fb:79:fa:7a:
                    2b:b0:88:15:27:40:d0:bd:ab:04:cc:50:02:b0:dd:
                    72:7a:99:36:13:41:39:34:fa:c0:1a:2b:43:de:6d:
                    d2:b0:e1:7e:b2:09:1a:9d:75:07:93:9a:60:ac:f5:
                    9b:dc:83:5c:03:4f:78:13:2e:05:d0:2c:3e:b9:f0:
                    1b:8b:4f:55:9f:fd:92:3c:5d:76:e7:db:f4:68:de:
                    d1:d3:48:84:6f:e5:4a:e3:d2:44:17:81:d6:18:6d:
                    31:d4:cf:41:16:49:b7:21:9d:99:1f:7e:49:33:fe:
                    e6:d7:71:b0:14:a1:16:31:fa:1b:6e:f6:9a:bd:ac:
                    f6:31:c8:22:00:7c:d7:6b:5b:41:dc:99:e9:6b:32:
                    6f:11:5e:7f:a0:25:c5:25:ed:40:b9:0c:c4:4e:54:
                    d4:46:9d:c7:16:e4:b5:e4:05:a5:d8:38:da:c6:cf:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:97:C5:0A:E4:21:88:DC:93:64:57:3F:C3:9F:92:68:93:78:4F:6D
            X509v3 Authority Key Identifier:
                keyid:5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f4:c1:d1:e3:e8:3e:fb:29:8c:c4:b7:70:56:ec:a4:9e:6d:
         58:13:3a:68:12:73:ee:38:c0:0f:81:ab:f5:e1:27:c0:57:7f:
         25:cd:08:d8:17:51:dd:37:60:a5:74:80:5b:2f:0a:1d:7d:33:
         ee:99:f3:fb:c8:46:56:86:ea:d5:c3:d4:c5:c6:4a:21:41:77:
         eb:c7:f9:97:c7:a9:79:4b:ac:fb:40:f0:50:de:d2:41:68:e8:
         2f:bb:ec:9e:8e:69:ff:c4:73:f1:37:1b:58:45:02:9b:d1:54:
         7d:1c:08:ca:27:ef:c6:44:58:81:05:21:eb:62:d6:a7:a7:45:
         46:4c:7b:82:e8:d4:c6:e9:5b:0e:82:13:ad:99:7e:30:15:1f:
         d1:de:2b:cf:d7:cd:09:75:82:82:dc:e8:74:11:30:bf:6b:8e:
         b2:c3:29:57:91:2c:d5:51:1c:c6:23:fc:48:cc:77:fb:a9:4a:
         e4:b2:f8:da:4c:14:07:55:e9:54:a5:7c:59:b7:18:f4:e2:0f:
         3c:97:cc:d0:4d:21:f5:02:64:6a:af:27:b7:35:0f:60:df:8b:
         ed:42:45:f3:91:c4:7e:e7:d1:ec:0f:3f:22:c6:8b:74:9f:c3:
         69:47:29:bd:12:12:7d:0f:58:dc:92:f7:f2:0b:3a:c5:25:2a:
         83:bf:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:07 2026 by rpki-client