Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa
File:                     3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (raw, json)
Hash identifier:          fQwW9jEUlabh0L2NvQSOViFURIlDH59x+g1CS1ccauI=
Subject key identifier:   DF:7F:78:C6:58:FC:ED:EF:60:3F:62:98:1A:04:45:83:C2:44:BA:F6
Certificate issuer:       /CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718
Certificate serial:       4B012B4E0CC5AFCE0206979B48C69C1CB44A29B0
Authority key identifier: B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa
Signing time:             Sun 03 May 2026 03:03:08 +0000
ROA not before:           Sun 03 May 2026 02:58:08 +0000
ROA not after:            Sun 02 May 2027 03:03:08 +0000
asID:                     149663
IP address blocks:        103.184.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl
                          rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:01:2b:4e:0c:c5:af:ce:02:06:97:9b:48:c6:9c:1c:b4:4a:29:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718
        Validity
            Not Before: May  3 02:58:08 2026 GMT
            Not After : May  2 03:03:08 2027 GMT
        Subject: CN=DF7F78C658FCEDEF603F62981A044583C244BAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:ba:4c:0f:d1:a0:07:1f:e8:0c:af:ab:7d:
                    73:a8:fe:db:b2:da:3a:c2:5a:4e:58:c0:51:1f:24:
                    ad:cb:c8:b2:c7:c5:0a:f5:73:a3:32:a7:3d:d5:64:
                    7c:54:89:b5:2b:64:15:08:2f:1d:ca:ec:cb:cb:cc:
                    59:92:82:2a:d6:9b:b8:81:9d:97:d5:b9:2d:d2:74:
                    20:b8:a9:41:38:b0:c9:3c:17:b7:cc:33:60:a1:57:
                    3f:62:1e:c1:94:a9:6c:b2:48:14:7c:ce:ab:8d:63:
                    81:99:3e:65:cf:bd:26:be:72:37:f4:ef:70:82:f4:
                    23:4a:d2:cd:ac:b6:38:53:77:76:f5:ea:29:c2:b9:
                    4c:32:c1:c3:c2:8b:e7:b7:6d:81:b6:fe:f2:08:bc:
                    07:f9:c8:0a:1f:cc:17:17:6f:54:f9:37:b0:eb:43:
                    5f:36:b3:91:15:eb:b5:00:75:48:cc:2a:f2:b0:8d:
                    fe:a7:f3:54:df:fa:dd:9b:9c:9d:68:aa:f0:c2:7c:
                    6a:ff:60:18:41:2a:5d:b7:3f:0a:68:86:b7:42:93:
                    66:6a:b8:68:60:08:db:ac:ac:ce:03:15:95:ae:b4:
                    1e:1a:0a:02:4b:fd:12:12:98:ed:81:f1:4e:da:a6:
                    2c:a0:99:0c:d3:3e:60:ab:91:14:9f:6d:b3:02:9b:
                    8b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7F:78:C6:58:FC:ED:EF:60:3F:62:98:1A:04:45:83:C2:44:BA:F6
            X509v3 Authority Key Identifier:
                keyid:B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:77:f0:a3:60:d9:bb:25:69:16:34:f5:a9:2e:31:b9:5a:f7:
         c0:d6:bf:1c:5a:25:4b:71:4e:8b:22:42:26:ea:c4:52:67:a9:
         81:e0:7b:ac:2a:a1:9c:f8:07:42:c4:74:99:5f:93:87:0a:a9:
         c0:ae:51:d4:dd:6b:d5:4d:c9:83:db:16:f0:11:ab:20:14:83:
         e9:55:5d:76:c0:39:f9:55:c1:58:d2:47:11:59:58:8d:19:66:
         ab:8a:42:a0:f3:00:24:46:93:16:46:66:36:0b:6d:be:b1:15:
         7d:0b:c9:4b:dc:fd:a6:a0:17:16:04:8c:6f:03:b4:91:0c:c8:
         a5:4b:9b:36:a6:af:a6:e9:f2:6a:ca:c0:2c:36:69:c4:35:ec:
         5c:e3:a3:48:c5:cb:83:25:c6:72:fa:39:c7:81:f1:a5:53:98:
         54:df:34:12:09:35:67:21:4a:ac:cd:55:2f:6a:4e:92:5a:e3:
         5e:b2:4d:df:da:6c:54:be:a6:a3:52:4a:f1:b4:64:e9:30:9e:
         29:ce:56:cf:83:62:04:b4:99:24:c8:47:c3:8a:4e:94:50:a7:
         7c:68:b4:7d:b9:86:63:66:25:ee:17:7a:84:51:2b:86:e6:5b:
         16:96:c8:ae:e7:e1:17:7c:89:28:a5:6d:80:f2:27:5c:2c:cc:
         99:77:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:30 2026 by rpki-client