Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/3130332e3231352e31332e302f32342d3234203d3e203634303332.roa
File:                     3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (raw, json)
Hash identifier:          jbs2GDDsgo2med8aBN6Q/a3OTj8U5cq+mFVfdUXlcps=
Subject key identifier:   59:C7:9F:E5:F7:62:BD:B2:48:9C:DC:0D:63:A8:8F:75:60:28:A5:76
Certificate issuer:       /CN=D225946751D641016A8BDC8983AB89443F4481EE
Certificate serial:       683CA7E6746253D3845697CAC20D070980F35CB2
Authority key identifier: D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/3130332e3231352e31332e302f32342d3234203d3e203634303332.roa
Signing time:             Sun 03 May 2026 03:04:53 +0000
ROA not before:           Sun 03 May 2026 02:59:53 +0000
ROA not after:            Sun 02 May 2027 03:04:53 +0000
asID:                     64032
IP address blocks:        103.215.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl
                          rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3c:a7:e6:74:62:53:d3:84:56:97:ca:c2:0d:07:09:80:f3:5c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D225946751D641016A8BDC8983AB89443F4481EE
        Validity
            Not Before: May  3 02:59:53 2026 GMT
            Not After : May  2 03:04:53 2027 GMT
        Subject: CN=59C79FE5F762BDB2489CDC0D63A88F756028A576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ec:8a:3a:1b:44:a0:63:32:36:e4:8a:e9:f7:
                    b7:5d:fe:f1:80:2f:66:5f:56:7f:cd:ab:e8:b2:0f:
                    50:80:cc:12:71:30:b0:65:9a:16:49:af:14:2c:bc:
                    63:df:55:25:96:96:43:ca:08:43:50:f1:3b:85:07:
                    5e:dd:31:d4:01:a1:a4:82:34:d7:3a:a6:75:ca:73:
                    85:39:e2:f6:74:eb:5c:55:0f:a7:46:90:25:3e:71:
                    d5:1b:7e:4b:e1:44:a7:98:51:65:5a:b0:e8:68:8a:
                    66:b8:4f:96:ce:0f:05:f5:79:47:d5:11:a4:b7:b7:
                    31:b7:8f:f7:1a:7d:ee:a8:82:40:8b:e5:c6:b3:6b:
                    95:35:49:e4:87:fa:78:3d:8e:24:4b:f8:c5:21:b8:
                    04:f7:7a:02:02:a5:43:4f:9f:8d:37:2f:4d:5a:40:
                    45:cb:e9:69:e6:e5:06:9a:ad:89:55:57:cb:c1:3d:
                    c4:13:7e:38:0a:5e:72:8d:73:6d:9f:92:82:40:1b:
                    b6:01:21:6a:89:c1:78:db:08:f5:3b:8a:bd:47:f9:
                    a9:be:d8:71:71:9f:d3:f7:00:7b:d6:04:8a:1f:7c:
                    18:c9:6d:dc:fe:4d:a0:77:7e:37:7e:da:03:8b:d2:
                    4b:2d:63:72:bc:40:f3:83:a5:da:ed:58:66:a2:00:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C7:9F:E5:F7:62:BD:B2:48:9C:DC:0D:63:A8:8F:75:60:28:A5:76
            X509v3 Authority Key Identifier:
                keyid:D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/3130332e3231352e31332e302f32342d3234203d3e203634303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:cf:54:14:7b:af:e4:16:4a:9b:b0:8a:c0:e4:11:19:95:e0:
         f5:ae:52:bd:48:f6:d0:17:be:bd:0e:42:50:2c:9e:1c:96:9a:
         95:4a:f6:a5:36:df:c1:22:bd:9a:da:87:a8:f9:d5:14:de:4f:
         92:7d:a1:d5:d4:8c:a6:c1:d7:9f:a1:6f:62:e7:f4:1d:46:0f:
         5f:69:29:72:83:0a:9b:09:78:2b:cc:f0:2b:db:41:35:11:d1:
         40:cf:f2:d6:d0:08:e0:96:af:c3:9f:dc:97:60:8d:f7:1a:1e:
         e0:94:7b:d6:a9:ff:d0:a2:a2:3e:f6:b2:7b:56:9d:07:7a:fe:
         67:a9:af:6e:ab:fd:11:6f:5a:29:07:d7:69:d3:0a:83:1c:09:
         14:89:75:be:00:c7:61:c5:67:57:5d:58:8e:bd:8d:6f:b6:9f:
         ca:e0:cd:7b:8a:7c:8a:2b:c3:96:85:65:22:3a:ee:97:c0:4d:
         0f:07:bc:2b:76:31:99:94:b6:fa:d2:be:ea:f8:f3:24:66:07:
         0a:ea:79:3a:2c:a4:90:77:01:88:a5:da:b9:e3:12:63:61:50:
         d3:f3:5c:bc:03:08:3e:59:8c:6f:44:68:f5:36:9b:60:8d:50:
         19:bb:9e:50:79:8b:af:44:fa:e3:e1:da:e0:c1:d5:22:bd:fc:
         49:4c:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:55:43 2026 by rpki-client