Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31342e34342e302f32342d3234203d3e203435333132.roa
File:                     3130332e31342e34342e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          hW7TNWs1mGdEApM2CLxPuOjeCzaPIctjIOeQqh9605U=
Subject key identifier:   D1:1F:8E:13:46:3D:A4:E5:4B:F4:0F:DC:E0:69:37:F4:2E:8E:F2:98
Certificate issuer:       /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial:       6C46FF276260EB2E552E28DD516B2F342A9E748C
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31342e34342e302f32342d3234203d3e203435333132.roa
Signing time:             Sun 03 May 2026 03:05:23 +0000
ROA not before:           Sun 03 May 2026 03:00:23 +0000
ROA not after:            Sun 02 May 2027 03:05:23 +0000
asID:                     45312
IP address blocks:        103.14.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
                          rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:46:ff:27:62:60:eb:2e:55:2e:28:dd:51:6b:2f:34:2a:9e:74:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
        Validity
            Not Before: May  3 03:00:23 2026 GMT
            Not After : May  2 03:05:23 2027 GMT
        Subject: CN=D11F8E13463DA4E54BF40FDCE06937F42E8EF298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:b7:c3:c8:3c:ec:6c:fc:d8:1a:c2:24:c4:
                    97:51:d0:95:67:f4:42:14:49:f3:47:a8:9d:d5:f9:
                    c3:e9:81:66:e3:c5:2d:6c:f8:06:93:ee:76:d8:f8:
                    af:9e:94:cd:76:d2:2e:3e:8a:26:65:f4:3a:d6:dd:
                    98:9d:d9:7e:20:12:cc:78:d8:03:fa:b8:a3:7e:29:
                    01:01:bc:b4:49:13:05:8c:cc:94:5f:fb:3a:07:00:
                    89:f8:24:59:ba:c1:65:67:b0:11:a3:2a:18:3d:b2:
                    18:12:4b:2b:4e:d9:32:27:b2:38:e0:00:99:00:13:
                    8f:c3:10:b9:ac:74:0e:2c:75:b0:eb:ab:26:4d:6e:
                    48:51:02:7e:12:e9:d0:45:13:7d:04:69:ae:65:d0:
                    07:db:80:8f:37:8d:04:9f:91:0d:3f:a8:3d:57:2e:
                    d8:b1:86:98:01:f1:dd:91:cb:af:12:3e:af:0c:a0:
                    88:58:31:ef:ac:a0:c8:56:e1:92:79:9f:39:93:e9:
                    57:d7:51:a8:b1:c3:9f:10:58:3e:bc:0a:f1:ad:63:
                    53:e0:85:63:70:05:fb:15:16:1c:8e:97:f8:e4:f3:
                    ca:96:16:eb:bf:d6:50:6a:3f:2d:0b:8e:0c:a1:06:
                    bb:e7:85:a3:d6:83:76:bc:b0:46:a9:92:13:01:35:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1F:8E:13:46:3D:A4:E5:4B:F4:0F:DC:E0:69:37:F4:2E:8E:F2:98
            X509v3 Authority Key Identifier:
                keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31342e34342e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:19:2c:65:c8:5b:3d:8a:40:d5:65:da:16:38:5b:1d:0a:0b:
         2f:b2:4c:d8:56:9a:a3:dc:0b:aa:e4:fb:5c:33:c3:24:d1:f2:
         b0:2f:9a:93:5d:47:3f:aa:b0:0d:57:68:57:bf:a1:7e:e1:53:
         7a:57:a0:f3:d5:04:b2:06:0b:06:23:e8:d7:06:92:74:f3:54:
         c4:c1:06:81:0b:84:6f:48:cf:b3:1d:bb:7f:8b:9a:e5:5d:db:
         ad:e1:71:b8:b2:3a:4c:78:34:c9:55:80:9c:5b:27:85:3d:89:
         b6:dd:7e:b0:d5:b6:ef:fd:20:b7:c3:3d:a8:30:79:94:19:11:
         51:8d:88:e4:af:4f:30:86:68:f9:22:f9:6b:0f:a9:e0:b0:0b:
         99:0c:61:b0:7b:58:58:fc:ea:12:43:cf:b4:7f:00:8c:3e:b2:
         69:5b:fc:a1:7a:a6:20:f2:a1:fe:b4:4b:65:f7:26:54:86:7c:
         2b:63:5b:f4:7a:bb:52:9f:bf:9d:f7:d9:ea:48:83:8a:26:b0:
         03:11:51:d8:d9:c5:7f:8b:d9:0a:58:91:84:9a:ac:bc:9c:88:
         77:99:61:b3:4e:5a:28:24:4b:a2:f7:e4:19:bc:d6:02:e2:d8:
         8f:1c:22:02:38:bb:4c:f2:9d:aa:50:22:f4:12:65:0b:18:db:
         92:76:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:52 2026 by rpki-client