Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32332d3233203d3e20313530323435.roa
File:                     3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (raw, json)
Hash identifier:          7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=
Subject key identifier:   92:AD:AC:7B:36:6A:E9:26:2A:D1:F2:82:F0:51:34:BF:AD:27:3B:3A
Certificate issuer:       /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C
Certificate serial:       751B8F936C5098CA7CA0F6345573624A3651A32D
Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32332d3233203d3e20313530323435.roa
Signing time:             Sun 03 May 2026 03:06:02 +0000
ROA not before:           Sun 03 May 2026 03:01:02 +0000
ROA not after:            Sun 02 May 2027 03:06:02 +0000
asID:                     150245
IP address blocks:        103.23.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl
                          rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1b:8f:93:6c:50:98:ca:7c:a0:f6:34:55:73:62:4a:36:51:a3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C
        Validity
            Not Before: May  3 03:01:02 2026 GMT
            Not After : May  2 03:06:02 2027 GMT
        Subject: CN=92ADAC7B366AE9262AD1F282F05134BFAD273B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:72:37:8c:a2:2c:19:66:4c:f2:45:55:a8:
                    2a:4a:64:ae:2d:9a:a9:b2:c9:ea:25:32:12:c4:97:
                    1a:7c:22:3d:9f:be:98:f9:a7:4e:3a:81:cb:a7:73:
                    82:66:95:38:52:99:98:3c:02:79:92:a9:ec:d7:dc:
                    d0:e6:36:e7:2b:15:c7:8c:3c:e7:1a:0a:51:cb:02:
                    73:ed:e9:69:82:db:66:ba:20:8e:13:6f:18:c3:3e:
                    48:57:30:08:7f:7b:19:3d:37:5b:10:06:1e:f8:58:
                    40:19:6a:ce:ee:5c:87:55:31:91:67:ba:1d:2f:5b:
                    7a:62:b6:f6:45:e6:10:fe:b2:5e:5d:2a:07:76:b8:
                    03:f8:50:55:ff:8b:c2:b3:0d:0d:50:50:4b:2b:d3:
                    df:35:51:0d:f8:e9:7b:3f:91:55:f0:58:d9:19:d7:
                    02:50:56:94:4d:95:46:06:55:a0:35:9f:c2:43:14:
                    ed:27:40:68:8e:5b:c9:57:80:29:27:9e:82:e3:ff:
                    fa:17:62:94:0d:d2:b6:3d:b0:e5:11:af:61:67:49:
                    9e:7a:36:8b:e4:ad:ec:80:94:c8:a4:42:2f:4c:06:
                    c1:35:f9:c4:97:2b:3d:9a:cd:b2:db:34:74:1e:96:
                    a6:be:05:63:18:f4:13:c2:e7:35:88:a2:0c:5e:ab:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AD:AC:7B:36:6A:E9:26:2A:D1:F2:82:F0:51:34:BF:AD:27:3B:3A
            X509v3 Authority Key Identifier:
                keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32332d3233203d3e20313530323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:98:2f:9d:63:4b:e2:a1:c9:d9:9e:d8:3f:3e:73:54:9a:0d:
         c5:5c:b4:b2:39:c5:5a:31:dd:b3:e6:2d:05:66:f7:27:9c:73:
         74:75:b0:0c:08:fb:4e:6f:5a:51:e7:07:a5:b3:cb:8d:46:bf:
         aa:a0:6a:e5:de:f5:fa:95:fe:35:f1:6f:95:0a:f7:b8:f4:ab:
         41:00:33:d2:bb:cf:1c:80:c5:93:38:f6:df:81:58:23:fa:cf:
         a4:a4:c5:b0:ed:29:19:81:98:58:4d:c3:a2:30:04:ca:82:d7:
         00:50:1d:07:1f:aa:71:31:27:d6:1c:b1:fe:62:8b:de:c4:f9:
         3a:5b:d5:d0:ab:5e:be:30:e9:c4:d9:de:7e:4a:88:2f:65:1a:
         0f:a1:41:72:2d:8d:f9:e0:36:28:97:a5:3b:b0:90:d9:57:8d:
         03:e2:a9:5a:31:79:52:6b:35:da:ad:6d:1f:b3:de:24:53:72:
         df:a6:98:ac:86:7d:8c:9f:f6:73:dc:3b:1e:9d:eb:ed:6a:9d:
         9b:0d:d6:af:8f:40:e9:7a:26:3f:7c:b2:19:89:bf:10:6c:c3:
         78:7a:2d:82:a5:09:e0:cf:b8:a1:04:b1:d6:80:63:89:b8:92:
         aa:f2:26:03:a2:49:ef:e1:85:ea:96:8d:3e:58:5a:6c:ba:98:
         1e:0c:30:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:41 2026 by rpki-client