Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa
File:                     3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (raw, json)
Hash identifier:          /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=
Subject key identifier:   27:C6:0E:ED:36:0D:06:E2:E5:42:3A:F2:8D:08:83:5A:91:CF:EE:60
Certificate issuer:       /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C
Certificate serial:       4D24343D50CDCFF445025E2D3EEAD43E57237705
Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa
Signing time:             Sun 03 May 2026 03:06:02 +0000
ROA not before:           Sun 03 May 2026 03:01:02 +0000
ROA not after:            Sun 02 May 2027 03:06:02 +0000
asID:                     150245
IP address blocks:        103.23.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl
                          rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:24:34:3d:50:cd:cf:f4:45:02:5e:2d:3e:ea:d4:3e:57:23:77:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C
        Validity
            Not Before: May  3 03:01:02 2026 GMT
            Not After : May  2 03:06:02 2027 GMT
        Subject: CN=27C60EED360D06E2E5423AF28D08835A91CFEE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:0c:6f:a8:da:55:be:fd:4d:51:c8:6b:15:
                    93:a8:27:af:46:a5:91:58:f6:c5:f7:9d:55:dc:13:
                    e9:2c:da:eb:43:53:79:88:f4:92:f3:c1:72:6a:fd:
                    99:37:1b:11:45:c4:bd:0d:2d:9f:5a:fb:2e:0e:f4:
                    1b:a0:dd:e2:d0:4f:9e:ff:33:cd:eb:ed:ad:0f:4d:
                    0e:d2:49:a3:49:df:74:d8:90:b7:49:ca:5c:f4:37:
                    27:85:8d:53:43:b3:1f:fa:fe:59:91:fa:93:cb:ea:
                    46:3f:94:5b:76:0e:bd:5f:15:df:52:b7:8a:3e:32:
                    a4:7f:3f:5d:07:cf:7e:1e:70:5a:44:ec:63:4a:2a:
                    39:b4:9e:f8:62:cc:d7:36:95:88:7c:5c:4b:ee:5d:
                    de:b4:94:3e:28:26:e1:b3:0d:dd:f9:82:1b:91:e4:
                    6a:7d:28:89:5b:97:3f:1f:e5:57:46:ad:35:86:05:
                    f6:30:6a:c2:cd:89:f6:0e:1e:a3:82:4e:fc:da:13:
                    de:3e:ce:e6:e9:4e:15:fe:a5:7e:a1:f6:40:29:0c:
                    7e:bf:e9:20:6b:95:14:77:21:30:26:1d:72:9d:65:
                    73:b7:a7:57:e0:d0:04:b9:d7:bb:c2:f8:10:a2:aa:
                    a4:78:ca:28:f7:9f:a6:41:ce:52:c2:60:b3:bc:1a:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:0E:ED:36:0D:06:E2:E5:42:3A:F2:8D:08:83:5A:91:CF:EE:60
            X509v3 Authority Key Identifier:
                keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:a2:fa:28:6a:0b:fa:44:1d:16:d7:b1:e0:6d:47:cb:99:
         24:c3:f4:74:1b:53:8f:e8:26:35:e1:ab:90:b5:a1:b2:3c:e8:
         64:2c:1f:e0:4c:c1:68:17:6d:37:61:39:a7:84:4e:d5:d4:2f:
         f8:f3:24:55:6f:1d:56:1a:ad:ac:e4:2e:97:1e:97:08:e4:4f:
         07:bd:01:2d:d0:d6:e1:cf:08:16:6b:a4:64:36:4a:36:a0:1e:
         7b:6f:8f:a6:cb:25:62:15:26:c4:e7:6d:80:44:a3:f6:e4:7a:
         f2:4c:ef:3e:67:7c:48:e8:d1:d6:c8:f7:99:2c:44:f4:e2:dc:
         0d:7c:c5:c3:a4:88:54:24:e7:35:86:ca:df:84:e7:65:04:02:
         b8:8f:09:72:a5:36:ee:02:10:2f:72:65:fc:36:58:dc:24:34:
         a7:4b:4a:c9:14:83:db:2c:bc:6d:6b:c3:1d:87:b4:12:18:d4:
         aa:73:32:eb:2f:c4:ec:e3:c6:13:7c:8b:bd:11:15:d0:bb:a1:
         81:30:97:b7:6b:fc:1b:82:ac:64:98:79:a5:37:01:45:fd:8a:
         56:4f:7a:7b:d3:33:4b:1d:8b:30:2c:f3:6e:b4:41:1d:59:f8:
         9a:7a:1e:cf:f5:74:29:f6:25:e3:73:56:f3:0a:c8:46:16:48:
         62:98:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:11 2026 by rpki-client