Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa
File:                     3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (raw, json)
Hash identifier:          wzbhyHWdZFf+4zRG4eljIzSQe2JUQdKqrkpbRniPBU4=
Subject key identifier:   4F:2B:DD:5E:74:A0:DF:BD:0A:81:F7:73:7D:BD:5A:57:E4:EB:1A:33
Certificate issuer:       /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8
Certificate serial:       222D059AD31FE9FFF0B634E9CC2103A0B2364F05
Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa
Signing time:             Sun 03 May 2026 03:07:24 +0000
ROA not before:           Sun 03 May 2026 03:02:24 +0000
ROA not after:            Sun 02 May 2027 03:07:24 +0000
asID:                     136820
IP address blocks:        103.98.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl
                          rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2d:05:9a:d3:1f:e9:ff:f0:b6:34:e9:cc:21:03:a0:b2:36:4f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8
        Validity
            Not Before: May  3 03:02:24 2026 GMT
            Not After : May  2 03:07:24 2027 GMT
        Subject: CN=4F2BDD5E74A0DFBD0A81F7737DBD5A57E4EB1A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:6d:e4:75:f7:79:b3:09:d4:33:c8:d6:67:
                    4f:28:eb:41:8c:b6:40:6d:f7:99:f9:31:80:29:81:
                    81:30:2b:21:78:08:38:6b:89:7c:30:e5:72:6e:c3:
                    0c:e3:1c:2b:1b:9e:c7:cb:0b:da:f0:06:bc:ce:ab:
                    47:d7:14:74:e8:ee:1a:fe:2c:f4:aa:6b:83:d6:31:
                    5e:6e:9e:51:00:f2:b2:3e:31:6b:40:d1:9e:cd:b0:
                    03:82:8d:12:3b:4d:ea:60:04:6f:32:f9:e1:b4:95:
                    9a:32:71:d8:65:da:ed:21:ba:f9:28:78:f0:c0:cf:
                    12:5c:27:e0:ec:8b:a6:f1:0a:33:61:3a:5a:c0:79:
                    5b:1a:91:d6:5a:88:c9:f9:9c:1f:98:0f:ea:6f:48:
                    ef:5c:d0:bc:1f:2c:e5:cf:96:1d:4a:75:39:43:6b:
                    3f:00:35:0a:20:e0:90:ce:fe:7d:d3:88:ba:0f:75:
                    06:77:33:51:cd:5d:e6:bb:47:e8:57:1a:21:86:e9:
                    e6:64:93:5d:dc:c5:6e:61:61:07:a8:6e:83:ab:db:
                    7e:da:8c:a2:06:14:d8:8f:29:8e:29:f4:50:a6:e5:
                    d1:b3:66:01:ce:1f:0e:10:6d:1c:3e:c7:d3:11:69:
                    7e:ba:9b:6a:5a:da:21:ff:f7:e6:ea:0e:2a:5d:37:
                    fa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2B:DD:5E:74:A0:DF:BD:0A:81:F7:73:7D:BD:5A:57:E4:EB:1A:33
            X509v3 Authority Key Identifier:
                keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d5:ff:82:05:22:a8:00:00:a2:53:96:4d:9b:ce:24:c5:f6:
         46:eb:10:80:2e:aa:29:21:91:58:0f:ba:8d:f0:25:cd:ef:37:
         57:f0:c7:3f:e3:51:1e:7b:44:24:55:42:3f:a0:40:62:b2:ad:
         d7:59:c8:4b:25:fe:3e:12:5a:be:90:88:d6:80:bf:09:ec:6d:
         41:34:7a:00:c2:f6:51:ee:43:7e:e5:f4:74:95:71:95:4c:03:
         4b:13:0f:db:70:dc:73:26:b0:3e:01:8d:54:a5:79:56:1a:f5:
         dd:e0:e9:4b:94:37:e5:47:10:ee:7d:f9:48:22:36:58:5b:7f:
         80:d6:d7:7f:a6:3e:d4:b0:56:d8:18:9a:d6:4a:f9:a1:ea:36:
         3e:c6:cb:69:ae:d4:dd:d7:4a:42:e8:e2:79:c6:23:59:ff:8e:
         da:a3:96:df:15:e3:f2:04:3e:6e:4d:f4:df:7a:d9:bd:48:e6:
         5b:02:be:b6:62:61:47:be:c1:06:4c:07:ed:4f:96:d8:95:bb:
         93:bc:91:22:3e:c3:7c:a6:5f:c2:5b:76:56:2f:4d:35:6e:f3:
         59:c4:01:72:a9:77:c9:59:14:01:5f:55:dc:d4:12:9b:7d:39:
         f5:85:f4:cd:69:9d:0e:62:9b:01:d1:dd:d9:ce:67:5b:26:3d:
         e5:6e:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:36 2026 by rpki-client