Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa
File:                     3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (raw, json)
Hash identifier:          X3tra53AFKAkL1Puu4ERpsixqEIRbM+P2BtQPxdqKUw=
Subject key identifier:   03:D3:41:D9:DE:2B:2B:28:8D:B3:8D:74:EC:8B:76:ED:56:9C:95:68
Certificate issuer:       /CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C
Certificate serial:       76948C45B745C42DCA0A4036D619227473EE1D06
Authority key identifier: F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa
Signing time:             Sun 03 May 2026 03:07:26 +0000
ROA not before:           Sun 03 May 2026 03:02:26 +0000
ROA not after:            Sun 02 May 2027 03:07:26 +0000
asID:                     139450
IP address blocks:        103.145.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl
                          rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:94:8c:45:b7:45:c4:2d:ca:0a:40:36:d6:19:22:74:73:ee:1d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C
        Validity
            Not Before: May  3 03:02:26 2026 GMT
            Not After : May  2 03:07:26 2027 GMT
        Subject: CN=03D341D9DE2B2B288DB38D74EC8B76ED569C9568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:51:e1:27:e0:2f:3f:2a:42:70:44:2f:3a:
                    7e:8c:21:c8:9a:d8:2b:68:ba:10:c9:ba:0d:89:a9:
                    0d:1c:4a:af:50:e1:69:e5:b1:49:79:0b:d7:2e:07:
                    1d:92:6e:b4:ef:56:8b:2c:cf:a5:48:a7:4a:15:df:
                    ea:46:1b:f0:7e:02:1e:c9:11:f2:52:88:18:66:44:
                    c5:54:3d:78:de:37:0a:c3:28:7b:ad:c0:7c:16:82:
                    c7:55:76:59:43:c6:ba:a6:46:40:65:f4:79:53:04:
                    9a:07:c7:9e:d7:ef:fa:ab:d3:26:8d:7d:a6:51:40:
                    69:d2:42:76:da:2e:d5:32:8d:57:a8:e3:cb:77:ab:
                    f3:78:3c:71:80:d6:9e:eb:62:7e:c5:19:3f:59:50:
                    8a:cd:33:17:f6:52:ec:da:4f:3b:68:8b:b6:c6:48:
                    95:d7:5a:ee:ca:39:b9:17:43:ac:39:36:dd:4a:3f:
                    9a:63:ae:8b:aa:4d:98:6b:28:12:db:01:ba:fc:63:
                    4d:0a:62:69:dd:3d:ed:ac:93:82:17:35:11:83:cc:
                    75:1e:ad:c4:02:88:ce:5a:6b:e2:15:3a:2e:7d:c0:
                    2d:b8:f4:ff:22:f3:c1:67:37:dc:c4:13:7a:c5:85:
                    6a:96:13:72:85:93:b3:65:02:9c:c1:0e:4c:37:1a:
                    28:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D3:41:D9:DE:2B:2B:28:8D:B3:8D:74:EC:8B:76:ED:56:9C:95:68
            X509v3 Authority Key Identifier:
                keyid:F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:db:06:a2:ac:38:7b:7c:e6:ce:0c:70:25:f9:b6:55:f8:de:
         8a:86:ba:99:62:ab:c6:a7:7c:4a:29:40:0c:e2:b9:4d:89:be:
         1d:0d:10:e9:c5:14:80:e3:eb:e3:3a:7d:31:72:f3:e6:a4:7b:
         3f:ad:71:d7:b8:6a:28:45:8e:5f:7e:c2:87:d0:88:b7:dc:28:
         53:47:79:38:f0:30:bd:04:d9:06:b5:eb:69:2c:a1:42:6e:b4:
         3c:c1:0b:cb:04:6f:2c:fc:00:2b:c6:90:05:d4:2c:c4:2c:10:
         66:50:52:aa:64:f2:66:12:8f:3f:e5:82:86:c5:b0:d8:11:16:
         23:61:35:30:62:dc:d9:9e:92:d5:f1:fe:06:ed:66:88:eb:e6:
         c9:8e:01:32:cd:b2:3e:6e:d2:3a:4e:9c:e1:9e:bc:1a:a7:85:
         f3:97:4c:38:75:a9:07:13:cd:1b:ab:ab:e0:8f:5b:d4:22:03:
         4f:da:1d:4a:4f:65:b5:f2:ba:bb:66:31:61:10:6d:36:db:ea:
         6b:62:15:7b:fc:44:48:80:99:06:d2:06:ef:fe:b7:f6:d3:41:
         79:0c:5c:89:a7:b5:be:88:d6:76:f3:b6:1b:ef:52:0e:18:60:
         41:8e:e2:a9:1b:e9:67:46:97:b2:c8:b0:3a:e2:0b:7d:b5:40:
         ce:13:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:14 2026 by rpki-client