Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa
File:                     3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (raw, json)
Hash identifier:          KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=
Subject key identifier:   CE:5C:5F:C1:5C:D8:ED:67:7A:F6:28:9E:A1:7F:C8:9E:E2:FE:AE:95
Certificate issuer:       /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial:       5E7C2CCC5D125AABF8E7E5B82781EFF1EB361634
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa
Signing time:             Sun 03 May 2026 03:07:28 +0000
ROA not before:           Sun 03 May 2026 03:02:28 +0000
ROA not after:            Sun 02 May 2027 03:07:28 +0000
asID:                     138134
IP address blocks:        103.133.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
                          rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7c:2c:cc:5d:12:5a:ab:f8:e7:e5:b8:27:81:ef:f1:eb:36:16:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
        Validity
            Not Before: May  3 03:02:28 2026 GMT
            Not After : May  2 03:07:28 2027 GMT
        Subject: CN=CE5C5FC15CD8ED677AF6289EA17FC89EE2FEAE95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:5c:00:89:2b:56:fe:d0:a8:d4:21:15:dc:
                    90:61:c0:24:0a:cd:0a:26:19:67:f5:de:a0:b9:34:
                    15:78:68:5f:ba:e2:62:2d:5d:98:31:57:78:98:bd:
                    aa:c2:12:65:46:e8:49:96:10:a6:53:0e:17:39:d2:
                    f0:ab:87:42:d6:b8:6e:52:2f:d9:ab:98:29:cc:25:
                    a9:82:c1:62:5a:1e:c8:70:b0:15:c7:3c:8e:ae:95:
                    f6:7c:4e:5a:f7:83:e3:b0:f6:40:d7:66:d0:e8:9c:
                    bf:a0:b5:e3:1f:f4:29:62:00:56:80:0b:48:70:33:
                    0d:51:c0:d9:59:c9:34:3e:58:9d:3b:75:53:5b:f9:
                    e0:a3:69:8f:c3:99:9f:a0:cb:92:00:bf:76:88:a5:
                    63:12:2c:6c:31:07:88:e4:5c:fc:a6:e5:3f:9b:5b:
                    4e:b2:b3:1e:ca:7f:f7:3a:4c:c1:81:ac:d1:a2:71:
                    28:39:df:7c:99:08:53:90:77:9a:a1:da:7d:9d:df:
                    fc:19:a4:cc:af:9e:ca:e7:40:16:53:4a:58:64:8e:
                    6f:af:c1:e0:9b:b0:cc:ef:b5:1d:13:5e:70:16:48:
                    c9:c2:2b:dc:38:87:5c:10:e9:df:11:43:99:c1:e0:
                    45:8a:ba:15:f0:f0:6f:6b:2b:7b:2b:90:86:ee:7e:
                    06:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:5F:C1:5C:D8:ED:67:7A:F6:28:9E:A1:7F:C8:9E:E2:FE:AE:95
            X509v3 Authority Key Identifier:
                keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:0e:39:9f:47:b3:c2:c7:74:d7:90:f5:37:31:37:f4:34:
         35:4b:59:2f:01:b9:17:0b:88:90:89:48:45:3d:8d:d0:33:83:
         08:b0:ab:07:f3:6d:77:b2:60:d0:f4:3a:6e:9f:8a:c5:6e:a7:
         ea:ba:1e:31:e5:c9:ea:f2:cb:d9:b8:3c:ea:8c:22:02:4f:89:
         ed:ab:14:5c:bb:7f:47:41:d7:08:8a:9c:5e:53:8f:14:2c:d1:
         73:5a:0e:dc:b0:08:8c:83:e6:38:d7:8b:24:d3:b2:d1:5a:f5:
         dd:26:b8:ea:c5:7e:7f:f6:06:f6:d4:cf:ad:81:39:43:71:a1:
         2d:82:b3:eb:a7:e9:5b:0d:e2:f4:f9:be:ef:55:09:ad:ba:7b:
         8b:ab:63:a9:da:6d:d9:d4:67:74:51:91:bc:1c:fb:23:fc:5e:
         da:6b:b3:d8:f6:2a:75:14:f2:56:8e:2a:53:e5:0c:8e:90:49:
         3e:94:e8:c9:d0:43:90:e2:bc:1c:43:f8:e1:da:66:d4:2b:22:
         f3:8e:ad:e2:82:77:e9:c7:8d:50:38:bf:5d:a7:38:ce:5c:53:
         be:26:09:15:d8:de:48:9d:2b:3d:dd:eb:d1:d4:40:24:8c:69:
         e7:bf:74:c8:52:e4:a3:1a:c6:ee:aa:75:c5:6f:c7:b6:9b:c5:
         ca:ba:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:22 2026 by rpki-client