Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa
File:                     3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (raw, json)
Hash identifier:          YQmR5xszR6XJTWjFcmbhXoD76oy0pbbqOdOUyAmXzbo=
Subject key identifier:   C7:60:5E:64:98:5C:2B:5D:DB:B3:22:79:B6:06:B5:DB:A9:8A:6E:61
Certificate issuer:       /CN=4AD757CB155CFF255FDEC1E6D09300FD55954787
Certificate serial:       5DB5B28C5727F5000CE37346960DF6A780E94693
Authority key identifier: 4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa
Signing time:             Sun 03 May 2026 03:07:31 +0000
ROA not before:           Sun 03 May 2026 03:02:31 +0000
ROA not after:            Sun 02 May 2027 03:07:31 +0000
asID:                     151559
IP address blocks:        103.38.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl
                          rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b5:b2:8c:57:27:f5:00:0c:e3:73:46:96:0d:f6:a7:80:e9:46:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AD757CB155CFF255FDEC1E6D09300FD55954787
        Validity
            Not Before: May  3 03:02:31 2026 GMT
            Not After : May  2 03:07:31 2027 GMT
        Subject: CN=C7605E64985C2B5DDBB32279B606B5DBA98A6E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:56:6f:0f:0e:9a:39:63:a4:a0:14:df:01:
                    2e:b4:d2:a7:5b:a6:f0:98:7c:16:a1:b8:5c:68:fa:
                    9a:1e:07:1a:df:fb:c5:62:64:4a:60:dd:d6:3f:a6:
                    f7:1f:6e:5b:0c:a0:ed:6d:c4:db:9f:e7:76:aa:61:
                    c8:b5:9f:a5:8c:69:2f:d6:dc:92:4a:33:13:b6:36:
                    f7:dc:4e:0e:09:af:2e:b3:96:75:bf:cd:22:03:f5:
                    06:d1:ca:a5:6c:97:54:80:9d:e7:61:61:6b:c6:5e:
                    2e:81:4f:04:7d:d6:bc:c2:2f:56:a6:fb:e8:0d:b2:
                    be:05:ac:ea:77:23:99:ce:4a:67:77:86:96:4e:02:
                    ff:2e:da:c3:e5:b9:52:a3:75:15:9c:71:4b:79:dc:
                    c4:0c:de:dd:ce:16:9e:61:cb:32:8e:44:93:9a:bb:
                    d2:c1:21:d7:f2:9f:28:45:4b:5d:b1:37:67:57:f7:
                    51:7f:08:26:a9:80:b3:6d:fa:1c:33:94:f6:be:a6:
                    b4:e9:59:59:f1:29:56:50:8d:18:5b:4c:eb:a9:62:
                    0e:63:65:21:71:0a:fa:76:ee:53:62:3d:92:05:9b:
                    3f:bc:fa:d8:ca:56:b9:67:69:e3:de:7d:d9:c4:44:
                    09:89:7c:af:91:c5:46:aa:77:b8:52:3b:f3:08:b8:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:60:5E:64:98:5C:2B:5D:DB:B3:22:79:B6:06:B5:DB:A9:8A:6E:61
            X509v3 Authority Key Identifier:
                keyid:4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:93:c0:cd:b2:cc:f1:76:74:2a:e7:5f:df:6a:87:9a:7a:18:
         90:c1:b1:5e:90:3b:1a:9b:06:3e:39:09:89:da:d1:7d:c3:8a:
         8b:6d:21:61:73:d0:7c:58:f5:75:46:78:62:ed:f9:5f:c4:bb:
         9e:19:89:51:3d:94:a7:71:08:f0:d8:2c:da:6e:4b:86:a8:34:
         51:d2:6d:f7:ad:93:06:76:8b:14:8d:2f:35:6c:7f:b8:b0:3d:
         aa:8e:44:be:52:15:62:8e:23:ca:82:79:ca:69:c7:c4:d1:a3:
         f0:57:f5:13:c7:17:37:44:73:d7:8f:0a:7d:07:79:b0:af:42:
         d7:e1:7b:e7:bd:bb:a7:ec:0f:21:f0:c9:01:00:25:3b:4c:9d:
         22:eb:e2:c3:d5:7b:51:c8:5b:3b:77:ef:f8:65:46:06:fa:fd:
         d8:98:0e:08:a4:61:67:04:11:3f:2f:97:26:9d:3b:4b:77:cc:
         e9:06:37:b0:c0:90:84:5f:e0:bc:92:7f:dc:a8:fb:ef:9a:ca:
         f0:f2:89:27:0d:7d:cb:ba:11:61:0a:cb:72:ab:bf:06:60:aa:
         9d:36:8d:66:37:6a:f2:20:69:0d:0c:6f:0b:30:2a:7c:1f:2e:
         23:e2:e4:90:8a:90:1d:bd:0f:1c:8e:95:cd:7b:13:7d:8e:3f:
         0e:86:ab:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:20 2026 by rpki-client