Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa
File:                     3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (raw, json)
Hash identifier:          ipU1a2udwtca/E3v1pmxqgcaK0XTJh0tDNEJJ4f4t7Y=
Subject key identifier:   B3:93:44:90:BB:B5:C0:00:F4:1A:13:C1:36:1C:8B:15:67:4E:8E:36
Certificate issuer:       /CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7
Certificate serial:       45C73874297DDA0398788965425CC739BBE968F0
Authority key identifier: 20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa
Signing time:             Sun 03 May 2026 03:07:54 +0000
ROA not before:           Sun 03 May 2026 03:02:54 +0000
ROA not after:            Sun 02 May 2027 03:07:54 +0000
asID:                     147087
IP address blocks:        103.173.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl
                          rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c7:38:74:29:7d:da:03:98:78:89:65:42:5c:c7:39:bb:e9:68:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7
        Validity
            Not Before: May  3 03:02:54 2026 GMT
            Not After : May  2 03:07:54 2027 GMT
        Subject: CN=B3934490BBB5C000F41A13C1361C8B15674E8E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:91:f5:21:cf:9c:30:d4:61:3f:80:00:c4:
                    ba:f0:9d:d4:57:1a:93:eb:eb:3c:14:a4:a4:f2:18:
                    d2:61:9b:fe:b9:e5:e1:41:bd:10:2f:8b:a9:94:0b:
                    72:1e:02:ae:39:8a:3b:12:27:1e:17:af:ad:f5:7d:
                    ec:14:fe:7e:c3:7b:68:35:5c:19:41:df:93:68:fd:
                    2b:ee:25:80:59:3b:ee:89:6d:15:73:4e:86:4d:46:
                    bd:23:3a:30:de:83:e5:71:8c:5f:e5:10:79:11:ba:
                    f5:e7:4b:9e:e2:87:b6:c8:a9:8a:97:51:d2:ac:22:
                    04:ad:ee:f6:25:b9:73:1c:4f:70:8e:e2:52:05:0a:
                    38:52:c6:02:9a:28:f1:6b:fd:1d:2f:e8:7b:5a:27:
                    58:17:24:56:f4:a8:ec:c5:2c:87:4f:1e:57:44:d6:
                    e3:3e:4f:ea:11:e8:67:ac:70:4b:15:1b:b0:27:01:
                    7e:dd:2d:2e:58:67:89:05:70:bd:a9:27:f2:d7:23:
                    00:a1:19:51:28:60:b1:90:e6:9d:b1:7e:e3:8c:cb:
                    e3:15:f7:25:95:0d:12:d4:48:c0:ad:2c:70:e3:0e:
                    1d:dc:41:dc:8a:7a:7d:50:71:aa:fa:35:12:07:cf:
                    b9:bf:0d:2b:6d:a5:9e:1d:f4:84:77:56:d4:6e:b1:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:93:44:90:BB:B5:C0:00:F4:1A:13:C1:36:1C:8B:15:67:4E:8E:36
            X509v3 Authority Key Identifier:
                keyid:20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:47:02:8d:37:49:09:ce:a7:d0:f3:6f:85:a0:2b:7f:6d:94:
         da:78:c3:0e:ef:f2:07:f7:dd:54:76:d7:5d:18:7c:e8:a2:d5:
         46:df:f9:2a:77:57:63:56:b8:10:5d:08:ce:d5:1d:04:34:d9:
         89:9b:74:45:d3:f9:e0:5b:49:89:0a:e3:9a:59:8d:e7:5c:74:
         08:9d:fa:62:ce:b3:ca:b7:3a:bf:ed:7b:aa:c6:85:45:f4:82:
         89:bc:92:47:c7:a2:66:16:29:c2:0e:fb:80:64:dc:c3:33:c4:
         ea:74:c2:70:2a:9b:bb:44:44:50:f2:75:c4:ed:a8:e8:c3:0f:
         ff:d7:68:dc:10:e6:19:b3:df:1c:a1:49:06:84:a3:00:b7:2c:
         3b:3e:d1:73:31:d9:80:94:c3:d2:cd:50:9a:c0:e7:69:e9:6f:
         c3:b1:40:f2:ee:9f:69:d1:3f:1a:67:70:8f:95:d4:c4:1b:2a:
         4e:16:37:4e:25:8f:93:74:26:2d:12:2c:6e:3a:5f:3c:04:af:
         66:01:e3:79:d0:86:90:58:1b:5b:5d:e6:e1:e9:db:ca:d1:ff:
         44:6f:36:b6:3b:70:85:82:51:9f:5b:17:87:e2:18:ef:0d:23:
         ed:92:1d:b9:ff:db:ed:2a:8d:2c:9f:7d:fe:37:12:83:eb:e5:
         86:1c:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:00 2026 by rpki-client