Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa
File:                     3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (raw, json)
Hash identifier:          XUWyeU0kh6yequAHewJPZ2w5whyQqogEceIV/kyUeMY=
Subject key identifier:   70:0A:78:83:D9:AD:C6:D0:7E:FF:67:17:C5:03:3C:FC:A8:A0:BB:0A
Certificate issuer:       /CN=40CAF98483C41DA7BDC759A128942EA7634B575E
Certificate serial:       73A630ED9371058EA4B6BD578747A50DC515DE58
Authority key identifier: 40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa
Signing time:             Sun 03 May 2026 03:08:03 +0000
ROA not before:           Sun 03 May 2026 03:03:03 +0000
ROA not after:            Sun 02 May 2027 03:08:03 +0000
asID:                     149749
IP address blocks:        103.189.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl
                          rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a6:30:ed:93:71:05:8e:a4:b6:bd:57:87:47:a5:0d:c5:15:de:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CAF98483C41DA7BDC759A128942EA7634B575E
        Validity
            Not Before: May  3 03:03:03 2026 GMT
            Not After : May  2 03:08:03 2027 GMT
        Subject: CN=700A7883D9ADC6D07EFF6717C5033CFCA8A0BB0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:d9:60:8f:6d:fe:fc:f1:0d:d4:62:19:48:
                    d4:fe:5e:c4:42:f9:ea:f2:ff:b0:78:40:0c:ff:da:
                    a4:bb:fc:a9:4e:87:6c:d7:02:fe:fe:08:da:e7:c8:
                    2e:e4:c8:f5:54:b0:4e:c0:32:b8:4a:54:05:13:25:
                    44:d7:98:61:72:92:6e:59:55:3f:7b:09:c8:5d:41:
                    f0:a6:88:2b:5f:ca:46:92:67:2e:31:18:c1:0a:f5:
                    52:8a:e4:0a:cd:d1:b2:80:74:c8:22:7c:89:79:ca:
                    8f:84:e3:98:9b:56:e5:a6:cf:fd:59:02:0f:68:be:
                    7e:1b:5e:53:24:9b:36:bf:79:93:a0:73:66:37:a6:
                    2c:b6:9c:e9:e5:4e:a6:04:c8:d3:97:f3:34:1b:3e:
                    b7:ac:5e:8c:7c:d0:ab:66:ea:11:4a:b4:a0:f0:53:
                    67:68:21:eb:fe:31:35:ed:70:0c:7b:3a:f6:15:42:
                    96:35:e8:11:da:7f:fd:68:9e:7b:ea:80:5d:f7:34:
                    0a:9c:38:07:9c:b2:d1:6e:0f:6e:d7:24:64:c8:7a:
                    ed:86:ed:ad:80:69:a5:5e:b1:0d:42:23:7b:82:b6:
                    a6:8e:01:c6:dd:08:99:7f:06:04:cc:0c:66:6c:e1:
                    da:b2:c2:c0:4f:4f:04:28:31:fc:00:ab:ec:5e:ea:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0A:78:83:D9:AD:C6:D0:7E:FF:67:17:C5:03:3C:FC:A8:A0:BB:0A
            X509v3 Authority Key Identifier:
                keyid:40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:4c:ed:c4:7d:0e:6e:77:05:0b:0f:b9:d2:65:9e:74:76:2f:
         87:56:d4:f6:df:28:e0:6d:d2:bd:5f:86:fd:26:a4:f2:f4:b7:
         49:ac:15:66:47:07:cb:7e:3d:1b:58:47:2b:51:13:7e:4c:f3:
         28:78:58:f4:59:3a:1a:05:99:94:ec:78:d9:6e:71:ad:fe:7e:
         a4:f6:7b:3a:e6:25:fb:32:96:2b:42:de:ce:91:ad:aa:25:1d:
         b3:d2:8d:56:a6:ca:19:6b:67:41:a6:ee:80:02:04:26:1b:1d:
         6f:08:47:e2:e4:76:df:95:96:16:8c:40:e3:4e:81:cc:9d:5d:
         5c:a8:7a:43:3b:27:84:cd:98:20:fd:bb:19:a5:7a:58:23:22:
         3e:0a:0f:b5:90:df:80:2a:11:9a:96:a0:f2:64:d4:65:e5:db:
         06:67:a1:94:e3:cb:7f:8a:03:4f:8f:d8:93:7f:08:ef:db:87:
         a3:57:c8:1d:d9:f8:8d:8d:78:c8:f1:35:33:b7:16:e1:e5:12:
         37:e6:90:8a:f5:e9:bb:05:92:be:ff:86:31:57:0d:6a:34:f1:
         4c:7e:be:11:9b:01:29:db:e7:98:8a:01:11:2e:56:65:70:ea:
         f7:18:70:ce:d4:16:9f:58:37:cd:19:d6:5f:be:ef:a4:ff:0d:
         2e:cc:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:41 2026 by rpki-client