Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa
File:                     3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (raw, json)
Hash identifier:          ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=
Subject key identifier:   9B:F7:41:90:6C:72:E2:9B:02:56:61:04:C8:07:C0:A0:6D:3D:0B:D6
Certificate issuer:       /CN=CD845730E45E4D531071D97C1EDC23DA378D662F
Certificate serial:       5B56DD4CB845EDAF69D9C2E1062D4CF56AF09676
Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa
Signing time:             Sun 03 May 2026 03:08:13 +0000
ROA not before:           Sun 03 May 2026 03:03:13 +0000
ROA not after:            Sun 02 May 2027 03:08:13 +0000
asID:                     137349
IP address blocks:        103.114.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl
                          rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:56:dd:4c:b8:45:ed:af:69:d9:c2:e1:06:2d:4c:f5:6a:f0:96:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F
        Validity
            Not Before: May  3 03:03:13 2026 GMT
            Not After : May  2 03:08:13 2027 GMT
        Subject: CN=9BF741906C72E29B02566104C807C0A06D3D0BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:a2:f0:67:42:39:fb:d4:6c:e2:63:ec:e2:
                    07:d2:95:4f:cd:0e:d2:3d:4b:95:de:da:16:b0:c9:
                    75:b3:05:47:42:25:1f:0a:89:56:b8:b2:4e:7a:45:
                    05:ea:50:64:37:bd:67:27:29:99:5a:3b:c7:dc:bd:
                    21:1f:c0:4a:cd:9a:5e:22:d5:ca:ef:37:ba:c1:9a:
                    71:5e:96:cd:0d:cf:26:a3:a0:f7:94:db:35:50:fc:
                    59:48:23:7f:cc:ff:dc:44:60:56:e9:ac:88:04:58:
                    a8:84:f1:9f:46:05:e2:bb:a3:d8:cf:2d:0c:54:1e:
                    99:67:84:5b:fc:00:8f:ab:ae:7b:5e:4f:c0:6e:f0:
                    c9:a8:e0:b1:1f:1c:33:30:36:d3:34:04:03:14:50:
                    a6:aa:83:89:f7:e8:ce:a3:cc:58:7c:73:31:14:5d:
                    39:0b:61:58:74:37:ec:88:1d:b9:52:c9:cc:16:f2:
                    f7:39:a7:84:62:16:ee:c4:fd:36:61:fd:7d:9f:f0:
                    e4:31:e6:7c:4f:53:9e:94:83:26:41:56:d9:a2:8f:
                    6d:73:22:3b:57:41:e7:43:f0:b5:a9:c5:99:80:e3:
                    bc:98:04:03:f8:1c:b8:55:e9:bc:b2:c3:bc:d9:ed:
                    66:9e:63:95:5d:81:54:9d:bf:d1:de:3a:bb:91:d4:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F7:41:90:6C:72:E2:9B:02:56:61:04:C8:07:C0:A0:6D:3D:0B:D6
            X509v3 Authority Key Identifier:
                keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:73:a3:ff:c7:f1:32:6f:24:8a:fc:8b:5e:ed:b1:38:a4:a5:
         bd:7a:93:2f:20:f1:7b:8f:a5:b1:5f:d2:10:7c:1b:2d:db:e2:
         03:0e:55:21:aa:f8:a7:94:ea:97:dc:ce:99:ad:35:12:c1:fa:
         d0:16:4d:7a:67:b7:11:8f:39:5b:19:45:22:d7:13:47:57:7d:
         09:78:fe:25:7c:5e:ec:b1:c5:57:96:e0:e3:ae:96:79:be:ed:
         33:7c:7b:5d:d7:97:e3:ec:57:1d:1e:a4:bd:66:f5:cc:b0:b6:
         b6:10:84:7c:b8:09:18:23:c8:fe:58:da:40:c6:c9:c9:0a:d0:
         02:60:10:3f:c7:ab:8e:59:cd:49:90:7e:d8:3b:b8:18:27:3b:
         37:d9:93:d1:b1:18:d4:72:20:11:07:6e:24:34:57:32:7d:8b:
         3d:b9:7d:b6:88:e4:13:23:ff:f2:24:93:e2:4a:2f:57:39:ca:
         55:e1:74:7a:92:b6:21:eb:52:73:8e:66:81:6a:73:32:b5:05:
         a6:7e:e6:2d:0b:8a:f2:d6:e0:e0:24:e9:ad:fc:dc:8c:da:07:
         b3:6f:ee:f9:f5:ea:9a:d8:e1:93:06:85:d4:7b:da:b3:50:bd:
         29:45:a8:b4:2c:07:42:33:97:0c:cb:7c:2d:d5:80:b8:ca:62:
         d6:02:55:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:50 2026 by rpki-client