Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa
File:                     3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa (raw, json)
Hash identifier:          cgOdljzD6Kb/efyo5mEV6JVDlvdGepzZA5hSBuGf/kU=
Subject key identifier:   55:16:F8:EF:63:1E:BB:C5:18:0A:27:4E:EA:47:6F:83:64:B4:B5:0D
Certificate issuer:       /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial:       5A7277491B21953AA7876680F9264B80DFDD8FC6
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa
Signing time:             Sun 03 May 2026 03:08:18 +0000
ROA not before:           Sun 03 May 2026 03:03:18 +0000
ROA not after:            Sun 02 May 2027 03:08:18 +0000
asID:                     137363
IP address blocks:        103.116.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
                          rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:72:77:49:1b:21:95:3a:a7:87:66:80:f9:26:4b:80:df:dd:8f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Validity
            Not Before: May  3 03:03:18 2026 GMT
            Not After : May  2 03:08:18 2027 GMT
        Subject: CN=5516F8EF631EBBC5180A274EEA476F8364B4B50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:37:dc:84:e1:18:eb:57:1f:0b:e2:b8:50:
                    fe:1e:ad:25:f6:f0:3d:cc:12:2f:77:a8:0b:51:fb:
                    ee:a3:a4:57:7f:8b:92:f9:50:26:ef:2a:f1:57:e6:
                    51:e4:43:e7:07:42:9b:0e:27:cf:28:ce:e6:4b:a0:
                    f7:d2:bd:62:cb:a9:67:8c:37:12:be:f3:cc:c7:11:
                    08:57:0c:99:e4:18:c2:44:0b:c2:3c:6a:c5:1a:b1:
                    74:1c:d6:7f:50:16:95:a3:ba:87:a8:f4:96:95:a1:
                    b7:b2:e2:94:25:c8:88:17:2f:e0:6f:8e:c6:14:16:
                    e6:fb:15:a9:79:8d:92:7c:e4:2a:3c:ba:89:08:b1:
                    57:50:37:de:8e:72:5b:fe:0e:a2:63:5a:5e:6d:92:
                    a4:a5:37:b1:ef:36:cb:4b:54:66:df:4b:87:9a:a2:
                    71:35:49:17:6c:c2:1e:df:55:41:86:24:b7:39:de:
                    e1:36:7e:b3:40:4f:25:7d:40:b2:f6:9b:9f:2c:30:
                    d4:08:d7:8a:52:3b:d4:ae:2c:3c:07:e1:54:c3:d9:
                    09:b0:a2:1a:c3:02:de:72:a7:6f:f8:5f:74:f4:cb:
                    af:bd:86:f4:78:ff:70:f7:20:55:6e:ff:fa:39:c8:
                    c7:13:0f:c1:10:d9:3c:9c:0c:69:04:1e:79:6b:2b:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:16:F8:EF:63:1E:BB:C5:18:0A:27:4E:EA:47:6F:83:64:B4:B5:0D
            X509v3 Authority Key Identifier:
                keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:5b:fb:7b:3c:b1:ce:a3:33:de:cd:bf:94:f2:f5:85:30:5e:
         0b:12:8a:f3:d9:24:74:08:07:39:e5:c9:14:ad:14:24:f4:b7:
         17:9c:ef:62:8d:2d:c9:13:e7:62:9b:21:80:17:20:10:92:fc:
         29:c9:7f:af:1e:31:16:e1:10:0d:b0:ca:2a:db:c0:60:0b:dd:
         98:16:a6:27:55:4b:fe:1e:c5:dc:9c:f5:97:d2:fc:d6:24:68:
         6d:6c:46:98:0e:66:1c:d2:1e:7a:b8:ee:c6:53:62:36:39:57:
         05:15:92:07:10:15:a8:f2:b3:38:2d:cf:72:f8:94:02:6f:67:
         7b:a1:fd:08:56:9b:40:24:25:ba:25:7c:1e:e6:bb:39:d7:2e:
         c7:bb:93:1f:f8:82:85:0f:96:82:00:92:91:3c:9c:bc:4c:4e:
         d0:ab:be:b2:48:31:70:d0:ff:18:ed:53:59:60:26:c3:40:5c:
         cb:6b:71:cf:54:c5:e6:12:4f:b1:fb:90:41:fd:e9:f3:55:2e:
         06:c3:6a:91:d2:ac:5f:81:18:71:ad:4c:52:f1:f3:76:59:4b:
         d2:b3:1c:9b:41:9d:a6:56:a1:a1:83:17:f7:5c:4b:5f:d6:c3:
         a3:12:3f:5f:7f:9d:fb:34:5a:b4:54:4c:c2:5b:7b:3e:4f:11:
         1d:f6:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:31 2026 by rpki-client