Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa
File:                     3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (raw, json)
Hash identifier:          wzVp735bfnp8XDnpMDExEB2u8d/EmF9ou01fz223/d4=
Subject key identifier:   AF:A2:6D:04:71:60:7E:76:9F:0C:6A:B7:4E:13:1D:2C:DE:E9:9E:5E
Certificate issuer:       /CN=10305EB1D756B8E205948FA9D96C07D30D5559C6
Certificate serial:       4AC5ADC3F14AFC6335036B757CC7A119AD15A29C
Authority key identifier: 10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa
Signing time:             Sun 03 May 2026 03:09:24 +0000
ROA not before:           Sun 03 May 2026 03:04:24 +0000
ROA not after:            Sun 02 May 2027 03:09:24 +0000
asID:                     58385
IP address blocks:        103.246.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl
                          rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c5:ad:c3:f1:4a:fc:63:35:03:6b:75:7c:c7:a1:19:ad:15:a2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10305EB1D756B8E205948FA9D96C07D30D5559C6
        Validity
            Not Before: May  3 03:04:24 2026 GMT
            Not After : May  2 03:09:24 2027 GMT
        Subject: CN=AFA26D0471607E769F0C6AB74E131D2CDEE99E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:a9:7a:a8:22:92:17:74:1b:a4:db:e5:54:
                    98:a8:c0:ad:82:1c:a4:10:71:51:1a:12:02:e8:05:
                    58:31:6f:bb:4b:48:62:06:fe:b5:90:f2:72:b0:79:
                    cc:85:5a:d4:d8:65:2f:2e:b8:1c:ee:73:65:be:17:
                    4d:5b:f7:a2:41:10:4f:67:6f:c0:a7:dc:a4:6b:2d:
                    9d:07:b9:16:97:b6:54:f7:7f:9c:63:2d:bc:63:e2:
                    90:7e:59:4e:50:f3:d8:84:2b:cf:5d:bd:9c:aa:36:
                    a7:2e:52:83:99:eb:b9:61:75:39:50:3f:d6:6e:bb:
                    68:a9:e0:cd:1f:74:af:b3:84:9d:16:e7:11:bd:a2:
                    6f:f2:15:cc:2d:a7:78:1f:aa:f7:6e:be:17:39:51:
                    b9:50:ad:a9:2a:d8:75:c9:ee:f2:42:ad:da:2f:5b:
                    16:61:54:cd:fe:23:e4:68:64:99:20:b3:97:46:f5:
                    b8:7c:e9:30:33:b4:64:a9:9c:94:ff:e7:59:14:19:
                    88:e0:7b:75:87:3a:a7:37:5d:a0:a1:23:b5:0f:8c:
                    e3:09:2b:16:e6:f4:cb:7f:8a:94:69:c9:14:6c:e3:
                    6d:e4:14:8b:0a:01:33:c8:e4:62:8f:0d:59:86:a9:
                    ec:ba:5c:db:be:e3:f5:d5:1f:cf:77:b7:ea:7c:02:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A2:6D:04:71:60:7E:76:9F:0C:6A:B7:4E:13:1D:2C:DE:E9:9E:5E
            X509v3 Authority Key Identifier:
                keyid:10:30:5E:B1:D7:56:B8:E2:05:94:8F:A9:D9:6C:07:D3:0D:55:59:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/10305EB1D756B8E205948FA9D96C07D30D5559C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10305EB1D756B8E205948FA9D96C07D30D5559C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:16:0e:77:31:76:87:f0:8e:5a:0e:c1:22:e1:db:b5:91:10:
         2e:ff:24:0b:e5:04:d2:a6:0b:0c:4d:e5:22:af:02:71:05:76:
         bc:fe:a4:93:a3:63:27:5a:ac:5e:5e:8f:94:af:26:67:06:03:
         00:90:bd:9d:6d:98:94:50:fd:dc:dc:6c:2e:a5:45:86:9f:3f:
         c7:39:7d:d0:89:da:6c:b3:cb:49:c1:5c:b4:42:55:2c:ab:26:
         da:7b:b2:09:02:2f:5b:74:bb:1c:78:3d:9f:c0:fa:08:31:ef:
         2b:93:93:5e:8d:80:51:da:35:33:ad:fd:b6:47:3a:5c:47:64:
         ae:21:10:26:d9:aa:f4:b0:c8:83:0e:36:86:a1:10:3e:1c:74:
         5a:06:5a:25:91:db:bc:93:57:c0:20:a5:4b:fa:82:43:c3:15:
         1e:33:72:64:f8:e7:ad:e7:70:a1:6d:8e:11:3f:74:28:29:c9:
         bd:93:ae:13:b2:3c:2c:f9:68:2d:fb:3c:42:72:fc:6a:a4:e7:
         43:80:3f:ab:34:03:1d:f3:2d:bf:08:c7:2e:5f:5c:08:4e:6e:
         47:d1:74:74:db:83:f6:a2:65:d2:aa:af:8f:61:cb:f2:10:fb:
         7f:d6:6b:ca:8c:0e:f6:95:70:8c:a9:d0:c5:00:93:0f:bf:8c:
         83:a7:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:41 2026 by rpki-client