Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa
File:                     3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (raw, json)
Hash identifier:          RWaRXWbQIpLKoTQziPLdF6KyPF26oe/DwncsbN1gjuY=
Subject key identifier:   BF:73:4C:B1:8F:49:14:46:B0:58:D2:7B:AE:2A:E4:0F:25:AF:FD:51
Certificate issuer:       /CN=411E8C45894267DCEFA20514C89165EE7C17C4C4
Certificate serial:       75361C07772DB2F7DD74618D19D5E513B82D4F2D
Authority key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa
Signing time:             Sun 03 May 2026 03:11:20 +0000
ROA not before:           Sun 03 May 2026 03:06:20 +0000
ROA not after:            Sun 02 May 2027 03:11:20 +0000
asID:                     147125
IP address blocks:        103.175.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl
                          rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:36:1c:07:77:2d:b2:f7:dd:74:61:8d:19:d5:e5:13:b8:2d:4f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4
        Validity
            Not Before: May  3 03:06:20 2026 GMT
            Not After : May  2 03:11:20 2027 GMT
        Subject: CN=BF734CB18F491446B058D27BAE2AE40F25AFFD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f9:20:23:fd:5d:dd:fc:43:55:20:da:4a:f1:
                    3f:33:6c:a0:ed:1e:1b:0e:07:89:31:ac:a1:cc:13:
                    85:35:57:3b:59:b6:14:2c:01:a9:ee:9c:bd:75:d5:
                    fe:cc:f3:8b:0a:c7:59:c8:d2:28:06:a8:8f:85:96:
                    dc:62:00:bb:07:63:5c:46:77:c7:ec:58:a1:21:b2:
                    19:c3:4b:a3:4a:11:7b:b2:e8:04:be:55:f7:21:9e:
                    92:fc:5a:33:59:56:f5:85:d4:e8:dd:9d:0c:6a:e7:
                    86:b2:fc:5d:a7:3e:dd:e1:7d:0a:a1:a7:7e:69:8a:
                    a7:90:34:93:2e:50:ef:b6:d5:77:c0:71:e1:67:39:
                    0d:eb:cd:50:b5:c0:df:47:c2:94:26:5a:b2:8f:e6:
                    cf:92:72:00:15:62:13:fb:73:e9:c2:21:27:02:57:
                    9a:9e:0a:63:e1:a2:78:f6:29:d4:8d:11:0e:48:92:
                    dd:d8:e0:aa:97:88:0f:5f:a9:a8:73:b5:3b:dc:5d:
                    e7:db:d1:45:42:c9:54:d9:93:73:e0:66:16:1c:ae:
                    b1:fe:d8:3e:d2:3e:75:71:77:7b:67:f7:97:7a:f4:
                    46:10:11:cb:4d:2f:03:36:f5:a7:73:2e:7a:a7:49:
                    43:98:34:b5:d2:e1:10:e1:94:2c:dc:24:51:8a:e3:
                    c1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:73:4C:B1:8F:49:14:46:B0:58:D2:7B:AE:2A:E4:0F:25:AF:FD:51
            X509v3 Authority Key Identifier:
                keyid:41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:80:3a:74:9a:55:0d:9e:a0:01:b1:d2:d2:af:fe:35:ce:3e:
         91:85:7b:6d:14:5d:a8:ea:ef:85:b5:3a:e8:42:7a:5b:ab:e6:
         45:95:6c:07:29:5c:41:61:5e:fc:6b:12:0a:d4:4f:2b:ed:23:
         76:b3:d2:ea:06:b3:56:a0:23:92:a9:d8:db:22:02:79:80:bc:
         8c:e6:da:8f:d1:67:aa:47:70:2b:25:5a:e4:65:e6:29:11:eb:
         98:86:96:ec:91:bb:8c:ac:e9:f3:91:f9:1e:77:78:1e:4d:2f:
         be:39:7a:a0:99:5c:69:1a:47:e7:0f:94:1b:0b:67:6d:2f:7e:
         a8:ea:d0:c9:29:29:10:22:69:53:65:08:61:6c:a0:bb:b9:35:
         13:fc:74:fd:6e:f1:95:c9:3f:17:69:4c:f8:91:11:91:53:1a:
         f3:fc:63:34:dc:c6:2b:3a:1f:e5:71:0d:92:35:77:0e:c9:f9:
         4a:2d:f5:36:95:79:07:86:ce:5c:a0:2b:ee:84:9a:44:e0:5a:
         82:02:d2:24:d3:63:00:ab:a7:e8:6b:d5:d4:67:61:35:64:69:
         b1:64:93:7b:9d:3c:9f:d4:3f:89:2a:02:8c:de:3a:b4:42:49:
         48:55:8c:db:18:b0:bd:47:29:e7:54:95:19:55:2b:a3:72:7f:
         db:7c:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:03 2026 by rpki-client