Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e322e302f32332d3233203d3e20313530393935.roa
File:                     3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (raw, json)
Hash identifier:          mV8+z8wbwRTe9z/LKU+76l90oXuk9i0hW/AMDNlrHl4=
Subject key identifier:   57:71:9C:90:E6:69:32:0F:06:1D:4B:0F:84:9A:12:D3:4F:62:F3:9F
Certificate issuer:       /CN=F5C77B8E76386E06F7C5963580F72FFDB6260833
Certificate serial:       057BDF46E599CC2EED5FB17AC4CFCD76D0ED9B46
Authority key identifier: F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e322e302f32332d3233203d3e20313530393935.roa
Signing time:             Sun 03 May 2026 03:12:12 +0000
ROA not before:           Sun 03 May 2026 03:07:12 +0000
ROA not after:            Sun 02 May 2027 03:12:12 +0000
asID:                     150995
IP address blocks:        103.210.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl
                          rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7b:df:46:e5:99:cc:2e:ed:5f:b1:7a:c4:cf:cd:76:d0:ed:9b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C77B8E76386E06F7C5963580F72FFDB6260833
        Validity
            Not Before: May  3 03:07:12 2026 GMT
            Not After : May  2 03:12:12 2027 GMT
        Subject: CN=57719C90E669320F061D4B0F849A12D34F62F39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:5b:77:42:48:9f:ac:1e:45:ed:a5:86:3c:
                    1b:ec:a8:14:7a:4d:4e:60:8d:60:f3:d5:81:ab:6c:
                    fd:c2:4d:7a:25:df:f7:8b:8e:90:1d:4d:ef:ae:30:
                    72:6e:40:f0:3d:8a:c9:9b:6a:34:5e:1d:54:62:5a:
                    d3:19:2d:94:9d:95:1c:9d:ec:16:39:4e:f7:18:d4:
                    4b:49:a5:34:68:7c:b6:84:b1:66:88:18:45:bb:a7:
                    f0:9d:02:5f:0d:f9:48:82:99:36:0e:9a:e7:8c:c2:
                    2d:c2:1c:46:9f:60:43:ae:7c:7c:1a:d1:8d:2a:46:
                    a1:5a:7d:33:06:98:11:b2:fd:c3:51:c4:e5:f2:7a:
                    e8:c4:b5:31:6c:0e:e1:8a:b6:51:f9:98:25:08:bd:
                    77:2c:01:55:01:26:6f:21:45:b2:ef:24:13:bb:85:
                    83:62:a9:68:d9:5d:f3:83:8c:c0:9d:59:16:b6:20:
                    19:de:e7:df:68:32:da:07:21:c1:aa:80:13:c2:d7:
                    a2:e8:72:e5:0f:d0:8e:d8:64:43:7a:72:74:ab:a0:
                    1a:7e:06:c1:90:5f:20:77:58:80:57:a4:be:03:64:
                    c7:7e:f4:af:6f:a5:8b:9e:74:b4:43:1f:d8:79:6f:
                    98:88:f6:60:45:f1:9f:b0:55:70:05:b0:e2:ad:90:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:9C:90:E6:69:32:0F:06:1D:4B:0F:84:9A:12:D3:4F:62:F3:9F
            X509v3 Authority Key Identifier:
                keyid:F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e322e302f32332d3233203d3e20313530393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:19:d6:1e:2b:2d:48:1e:dd:98:bf:6e:f0:58:48:7a:75:
         59:95:8c:c5:04:d8:f9:b9:7a:a0:da:e1:33:6f:25:a5:a1:10:
         76:11:fc:a7:66:8e:96:2a:d5:31:5d:98:e3:18:48:ac:5b:40:
         89:72:54:49:cb:fc:27:02:c7:bc:32:7f:cc:b2:ae:ee:cb:64:
         de:e9:4f:35:e5:ba:27:9e:23:da:b9:81:f8:4b:d5:41:16:91:
         c7:b6:21:d0:3f:66:ca:89:bd:89:d8:8a:31:24:55:d0:de:25:
         6a:81:47:08:9d:fa:f6:2e:04:ca:48:ee:e7:b1:0a:0a:54:49:
         3e:72:1c:9b:a2:69:53:61:df:f2:8d:6d:51:11:75:4c:0d:c2:
         bc:9a:48:11:57:43:d1:0e:ca:e5:ee:b5:f7:71:cf:58:1b:f0:
         dd:6f:1f:8f:63:bf:c0:32:ed:26:0f:7e:c5:42:81:36:eb:b9:
         49:66:99:72:f8:a6:3c:f9:9c:2d:38:f0:b3:35:9f:ba:51:7a:
         bc:4b:5f:2d:82:f8:93:38:51:98:6a:53:cb:12:ea:65:d0:47:
         5b:a4:9b:f8:93:df:2e:2d:da:c9:95:d5:67:30:cd:bb:9f:6f:
         42:dc:35:aa:8a:ec:e4:f4:33:06:08:b4:59:1b:a0:77:0f:39:
         89:bc:30:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:11 2026 by rpki-client