Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138352e302f32342d3234203d3e203538353533.roa
File:                     3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (raw, json)
Hash identifier:          +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=
Subject key identifier:   8B:D9:27:06:7B:DE:B7:9F:BA:20:BC:8F:22:A5:E2:42:3B:34:22:DF
Certificate issuer:       /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Certificate serial:       42E493D2DE3F44AFB60F52468373BB2022EA9C84
Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138352e302f32342d3234203d3e203538353533.roa
Signing time:             Sun 03 May 2026 03:12:28 +0000
ROA not before:           Sun 03 May 2026 03:07:28 +0000
ROA not after:            Sun 02 May 2027 03:12:28 +0000
asID:                     58553
IP address blocks:        103.20.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
                          rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:93:d2:de:3f:44:af:b6:0f:52:46:83:73:bb:20:22:ea:9c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
        Validity
            Not Before: May  3 03:07:28 2026 GMT
            Not After : May  2 03:12:28 2027 GMT
        Subject: CN=8BD927067BDEB79FBA20BC8F22A5E2423B3422DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:96:20:99:d2:b6:74:18:50:bd:af:54:44:
                    b2:d9:74:5f:e4:ab:81:6f:eb:32:ea:54:3f:9c:7f:
                    9a:d7:6a:36:ec:19:20:d4:70:ee:f7:a2:fd:7c:2d:
                    66:10:01:3f:5f:9b:34:02:a5:26:f8:95:db:75:1b:
                    cd:bf:7c:a7:56:f9:01:8b:ca:db:a7:16:dc:6f:e1:
                    26:7d:34:36:c4:d8:22:48:01:17:42:04:69:a8:99:
                    da:f1:e0:c1:1c:15:d0:27:1a:37:ab:58:85:74:0f:
                    a7:43:1c:30:89:ff:08:7d:c0:36:d9:88:71:06:12:
                    d7:92:0b:0a:6e:46:34:40:1e:64:8b:d6:02:d9:c3:
                    b9:c2:5c:ee:dd:fe:ae:e3:28:c6:4b:6d:15:a9:4f:
                    02:ac:5c:b6:e1:52:95:8c:5a:4e:aa:ce:1a:d8:b6:
                    44:2c:b5:c9:57:9f:6e:a3:89:16:12:86:ea:e4:e7:
                    ed:a0:c5:70:d4:e6:59:b2:0b:d5:ae:59:9c:35:d1:
                    42:c1:3f:0d:a5:97:f8:60:42:f6:ca:d4:c3:3d:8d:
                    ec:7d:65:07:77:4e:18:58:9a:a9:43:4a:ee:55:23:
                    f2:cb:45:69:e9:3e:6e:7d:7b:14:73:75:80:1d:8d:
                    e9:4d:10:16:8c:f4:02:41:9c:89:d2:68:e6:b5:ab:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D9:27:06:7B:DE:B7:9F:BA:20:BC:8F:22:A5:E2:42:3B:34:22:DF
            X509v3 Authority Key Identifier:
                keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138352e302f32342d3234203d3e203538353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:a8:ad:3d:09:a8:f4:64:bb:77:18:b4:f7:56:61:cf:23:b5:
         91:bf:1f:fb:b1:24:b4:14:34:cf:26:ba:a6:ff:c0:23:29:51:
         58:ea:6c:1b:5f:98:29:16:5b:b8:71:c6:5a:b6:b5:e0:a8:67:
         76:65:d3:11:c9:23:7c:cc:4e:6e:92:91:f2:ec:fa:86:7b:a8:
         21:c5:17:07:2c:20:45:08:88:6c:d7:ae:30:4e:4d:86:fb:0d:
         95:ae:9b:6f:98:7a:af:c3:47:81:9a:61:b8:e9:33:02:77:26:
         97:e0:15:8b:39:c3:1d:08:c9:b3:6f:48:82:02:33:0f:6d:fd:
         e8:18:19:d3:f8:35:ea:18:32:7d:38:b7:18:70:50:81:71:72:
         ec:dc:c7:ee:33:44:9d:d7:1c:8e:ef:e5:a5:d2:a2:1a:ef:86:
         30:6e:8f:af:b0:3e:fb:a7:78:79:5c:c1:63:52:b7:96:85:fe:
         16:7a:9e:e9:ad:83:53:cb:bb:f2:b3:3d:70:fd:7b:5c:fd:95:
         3d:10:04:87:94:ef:27:d6:ff:1f:d8:e3:3c:84:b5:fd:b3:a2:
         eb:81:a6:58:1a:a5:31:c0:f0:0a:21:f2:0a:ca:b1:fb:8d:ee:
         17:14:bc:90:36:f6:39:b9:b7:0a:2e:7f:05:ec:cb:54:c7:1c:
         a9:36:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:54 2026 by rpki-client