Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa
File:                     3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (raw, json)
Hash identifier:          GuNiUOOoy6zPyANA8gj8CAZ6aJ70gefpTuHjvXAYLoc=
Subject key identifier:   B6:CF:5D:70:9B:89:64:FB:ED:EA:C2:B8:4F:A4:EA:0F:18:62:6E:B8
Certificate issuer:       /CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310
Certificate serial:       0517412FC872B33BB7F1840C5B89FF417557EC5E
Authority key identifier: A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa
Signing time:             Sun 03 May 2026 03:12:52 +0000
ROA not before:           Sun 03 May 2026 03:07:52 +0000
ROA not after:            Sun 02 May 2027 03:12:52 +0000
asID:                     137323
IP address blocks:        103.111.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl
                          rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:17:41:2f:c8:72:b3:3b:b7:f1:84:0c:5b:89:ff:41:75:57:ec:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310
        Validity
            Not Before: May  3 03:07:52 2026 GMT
            Not After : May  2 03:12:52 2027 GMT
        Subject: CN=B6CF5D709B8964FBEDEAC2B84FA4EA0F18626EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:23:29:fd:28:b6:c4:37:34:fd:ea:83:87:
                    c8:3a:99:99:10:44:ba:ab:cb:7b:bc:07:64:b5:86:
                    bb:1c:cc:b4:8b:06:50:f8:93:e3:aa:b6:ee:42:c0:
                    ec:b7:6c:03:15:19:81:9e:87:c1:ad:c8:88:27:39:
                    c0:62:d1:e0:58:dd:95:08:0e:51:81:0f:db:66:64:
                    ea:ee:a0:78:87:f2:09:3a:cf:52:02:96:71:1a:c5:
                    44:fd:fe:81:8b:41:49:62:d1:71:36:56:7a:b6:98:
                    b7:5e:eb:c0:d9:37:a5:8f:0e:af:99:34:1c:2e:e5:
                    dc:4f:8e:ac:4f:5e:ae:2d:00:1c:a1:5e:19:46:4a:
                    bc:e6:fa:58:90:d3:57:bb:86:80:e2:21:27:0a:4c:
                    e3:81:70:76:36:f0:8d:26:49:aa:89:13:62:b9:3a:
                    d6:9a:98:74:8e:5e:4b:94:4b:0c:03:46:5d:53:51:
                    fb:17:0d:ef:d3:e0:97:1d:62:ce:dc:1d:ce:03:a3:
                    bb:40:0e:26:db:30:eb:6b:e0:8c:31:21:3a:05:b2:
                    ab:5d:17:84:d5:c8:ff:21:15:e7:78:e5:98:46:13:
                    9b:5a:fe:7d:01:d3:35:e7:70:a5:f9:f7:fa:c4:ec:
                    0f:4b:92:62:f1:d6:7e:92:4b:4f:d1:b0:40:72:65:
                    b6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CF:5D:70:9B:89:64:FB:ED:EA:C2:B8:4F:A4:EA:0F:18:62:6E:B8
            X509v3 Authority Key Identifier:
                keyid:A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b2:fc:4c:3c:e2:a4:41:86:77:4a:74:d3:78:c8:d8:61:cb:
         ce:d4:fd:7e:c2:cb:9f:dd:8f:6b:1f:e9:d2:06:db:bf:7d:b9:
         08:70:a4:97:0f:a3:bb:10:90:48:42:fb:9b:87:66:12:4f:f7:
         13:6c:c8:0f:99:ad:c2:4a:6b:11:68:73:3e:51:ff:d9:0d:92:
         1e:2a:50:57:4e:bf:6d:30:05:6a:3f:db:e7:ad:52:48:c6:eb:
         3f:54:c6:db:79:a4:ac:68:da:ea:d3:4c:df:05:ae:43:5e:6e:
         b2:14:83:e7:2a:e8:8d:25:c5:6b:64:88:dd:ab:c9:06:36:54:
         a6:fc:3d:6b:60:b0:05:9a:ac:5a:79:e9:de:b4:84:a1:84:43:
         2a:9e:c6:2e:8f:10:e2:a4:25:8b:96:d3:85:d1:d0:3d:4e:e8:
         69:07:69:ee:15:79:b5:ee:54:52:d9:60:59:e4:69:3a:66:a7:
         7d:6e:9b:e9:02:f1:aa:1f:43:2c:81:50:95:55:f0:88:9f:0d:
         b3:90:bf:22:93:70:67:4b:89:49:39:91:d4:99:26:3b:f7:e0:
         06:26:d2:e8:fa:3b:1f:88:ee:e8:69:7e:98:6e:c1:c1:b4:31:
         b5:75:78:3f:c9:cb:5b:2e:5e:af:30:a3:09:65:65:7a:d3:5f:
         9e:97:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:34 2026 by rpki-client