Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa
File:                     3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          Pn35/z/Opy4+bi+hOwdyJNg9JFN1Pwq8xx84oYEuYAc=
Subject key identifier:   41:DE:5C:66:70:04:20:7F:A7:9E:D0:78:B7:F2:31:80:62:C8:DC:4C
Certificate issuer:       /CN=E41C49050CBD3032F041D83A7A089A3E23CBE621
Certificate serial:       48CF18286E9BB20B3CF84262C5F1C719CA6E2697
Authority key identifier: E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa
Signing time:             Sun 03 May 2026 03:14:27 +0000
ROA not before:           Sun 03 May 2026 03:09:27 +0000
ROA not after:            Sun 02 May 2027 03:14:27 +0000
asID:                     58821
IP address blocks:        103.26.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl
                          rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cf:18:28:6e:9b:b2:0b:3c:f8:42:62:c5:f1:c7:19:ca:6e:26:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E41C49050CBD3032F041D83A7A089A3E23CBE621
        Validity
            Not Before: May  3 03:09:27 2026 GMT
            Not After : May  2 03:14:27 2027 GMT
        Subject: CN=41DE5C667004207FA79ED078B7F2318062C8DC4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:74:4d:d6:a6:37:ed:d2:3f:02:36:21:cf:
                    ba:9c:8c:ed:9b:4d:32:02:b7:44:d5:6e:2a:65:b4:
                    4e:cf:65:ca:93:98:33:fc:16:11:36:a1:9f:84:74:
                    a2:0c:32:42:eb:e2:0d:06:d2:30:ff:92:e0:41:23:
                    ab:09:26:4f:26:5e:51:01:0a:75:a4:f2:79:e0:7a:
                    53:f9:36:f5:7d:a3:95:f0:58:29:d9:7e:63:70:64:
                    44:c4:ab:fd:22:e1:97:0f:21:e4:4e:a6:21:47:25:
                    45:be:d7:dc:54:27:c2:a3:c5:9e:98:bb:78:6b:31:
                    6f:62:5e:7c:3a:8b:ce:00:c5:01:b7:e1:8c:d8:c1:
                    ec:3e:49:96:08:0d:df:72:43:8a:09:7e:d8:6c:f5:
                    a5:11:b8:04:1a:40:70:c8:6f:8e:bc:0a:b8:e0:92:
                    d4:f5:e2:d7:48:a6:7b:7c:e4:4b:a2:c2:26:16:b3:
                    74:e9:11:7d:66:c9:cf:2f:6e:67:7d:67:45:1f:d8:
                    7e:c5:30:f0:a3:83:b0:91:fe:55:a5:10:78:ba:76:
                    52:b6:a7:40:79:84:59:e8:f5:95:f0:39:1a:06:bb:
                    af:63:7c:6a:f6:6c:0f:fb:43:a7:4b:80:ec:d3:e3:
                    a1:89:f2:58:7f:48:30:96:70:76:f0:d7:3f:25:74:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DE:5C:66:70:04:20:7F:A7:9E:D0:78:B7:F2:31:80:62:C8:DC:4C
            X509v3 Authority Key Identifier:
                keyid:E4:1C:49:05:0C:BD:30:32:F0:41:D8:3A:7A:08:9A:3E:23:CB:E6:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/E41C49050CBD3032F041D83A7A089A3E23CBE621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E41C49050CBD3032F041D83A7A089A3E23CBE621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ab:dd:cf:3a:cb:ca:8a:a2:9b:87:79:c6:69:a2:39:5a:9f:
         5b:05:bb:d1:77:c7:9a:07:59:9a:80:1a:1c:b9:e4:db:21:a6:
         8f:18:aa:4b:fe:47:66:d8:ed:46:c9:65:e3:87:21:2e:2e:e0:
         e7:0c:94:ff:51:88:b9:83:71:f9:ee:21:5f:92:55:38:46:8f:
         bb:02:52:c7:95:81:7d:1b:00:9d:a3:b1:b0:b6:7b:9b:c8:21:
         77:0c:b0:1d:8b:53:e5:2d:63:02:60:b4:76:f8:bb:7d:5a:10:
         01:2e:2d:52:20:81:bf:ff:df:09:a5:d8:c4:c9:a7:72:71:ab:
         38:93:b6:99:ae:5f:ba:dd:be:95:59:5d:be:46:36:9f:82:bb:
         49:ee:45:ac:fc:83:6f:19:c9:24:1c:7f:07:e7:e3:0f:2e:cf:
         1b:0e:8f:1f:4b:95:c5:0c:e8:c0:17:9c:ca:3d:fc:55:91:8b:
         cc:d5:97:d4:1e:81:f7:64:78:ee:68:3a:bb:34:0a:14:04:b9:
         a0:89:4f:2a:27:b3:11:d5:da:c3:dd:b9:0a:e5:47:bd:88:19:
         48:5d:29:78:88:d7:19:83:6d:94:e1:d0:fd:28:a4:8e:f7:26:
         35:48:9f:15:dc:32:3c:09:d8:41:14:df:35:e5:00:3e:5e:41:
         76:89:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:26 2026 by rpki-client