Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa
File:                     3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (raw, json)
Hash identifier:          fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=
Subject key identifier:   49:C3:69:2C:A3:34:6D:87:99:BD:45:EE:03:5C:F1:F1:6F:D9:97:8E
Certificate issuer:       /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4
Certificate serial:       3BD329ABBA812215C6F81B90A6544DCDE09CF876
Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa
Signing time:             Sun 03 May 2026 03:14:52 +0000
ROA not before:           Sun 03 May 2026 03:09:52 +0000
ROA not after:            Sun 02 May 2027 03:14:52 +0000
asID:                     149409
IP address blocks:        103.183.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl
                          rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d3:29:ab:ba:81:22:15:c6:f8:1b:90:a6:54:4d:cd:e0:9c:f8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4
        Validity
            Not Before: May  3 03:09:52 2026 GMT
            Not After : May  2 03:14:52 2027 GMT
        Subject: CN=49C3692CA3346D8799BD45EE035CF1F16FD9978E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:ae:e1:bd:47:1f:24:42:ad:87:d8:97:fe:
                    d3:00:87:79:92:58:5f:6f:fc:1c:de:6d:9f:ad:8d:
                    7d:dd:70:74:3e:35:5b:4b:92:d0:e5:79:7f:a8:3b:
                    0e:f9:09:40:ae:8d:9b:f2:39:33:69:49:d4:bb:7c:
                    05:47:dd:a7:56:58:4d:b6:71:d1:bd:71:5d:ca:32:
                    9a:04:a9:b5:a1:cf:e1:ea:9f:59:2e:41:08:35:e0:
                    66:81:de:d0:42:0d:4f:12:83:42:a1:1a:29:7e:35:
                    7b:34:c6:3a:be:07:1d:a5:fe:af:cb:ff:57:c9:96:
                    4b:a8:5b:aa:02:c8:70:a6:b4:50:ba:0a:d2:a4:6b:
                    81:f1:98:e7:11:cb:e2:df:49:03:75:56:b1:d6:e8:
                    3e:59:79:36:2c:21:a9:42:b1:c7:97:a0:c7:9a:47:
                    57:92:18:08:59:fe:1d:e7:46:be:27:15:5e:5b:98:
                    0a:ae:59:5f:64:a0:3d:8c:19:4f:48:93:f6:f1:84:
                    35:3d:e9:4b:e0:63:78:ed:78:2a:db:46:b4:a0:0a:
                    61:aa:fa:bb:28:3f:39:15:e2:85:07:a6:a7:01:36:
                    07:ea:60:a5:0e:2f:ea:bb:b2:af:08:d3:84:37:87:
                    31:66:93:71:7b:f3:73:11:d7:c0:be:b6:f7:ab:d0:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C3:69:2C:A3:34:6D:87:99:BD:45:EE:03:5C:F1:F1:6F:D9:97:8E
            X509v3 Authority Key Identifier:
                keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:2b:88:a6:c7:bd:0d:d8:07:22:eb:97:f7:e0:0d:3a:cd:7d:
         1c:78:c8:bb:49:2b:37:9a:b3:7d:22:c0:a1:b5:7c:ce:d1:76:
         78:38:78:ea:35:0b:5d:1d:8f:93:fe:0f:9a:bc:62:f2:6c:d3:
         f4:a9:98:e8:f8:4b:5f:d7:8b:1e:60:51:c2:ee:7d:45:6b:0f:
         7d:83:19:3b:04:2f:49:63:02:af:56:4b:3b:42:b0:04:6b:d3:
         fc:a5:37:80:43:fb:3b:77:32:90:62:4d:24:17:ad:43:1b:b1:
         77:45:4a:da:6a:ad:81:a9:d3:7d:80:31:a2:29:c4:c2:bd:18:
         d4:cf:08:a0:05:65:05:3b:74:c8:a0:24:bc:33:11:eb:b3:59:
         e7:47:9a:0b:15:c3:14:ec:69:3d:27:4a:28:63:d3:e1:aa:58:
         44:f2:b1:56:7c:a5:19:37:7a:01:57:c8:72:55:7d:d4:bb:51:
         46:2a:7d:2a:e7:37:bc:fa:aa:ad:6c:42:04:e3:3d:35:3c:ae:
         03:77:06:66:58:a3:b5:f5:26:98:83:d3:ef:a8:40:7e:dc:f2:
         56:cb:35:b1:fc:d4:7c:d7:ed:19:c8:e9:38:7b:a8:8c:04:f6:
         33:90:de:9f:88:ff:88:78:72:02:7f:3c:f3:f0:0a:b5:75:9c:
         25:8e:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:44 2026 by rpki-client