Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/3130332e3231352e31392e302f32342d3234203d3e203634303331.roa
File:                     3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (raw, json)
Hash identifier:          s8bqhECIXkAJxts40iEri8kSn1VILtxMJjPuCOXLgvs=
Subject key identifier:   91:02:A5:15:96:0A:85:B4:96:7D:64:6D:0E:ED:CD:9D:26:11:B7:B1
Certificate issuer:       /CN=47C0520954E7036D01276256DF53723219F2EDC8
Certificate serial:       052746F4BE5AEC8802F79121EE47B1FF5270E158
Authority key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/3130332e3231352e31392e302f32342d3234203d3e203634303331.roa
Signing time:             Sun 03 May 2026 03:15:49 +0000
ROA not before:           Sun 03 May 2026 03:10:49 +0000
ROA not after:            Sun 02 May 2027 03:15:49 +0000
asID:                     64031
IP address blocks:        103.215.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl
                          rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:27:46:f4:be:5a:ec:88:02:f7:91:21:ee:47:b1:ff:52:70:e1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C0520954E7036D01276256DF53723219F2EDC8
        Validity
            Not Before: May  3 03:10:49 2026 GMT
            Not After : May  2 03:15:49 2027 GMT
        Subject: CN=9102A515960A85B4967D646D0EEDCD9D2611B7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:8c:e9:7b:67:c7:69:99:da:0d:58:d4:72:
                    07:20:b1:31:b5:3b:2f:61:cd:00:21:a9:eb:5b:41:
                    5b:1d:53:3f:4a:2c:23:f6:73:5f:d4:88:f5:52:3d:
                    4c:13:bc:10:3d:96:63:e7:25:46:d2:7d:ce:f4:7d:
                    8f:ef:b7:5d:28:66:17:3d:d8:e0:ef:e8:a6:76:a5:
                    42:21:7f:fa:a8:95:f5:d2:1c:6a:e7:b4:78:51:2d:
                    78:e8:da:8d:d8:6e:da:4f:12:97:7c:1a:91:65:5b:
                    77:c3:c0:eb:ca:8c:1c:2f:1f:77:03:fb:48:ae:8e:
                    a9:dc:1e:e0:45:c7:d7:ae:d9:8d:15:0a:d9:17:3b:
                    15:d2:ac:a6:80:e7:aa:51:04:99:72:49:9f:5b:9c:
                    58:47:75:df:25:fd:fb:7b:5d:53:3c:0f:2e:6d:4a:
                    e4:eb:d9:13:5f:a8:f3:e8:74:8e:31:8a:d7:26:18:
                    27:6d:b1:54:c8:c5:82:03:c1:d7:ed:89:f6:ae:ba:
                    0b:5a:05:c4:a4:42:e4:a9:2c:e9:dd:de:76:ea:a7:
                    ec:3f:4c:8f:0d:3a:01:c4:24:6f:c9:9e:5d:05:16:
                    cf:85:1d:5f:9e:e8:d8:ba:55:bb:42:81:e5:d3:3e:
                    04:a5:d8:db:e0:ec:fc:e5:31:da:10:d0:a9:6d:47:
                    8f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:A5:15:96:0A:85:B4:96:7D:64:6D:0E:ED:CD:9D:26:11:B7:B1
            X509v3 Authority Key Identifier:
                keyid:47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/3130332e3231352e31392e302f32342d3234203d3e203634303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:09:24:cc:7f:73:9d:57:38:f8:07:73:4e:a7:5d:5e:57:
         36:11:55:b9:df:dc:36:47:e0:32:d6:5a:13:07:d7:a1:84:bd:
         82:1b:8b:bc:fe:cd:dd:d0:4c:ee:12:5c:f3:9f:99:22:f7:d9:
         4d:1a:91:7c:fc:d9:f5:2c:3d:68:d0:53:5f:47:23:b5:33:1f:
         b9:6c:3f:a2:08:83:44:fe:95:f8:1f:c1:84:6d:c6:61:9b:fb:
         45:a7:cf:27:b1:ee:1e:a4:5f:41:59:73:27:80:9d:a6:5d:73:
         30:9b:25:d8:3a:5c:72:57:8b:81:50:4e:2c:35:71:c8:08:f0:
         24:54:b1:3f:e1:e9:9b:c2:b5:2c:fa:86:ff:2b:d8:df:9e:62:
         4e:e2:c6:f2:59:9b:15:c6:a6:26:fb:57:9a:ab:8b:68:b3:16:
         7a:44:ea:c9:3d:92:d3:ee:ef:86:19:8e:92:ad:a7:28:a7:a7:
         b0:c7:a5:40:e7:e1:fb:d6:cd:f3:4e:50:cb:30:79:92:f6:ff:
         cb:f4:87:aa:a0:70:80:c9:dd:1e:09:f0:b6:34:4a:7d:37:36:
         2a:7f:4c:53:72:2a:f8:03:c9:52:f4:e8:2c:73:17:cf:f1:92:
         d0:a8:e3:b3:7e:b5:f8:06:90:39:08:e4:21:9d:e7:ce:2b:5c:
         4b:8e:92:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:16 2026 by rpki-client