Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39352e302f32342d3234203d3e203435323935.roa
File:                     3130332e32312e39352e302f32342d3234203d3e203435323935.roa (raw, json)
Hash identifier:          d2NngQ1ClG3KccosIUCvHr+xZx4Rn0+Y8+h4km4ecJk=
Subject key identifier:   FC:87:27:8A:05:4C:3A:B7:39:A6:B2:E6:4D:71:3D:6B:CA:54:08:A0
Certificate issuer:       /CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
Certificate serial:       756D7AAAADC16BC31A53423A745E4827BD806C31
Authority key identifier: ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39352e302f32342d3234203d3e203435323935.roa
Signing time:             Sun 03 May 2026 03:16:06 +0000
ROA not before:           Sun 03 May 2026 03:11:06 +0000
ROA not after:            Sun 02 May 2027 03:16:06 +0000
asID:                     45295
IP address blocks:        103.21.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl
                          rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6d:7a:aa:ad:c1:6b:c3:1a:53:42:3a:74:5e:48:27:bd:80:6c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
        Validity
            Not Before: May  3 03:11:06 2026 GMT
            Not After : May  2 03:16:06 2027 GMT
        Subject: CN=FC87278A054C3AB739A6B2E64D713D6BCA5408A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:eb:c3:8b:9b:f0:09:8d:80:e4:f8:55:38:
                    b0:dd:9d:ab:3f:db:70:63:36:91:a4:5c:a7:cf:cc:
                    71:eb:7c:2f:e4:8d:97:c8:c0:46:b5:56:b0:57:39:
                    62:1b:73:50:33:c6:a5:26:80:76:d6:d0:d1:c3:3d:
                    6d:d7:1e:f8:fd:56:ec:ce:68:22:b5:9d:38:6f:10:
                    b8:94:ed:18:e5:ec:8d:75:0d:0a:50:ed:f7:ea:12:
                    87:f8:76:fd:4c:d6:4c:2a:6b:fc:fc:d6:a9:8f:2a:
                    35:81:16:1e:d4:76:ce:8e:cb:8b:6a:a3:69:0d:77:
                    1e:b1:f3:74:a0:d7:c9:56:fe:56:d0:f5:3b:4c:8f:
                    88:70:2e:5e:74:7b:e6:7d:0c:47:6d:71:1c:cf:af:
                    74:eb:d6:50:59:19:04:64:82:75:d8:88:3e:b5:b9:
                    3b:75:2d:e0:af:ae:4e:12:5e:88:4c:e1:6b:74:6c:
                    ae:f7:bd:ab:1a:68:01:27:9b:0f:2b:e2:92:ab:d3:
                    2a:57:9f:d4:3e:b7:ba:f5:3c:b1:73:75:59:3f:cf:
                    c1:2b:f7:1a:e1:fe:88:d1:ec:6d:b1:57:ea:c3:6c:
                    32:ef:a8:9c:38:f2:0c:cb:4d:6e:29:cb:ee:3a:9d:
                    55:6e:21:60:51:0b:79:1d:ef:b7:ed:e0:4f:89:59:
                    b3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:87:27:8A:05:4C:3A:B7:39:A6:B2:E6:4D:71:3D:6B:CA:54:08:A0
            X509v3 Authority Key Identifier:
                keyid:ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39352e302f32342d3234203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f5:96:18:70:1d:d9:52:83:26:84:3c:69:c9:c7:7d:15:64:
         cf:26:2f:4d:37:07:b7:35:25:4b:eb:f8:cf:e3:53:cb:80:30:
         1c:17:db:3e:96:d9:02:c6:99:9d:80:f4:de:4e:fb:a8:6f:a7:
         4d:f0:8c:49:04:5b:06:8c:d1:37:81:40:ed:f5:cb:cd:37:4f:
         c3:ba:43:2c:f8:b1:dd:ee:ce:55:49:0e:d2:7a:77:86:e2:bb:
         1d:37:37:da:4b:ae:37:83:8e:3e:0e:42:16:08:2b:a5:f1:2e:
         bf:8d:bc:e4:a4:27:e9:22:e0:c1:e0:67:56:3e:c1:4b:45:d5:
         e1:94:31:af:fe:3b:8c:b8:1e:c7:dc:5f:26:96:eb:b4:d8:ef:
         ba:aa:74:71:1d:3f:76:4b:05:00:d8:01:3b:9d:c1:1f:6c:97:
         11:fb:1b:90:29:93:17:db:de:2b:17:2b:f7:73:62:40:79:f6:
         39:75:1a:c3:93:f0:c8:cd:52:0a:14:e0:bd:bb:bc:f4:26:c2:
         32:65:e5:ca:6c:99:eb:32:8b:3c:be:8c:02:f5:c8:1e:b8:26:
         70:3c:4d:8c:01:6a:5a:33:09:a9:66:69:6b:c9:48:dc:9a:d2:
         ea:15:70:2d:de:75:2e:1f:dc:19:3e:d8:b8:8b:ce:5d:14:a5:
         f2:21:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:43 2026 by rpki-client