Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa
File:                     3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (raw, json)
Hash identifier:          Oz+MvkXknVOx+2kg9rHiPY0cXl051S4cpZ1FOmSXXT0=
Subject key identifier:   9E:CC:A2:DD:AB:17:FE:E1:93:2C:9F:81:6F:F1:FA:5C:63:E0:43:F4
Certificate issuer:       /CN=C1B31DA38AE18C533BF3125B438DFED7920609DE
Certificate serial:       19429A0DCB418EA6CB522216C38F70DEC4618A5B
Authority key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa
Signing time:             Sun 03 May 2026 03:18:20 +0000
ROA not before:           Sun 03 May 2026 03:13:20 +0000
ROA not after:            Sun 02 May 2027 03:18:20 +0000
asID:                     149383
IP address blocks:        103.181.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl
                          rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:42:9a:0d:cb:41:8e:a6:cb:52:22:16:c3:8f:70:de:c4:61:8a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE
        Validity
            Not Before: May  3 03:13:20 2026 GMT
            Not After : May  2 03:18:20 2027 GMT
        Subject: CN=9ECCA2DDAB17FEE1932C9F816FF1FA5C63E043F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:d0:1c:44:77:f5:70:96:a0:df:a1:f9:bd:
                    14:e1:0d:53:b5:02:8e:f2:5d:29:b4:25:3e:60:8c:
                    08:05:83:66:a3:e1:74:b0:c4:f5:cf:58:a9:ee:78:
                    50:95:8a:4a:5e:a7:f0:6b:6a:c0:d4:99:a3:da:f8:
                    d1:3d:e9:36:0d:a0:06:5b:41:19:cf:eb:ca:68:09:
                    12:86:ce:7a:89:a0:7e:3c:88:e6:ee:31:46:dd:b9:
                    0f:4a:ba:03:4b:84:9f:ee:33:e7:88:c9:48:96:8f:
                    2f:fc:83:be:c3:03:92:bb:58:23:70:07:50:48:eb:
                    f4:f0:42:18:33:34:f1:40:a5:e1:c0:e5:a4:da:e8:
                    19:19:b3:04:d7:10:a6:f1:0f:50:26:4b:e5:0e:6e:
                    73:de:f3:71:06:8e:e2:6c:d2:c6:da:dd:f1:18:96:
                    7e:cc:5d:4b:12:62:46:b0:99:1c:8e:ba:fc:8c:66:
                    15:ad:38:56:bd:c6:9c:b5:d7:11:e1:fe:02:f8:90:
                    04:aa:1c:9c:84:21:c7:b8:24:89:99:1f:8d:4c:2c:
                    07:63:fe:9d:06:16:90:2f:71:02:8b:68:e4:f7:39:
                    0f:3a:06:1f:57:d2:31:6e:b8:dd:45:9a:22:49:97:
                    ca:e1:a9:c9:68:fe:d1:2b:02:f1:11:58:c9:fe:52:
                    54:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CC:A2:DD:AB:17:FE:E1:93:2C:9F:81:6F:F1:FA:5C:63:E0:43:F4
            X509v3 Authority Key Identifier:
                keyid:C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:d9:fa:6b:8b:87:5a:25:08:83:a3:ac:5f:7d:7a:ca:59:86:
         17:b5:90:91:04:d9:d2:db:08:32:ff:87:29:68:2e:8b:45:4b:
         d1:f2:09:cf:10:2d:15:5e:47:bf:3a:07:3c:99:64:da:49:45:
         4d:e4:7f:a6:17:ab:e9:4b:53:85:1b:01:c8:81:43:8e:15:c3:
         a3:90:44:65:ec:46:c6:e5:ab:2f:8d:1e:8a:07:6a:77:c5:4a:
         0e:5f:91:a3:89:29:07:96:8d:bf:dc:21:4f:92:a3:c3:6c:e8:
         d6:ea:74:15:0d:e4:ab:df:36:d0:83:10:2a:0d:55:d8:21:bd:
         e8:c6:01:2c:81:b4:d6:a0:79:85:0d:96:82:b8:ed:83:f9:d6:
         73:92:a3:99:cd:b4:c7:fb:41:08:16:52:f5:b8:bc:39:ca:c1:
         ba:a6:c9:9e:b8:56:b4:3b:e8:09:e0:49:1d:34:4e:e4:06:f2:
         f4:ea:3e:08:a7:06:78:7b:b0:41:41:b1:33:ef:95:9f:cc:46:
         f7:3d:98:62:2f:7a:e0:ad:a7:80:0c:c7:a6:09:ff:af:6a:17:
         cd:a5:ec:97:40:02:d4:b7:4d:58:54:fe:0d:66:9b:4d:8a:58:
         9e:7c:85:43:d4:bd:95:4e:4e:ad:40:04:c9:87:41:02:ad:e0:
         02:0b:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:03 2026 by rpki-client