Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa
File:                     3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (raw, json)
Hash identifier:          FM7P4A6GhMRCdFWVFylFnVzysNCeJktD7lQb8mDxaKs=
Subject key identifier:   C0:A2:AD:1F:37:AF:F5:14:5F:43:7A:AB:73:0C:5C:7C:6C:BA:4F:BE
Certificate issuer:       /CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
Certificate serial:       1F6595AC305ACD1C60EABCE962E520C98D6AC19A
Authority key identifier: B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa
Signing time:             Sun 03 May 2026 03:18:35 +0000
ROA not before:           Sun 03 May 2026 03:13:35 +0000
ROA not after:            Sun 02 May 2027 03:18:35 +0000
asID:                     152014
IP address blocks:        203.175.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl
                          rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:65:95:ac:30:5a:cd:1c:60:ea:bc:e9:62:e5:20:c9:8d:6a:c1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
        Validity
            Not Before: May  3 03:13:35 2026 GMT
            Not After : May  2 03:18:35 2027 GMT
        Subject: CN=C0A2AD1F37AFF5145F437AAB730C5C7C6CBA4FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:15:8d:02:dc:5e:fa:68:9a:a3:da:25:07:
                    ac:b5:9f:ff:ca:fe:ae:23:f8:86:db:6a:27:97:bc:
                    90:b9:67:ba:02:0c:1a:e9:8e:91:29:8d:96:ad:fa:
                    8e:06:fb:ef:df:c7:93:97:f7:fd:cd:0c:e1:28:47:
                    1c:63:49:af:85:43:e1:cd:cb:f3:a8:3b:b8:7b:1c:
                    50:9e:f7:40:01:9a:60:01:06:e8:75:59:ea:2e:7f:
                    1b:1c:de:c7:69:13:18:d8:e9:de:ce:9e:68:d0:76:
                    d5:0c:70:07:b8:ba:43:44:e7:b3:26:ff:af:3c:41:
                    a6:50:fe:0a:76:75:78:1b:ad:5f:32:dd:4d:10:b2:
                    9e:9c:10:ff:1a:db:25:5c:ab:9d:b6:4b:8e:ff:2a:
                    5b:2f:d6:91:02:01:91:d0:bf:9c:dc:46:ca:24:be:
                    2c:dd:a9:36:8a:92:3f:2d:65:44:ef:63:77:46:b9:
                    ff:60:f8:e1:06:29:8f:63:ff:fa:01:7e:ac:19:1d:
                    97:c0:86:dc:f4:2b:06:06:fb:a1:04:5e:b0:d1:d0:
                    a1:8c:96:2a:43:26:db:b5:61:b5:fc:41:7c:f5:28:
                    d1:7c:e8:5e:3b:8f:d5:cc:3d:22:55:da:67:12:41:
                    b7:ee:a5:62:ab:d7:b5:0d:5c:06:7f:1b:0b:b7:88:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A2:AD:1F:37:AF:F5:14:5F:43:7A:AB:73:0C:5C:7C:6C:BA:4F:BE
            X509v3 Authority Key Identifier:
                keyid:B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:72:ac:c9:1f:a9:2e:54:7e:36:f3:ff:0a:4c:a4:4a:3c:6e:
         73:b9:ea:1b:72:d9:27:a9:19:a7:61:f1:39:e6:45:ef:71:99:
         93:85:bc:a0:ec:db:42:80:22:fa:bc:97:33:b8:06:94:fc:37:
         91:fa:27:f8:b8:17:39:6a:06:06:7c:26:02:87:fa:d2:c1:05:
         f9:2e:99:95:4f:f7:0c:d9:61:f1:e6:da:08:65:2f:91:00:3f:
         29:74:97:3d:fc:d9:9a:84:ac:c8:4f:d8:dc:26:aa:8e:31:f8:
         20:50:4c:2c:fa:fc:24:16:08:53:dd:70:62:0c:6e:9a:c8:0f:
         c6:1e:0d:a7:6f:7d:ea:02:e6:23:e6:67:37:98:04:b0:f2:8b:
         09:d7:f3:02:19:62:5e:86:1a:39:22:67:cd:0b:81:b7:e5:e0:
         9e:22:79:4e:37:09:1e:1f:b6:1b:f1:24:75:51:36:01:c9:67:
         73:d1:64:d0:fb:ce:b7:86:5e:e0:cb:c3:19:a5:e6:ea:fa:ee:
         c7:47:87:52:57:53:2c:ff:6e:0d:bc:85:ec:2c:2b:b7:36:b7:
         7a:1b:a9:87:8b:6a:31:3a:d4:39:84:2f:a3:b2:40:ea:63:5c:
         d7:3c:e7:c0:ca:f9:ca:23:b1:79:d2:27:a6:3c:06:4d:7f:3f:
         03:72:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:30 2026 by rpki-client