Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa
File:                     3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (raw, json)
Hash identifier:          2pXek6gWnmZ3X1sQ40jRh2qfPg290PWebfx41xborSQ=
Subject key identifier:   CC:BF:65:82:3D:0D:E7:71:20:E9:B4:0A:87:F3:19:58:69:DF:5F:6C
Certificate issuer:       /CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3
Certificate serial:       479E102974A1AED41C07FB2B9361FE9293654625
Authority key identifier: 81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa
Signing time:             Sun 03 May 2026 03:19:38 +0000
ROA not before:           Sun 03 May 2026 03:14:38 +0000
ROA not after:            Sun 02 May 2027 03:19:38 +0000
asID:                     139453
IP address blocks:        103.145.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl
                          rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9e:10:29:74:a1:ae:d4:1c:07:fb:2b:93:61:fe:92:93:65:46:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814D7CA8F5A8628856D43D1E201A31492D12C1C3
        Validity
            Not Before: May  3 03:14:38 2026 GMT
            Not After : May  2 03:19:38 2027 GMT
        Subject: CN=CCBF65823D0DE77120E9B40A87F3195869DF5F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:13:e1:2d:61:1f:b6:6c:ed:ca:3e:45:77:
                    28:5b:17:93:30:b8:68:50:fc:15:9f:30:9c:f2:1f:
                    0e:d7:79:14:92:47:57:b7:a6:14:7d:d6:69:34:c1:
                    91:13:d8:ba:11:6c:9f:aa:b7:a6:83:72:f4:bc:87:
                    52:bd:c1:6e:cc:07:d4:67:f3:26:92:03:6c:de:6f:
                    04:f4:d4:76:d0:73:77:dd:ff:a7:1f:61:75:19:3a:
                    ab:a9:61:e4:8f:74:7a:6e:14:fb:e6:d6:3d:e5:12:
                    3a:43:fa:95:62:55:29:c8:4f:72:84:49:25:3c:43:
                    d7:74:35:46:98:e5:64:60:b1:55:4c:16:22:59:9c:
                    3f:70:ed:6d:1c:4e:0b:0e:35:b8:2c:6a:37:46:ae:
                    1e:e6:a6:3c:1b:71:68:f0:d3:81:a6:ad:f4:9f:a8:
                    2a:94:eb:af:ef:d8:72:fe:41:41:1e:33:5d:b5:a7:
                    af:df:05:f1:65:c7:ae:db:e7:66:d0:21:01:36:e9:
                    b6:cf:7f:5f:e4:97:5a:c9:00:0f:5b:d3:46:b0:90:
                    15:8a:9e:86:56:17:60:a6:80:eb:5b:a9:c1:e1:5f:
                    c5:3f:eb:1d:79:15:0e:55:ed:b2:9a:d5:1a:e7:a0:
                    bf:e1:9f:f5:00:05:d9:35:43:90:6c:b9:9f:da:55:
                    06:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BF:65:82:3D:0D:E7:71:20:E9:B4:0A:87:F3:19:58:69:DF:5F:6C
            X509v3 Authority Key Identifier:
                keyid:81:4D:7C:A8:F5:A8:62:88:56:D4:3D:1E:20:1A:31:49:2D:12:C1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/814D7CA8F5A8628856D43D1E201A31492D12C1C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/814D7CA8F5A8628856D43D1E201A31492D12C1C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:3f:91:32:7e:f0:a6:eb:c1:b9:97:47:51:55:79:db:83:19:
         9e:6a:94:b0:70:03:c3:15:16:c7:fd:45:9c:81:af:ac:72:cd:
         bc:99:d5:45:61:a0:6d:25:44:26:ad:a1:54:69:bf:c1:44:80:
         e2:bd:f5:14:7d:f7:da:5b:a8:df:c6:b1:4a:96:e3:b0:eb:20:
         a5:9d:79:52:c0:f6:71:9a:93:dc:fa:ba:da:1f:55:94:3f:13:
         91:be:94:5a:1f:ff:9b:86:66:00:33:e8:0e:a3:1e:62:79:cf:
         19:dd:23:b6:e7:2b:7f:a4:0c:a9:86:bd:41:3a:11:1b:24:5a:
         56:7e:e4:02:5f:3f:92:58:4c:58:ed:fb:d3:b0:b4:7d:dc:ff:
         a1:38:91:71:5c:f5:fb:6c:7a:8c:43:17:15:d6:60:26:30:5d:
         9c:bb:0a:d5:2f:42:55:5c:87:3e:b5:da:1d:ca:44:61:f0:23:
         c0:d3:02:7a:39:d0:92:37:6c:87:b4:59:70:40:5c:c4:f2:68:
         30:aa:3f:be:a5:29:32:78:97:89:e0:f7:35:cf:68:da:e2:ff:
         47:c2:cf:7a:c0:dc:e6:67:a6:1d:3c:2d:63:e3:17:27:6f:8c:
         d1:9e:8f:39:cd:f0:6c:22:02:2e:83:1d:f1:29:c4:22:44:71:
         bc:30:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:27 2026 by rpki-client