Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          AgnX33hKegMwrYhAa6LMCbwyf/iL+aW4yQiILvHBf5M=
Subject key identifier:   85:3A:F3:83:56:C7:AC:DB:42:49:00:83:ED:75:5F:0D:7C:E4:A4:9B
Certificate issuer:       /CN=378918D305E0BE46A36AC59393759E41074DA43B
Certificate serial:       68EA439DAED9E9B11FE6013E479E2CE17A1F9B13
Authority key identifier: 37:89:18:D3:05:E0:BE:46:A3:6A:C5:93:93:75:9E:41:07:4D:A4:3B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378918D305E0BE46A36AC59393759E41074DA43B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 02:51:47 +0000
ROA not before:           Sun 03 May 2026 02:46:47 +0000
ROA not after:            Sun 02 May 2027 02:51:47 +0000
asID:                     17995
IP address blocks:        103.170.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/378918D305E0BE46A36AC59393759E41074DA43B.crl
                          rsync://rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/378918D305E0BE46A36AC59393759E41074DA43B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378918D305E0BE46A36AC59393759E41074DA43B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 03:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ea:43:9d:ae:d9:e9:b1:1f:e6:01:3e:47:9e:2c:e1:7a:1f:9b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378918D305E0BE46A36AC59393759E41074DA43B
        Validity
            Not Before: May  3 02:46:47 2026 GMT
            Not After : May  2 02:51:47 2027 GMT
        Subject: CN=853AF38356C7ACDB42490083ED755F0D7CE4A49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:aa:eb:b6:e4:8f:d6:c5:64:86:01:d8:2b:
                    0f:6e:11:28:49:85:06:e3:50:a0:1a:e1:eb:5c:83:
                    ee:1e:e2:39:2e:0e:09:c1:e6:c8:41:2b:11:78:c6:
                    91:7c:6c:45:77:4c:64:97:6f:eb:5f:89:29:77:6b:
                    a2:60:1d:ca:3a:59:5b:17:91:d5:7a:7e:05:1d:4f:
                    22:6b:6b:09:cd:5d:70:f5:a1:51:c1:e6:08:f9:d5:
                    80:53:e8:64:45:2b:12:24:19:c6:4a:18:53:34:dd:
                    5b:88:ea:72:76:10:ab:cf:a8:06:f2:26:4c:ae:96:
                    67:6c:13:d1:e4:cd:c3:b3:b8:8d:e6:38:86:c9:f4:
                    42:ea:f1:e6:99:89:7f:aa:17:d8:72:e7:03:c7:6f:
                    3a:e4:c9:c9:d8:32:d1:c5:1d:11:41:93:fe:44:75:
                    eb:47:17:cb:09:aa:9c:34:e0:0d:48:ba:8b:13:44:
                    75:13:6f:12:d5:c2:47:22:f1:e6:17:6c:e2:df:60:
                    a3:d3:b9:5e:c0:0b:a5:91:d5:b8:29:b3:a9:25:d9:
                    68:12:da:46:c0:db:4e:01:d7:3f:5c:da:26:86:e2:
                    d0:5e:8c:69:f5:de:4c:dc:03:db:e9:d3:a7:15:68:
                    da:38:27:1e:c5:5e:4c:a5:9c:60:ea:51:e1:f8:e0:
                    ff:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3A:F3:83:56:C7:AC:DB:42:49:00:83:ED:75:5F:0D:7C:E4:A4:9B
            X509v3 Authority Key Identifier:
                keyid:37:89:18:D3:05:E0:BE:46:A3:6A:C5:93:93:75:9E:41:07:4D:A4:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/378918D305E0BE46A36AC59393759E41074DA43B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378918D305E0BE46A36AC59393759E41074DA43B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:dd:1c:f4:80:c4:67:b7:44:09:7d:37:3e:c5:28:17:12:
         84:21:77:d9:72:9c:0a:78:fa:20:00:b0:b3:0c:eb:d1:71:9d:
         f9:29:fc:2f:4e:5e:8e:97:ab:e2:35:13:b3:be:9a:8d:e9:f4:
         f2:d5:6a:31:4c:69:4a:bf:bf:27:9a:c2:5e:76:13:33:c1:b8:
         bf:82:5d:2c:68:9e:a5:94:aa:27:57:0c:b9:27:f6:90:06:75:
         63:0c:70:48:e0:a5:cb:98:50:08:46:b0:7a:ef:72:c4:12:72:
         ed:9e:2d:36:fc:04:66:b9:84:22:fe:2e:4d:fb:f9:42:46:be:
         25:72:f4:67:a3:46:91:79:f9:62:1f:fa:40:7b:9d:00:eb:06:
         b0:4a:c9:98:e2:84:76:fb:14:6d:32:3c:05:6b:3c:e3:58:5b:
         47:93:0f:86:9b:64:74:66:9c:7a:f6:c8:18:4b:b1:36:5c:32:
         a4:01:c3:22:12:cb:39:ed:9e:83:33:e5:b7:a7:13:54:84:b4:
         8e:d8:8e:1b:66:90:76:8e:60:52:8e:7c:76:86:a1:c0:66:ae:
         19:7f:8c:d6:37:8e:5f:20:ee:4a:c0:a6:aa:05:d1:98:fa:e8:
         95:09:d7:a6:8e:dd:05:06:66:7a:bc:e7:a3:86:50:03:96:ab:
         96:ab:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:36:37 2026 by rpki-client