Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa
File:                     3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa (raw, json)
Hash identifier:          BPYAzlmVCSDysVPnzRbriP0ZO+KBD1gNQiYmmJ0AsGc=
Subject key identifier:   89:95:45:ED:B5:51:12:68:35:48:DD:7D:74:6A:DD:37:48:CC:5E:B6
Certificate issuer:       /CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
Certificate serial:       203AEB121F2EE4874E76354A7DD8A034E5A4A6F1
Authority key identifier: AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa
Signing time:             Tue 18 Aug 2026 13:58:36 +0000
ROA not before:           Tue 18 Aug 2026 13:53:36 +0000
ROA not after:            Tue 17 Aug 2027 13:58:36 +0000
asID:                     139980
IP address blocks:        103.148.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl
                          rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3a:eb:12:1f:2e:e4:87:4e:76:35:4a:7d:d8:a0:34:e5:a4:a6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
        Validity
            Not Before: Aug 18 13:53:36 2026 GMT
            Not After : Aug 17 13:58:36 2027 GMT
        Subject: CN=899545EDB55112683548DD7D746ADD3748CC5EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:9f:52:65:00:3b:22:db:6d:9f:1e:c1:64:
                    e4:fa:98:f5:5b:81:c0:1a:cc:bf:cb:96:db:6b:a7:
                    43:fe:be:77:4d:39:d1:40:23:ab:fc:ad:19:d1:80:
                    26:3c:62:f7:fc:32:3c:de:88:e2:85:29:60:eb:d9:
                    a5:1c:c7:c5:3c:c9:8e:35:7e:3d:0a:e9:ee:21:74:
                    7a:36:61:f6:af:37:97:59:40:0a:18:8e:bd:5b:9e:
                    77:e0:cd:4b:7c:82:86:32:7f:fe:b2:63:b0:e9:9d:
                    2a:5f:c3:89:e4:20:da:c0:91:0f:08:39:1b:db:f6:
                    c7:ad:f6:1c:7b:8b:c6:06:e1:12:d7:8a:80:c0:59:
                    32:1b:c0:07:f9:e8:bd:1d:82:06:a7:6e:d0:d2:4e:
                    af:f7:a6:fd:a7:08:c6:7e:a0:6c:d6:10:92:21:e5:
                    18:e1:b7:1f:84:23:8e:5c:0a:47:a1:8b:25:a7:dc:
                    3d:04:f3:45:90:ca:a2:35:ea:96:0d:c4:79:61:60:
                    6b:9d:ae:e0:38:5c:8d:31:0c:bc:48:d8:c3:83:bc:
                    20:4f:76:30:3d:92:07:d8:a4:c4:2d:ad:ac:a8:72:
                    bf:ff:99:e5:e6:97:92:ce:68:d3:3d:10:dc:21:dc:
                    a0:e4:96:8f:86:d2:63:8f:01:d4:75:ea:49:ec:11:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:95:45:ED:B5:51:12:68:35:48:DD:7D:74:6A:DD:37:48:CC:5E:B6
            X509v3 Authority Key Identifier:
                keyid:AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:63:99:27:87:96:7c:6c:12:22:6d:4d:64:b4:57:94:4a:
         e9:16:70:fd:89:3c:2b:a5:0b:d9:a9:4b:eb:59:c2:cf:e6:5d:
         30:76:ea:b3:0d:9f:36:bb:c7:cc:4d:0c:6a:3c:bd:9e:9c:b7:
         66:aa:c6:30:14:1b:d1:f1:52:69:ea:e4:fb:4d:59:63:ad:95:
         f8:19:95:4e:86:56:6d:04:2b:ad:6f:61:3a:bf:91:82:80:0b:
         af:c5:0a:e4:8b:e6:76:45:bc:53:2c:54:b4:d4:c9:21:ce:fe:
         d5:2b:25:53:d7:9a:68:b9:11:55:d1:0e:5b:2c:87:85:44:91:
         bd:e3:77:e9:f2:ca:99:8c:33:df:2b:a0:ad:b9:22:fc:fd:e7:
         d4:57:4e:ee:5e:26:30:ad:20:a3:ca:ee:91:09:0b:6a:77:43:
         98:36:56:9c:fe:74:76:b2:00:6c:4b:d5:42:f6:1a:11:24:ab:
         70:5d:97:4c:2b:72:1a:9e:98:4b:05:31:b7:58:84:34:d2:ec:
         93:02:52:b9:7d:e4:b4:5a:b3:e0:58:a1:22:02:c2:eb:a7:36:
         35:41:20:7f:93:81:70:95:da:2b:5a:d9:29:34:5d:06:0d:0e:
         d7:75:ff:6c:58:d2:ec:b0:4c:44:31:ff:c0:23:5c:a8:8e:c3:
         42:9b:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:26 2026 by rpki-client