Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa
File:                     3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (raw, json)
Hash identifier:          qFviTkAJdjhBsY+4vQ6F1D24Kw3W6hG5KcLt5OTgeis=
Subject key identifier:   C6:6E:C1:79:F8:EF:1E:B6:FE:5E:EA:47:81:B8:EE:3E:42:58:12:06
Certificate issuer:       /CN=5A5DD73D891416196AA5239D921D189D149B622B
Certificate serial:       43AED57014A0906C0B4E666379F3BE4DD30ACB5A
Authority key identifier: 5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa
Signing time:             Sun 03 May 2026 02:12:31 +0000
ROA not before:           Sun 03 May 2026 02:07:31 +0000
ROA not after:            Sun 02 May 2027 02:12:31 +0000
asID:                     58495
IP address blocks:        103.190.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl
                          rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 21:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ae:d5:70:14:a0:90:6c:0b:4e:66:63:79:f3:be:4d:d3:0a:cb:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5DD73D891416196AA5239D921D189D149B622B
        Validity
            Not Before: May  3 02:07:31 2026 GMT
            Not After : May  2 02:12:31 2027 GMT
        Subject: CN=C66EC179F8EF1EB6FE5EEA4781B8EE3E42581206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:78:f7:f3:4c:f9:e0:22:17:d6:39:9f:4b:d9:
                    9b:20:70:76:77:35:e3:49:4b:71:9a:70:74:67:26:
                    d3:c9:6e:ae:e3:57:4b:14:8f:53:8e:31:51:80:14:
                    0e:30:d4:0c:60:19:5c:e6:e9:81:6a:59:a1:5d:7f:
                    2d:92:f6:e8:7c:2f:85:47:1e:94:50:5c:31:1e:19:
                    7d:92:7d:b4:59:fc:64:6f:01:cb:bc:38:ab:ce:b1:
                    36:91:98:ca:e9:04:54:5e:4d:b9:66:7b:d6:6d:80:
                    18:72:d7:a8:2e:a9:a4:73:76:01:bb:be:8a:eb:9a:
                    3c:20:5c:8b:ff:d0:e0:6d:3e:4d:43:61:8e:15:c1:
                    b4:71:42:bd:bf:a9:11:15:4e:6d:a9:b4:cf:25:d8:
                    bc:ad:74:3b:4e:1a:ed:5f:1e:7e:8e:33:33:1f:d6:
                    b5:ad:22:c9:a7:b0:4a:b6:21:26:c6:23:c8:42:2a:
                    08:b9:61:9a:a3:e7:1f:0c:b7:c0:9f:40:75:36:49:
                    f6:df:d8:ec:24:11:0c:fd:4e:09:dd:84:87:c0:5f:
                    96:01:bd:4b:d2:7f:03:3d:66:6f:72:16:b0:79:a8:
                    3c:bd:d6:aa:bb:30:ad:34:b3:08:d7:f8:6f:0e:a4:
                    f4:cb:fa:6d:8e:86:2b:86:75:d1:36:5d:0d:1d:e7:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6E:C1:79:F8:EF:1E:B6:FE:5E:EA:47:81:B8:EE:3E:42:58:12:06
            X509v3 Authority Key Identifier:
                keyid:5A:5D:D7:3D:89:14:16:19:6A:A5:23:9D:92:1D:18:9D:14:9B:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/5A5DD73D891416196AA5239D921D189D149B622B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A5DD73D891416196AA5239D921D189D149B622B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:89:fb:c0:bb:43:d2:9b:0d:bf:15:92:a3:9e:22:af:0c:bf:
         5b:8f:09:e7:f8:89:3d:9d:79:97:dc:40:7e:c9:12:2e:37:d4:
         d0:06:53:c1:5a:18:d2:07:c6:21:d8:8a:ce:3a:a3:af:b2:eb:
         4a:28:8f:9d:3d:f0:04:43:6a:a5:1c:16:cd:2c:93:d4:e6:7b:
         e8:57:46:10:7c:96:d4:70:a6:19:22:ec:6a:e3:08:44:5f:06:
         95:c7:96:32:39:a4:ce:29:95:50:b9:8f:84:6d:74:27:91:e0:
         59:bb:0a:52:ac:f4:03:7d:e7:ff:05:cd:c2:3a:55:e1:b4:48:
         8b:94:90:ec:d7:a5:27:6b:10:95:86:73:c4:e4:87:d5:e1:86:
         2d:1c:14:37:1e:b5:9a:af:3d:08:ce:6b:19:e4:00:2f:70:d1:
         06:13:fa:62:c3:13:1d:9f:3a:95:24:42:7f:10:94:b1:e8:05:
         5b:c8:8d:f5:94:65:b0:41:80:09:e1:21:87:40:e8:a4:62:1b:
         bd:09:bc:72:57:68:8a:76:b3:92:23:8e:f3:b6:df:dc:09:6e:
         f0:80:ae:3c:5e:44:8c:c3:bd:d8:08:cb:e5:86:99:a3:18:7f:
         f2:c2:b9:06:77:62:22:09:0b:bf:31:58:96:a2:50:36:63:c5:
         f7:e8:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:25 2026 by rpki-client