Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138322e302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=
Subject key identifier:   5F:E7:0B:46:CE:FC:93:DD:13:CE:8A:29:09:A1:6C:A2:ED:01:98:73
Certificate issuer:       /CN=587FA9FD682D37BC3028319A65BCAECCE276314F
Certificate serial:       321A7C4D5619FADEEC0CACE58B16FE853B2693D5
Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:18:38 +0000
ROA not before:           Sun 03 May 2026 02:13:38 +0000
ROA not after:            Sun 02 May 2027 02:18:38 +0000
asID:                     9341
IP address blocks:        103.182.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl
                          rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1a:7c:4d:56:19:fa:de:ec:0c:ac:e5:8b:16:fe:85:3b:26:93:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F
        Validity
            Not Before: May  3 02:13:38 2026 GMT
            Not After : May  2 02:18:38 2027 GMT
        Subject: CN=5FE70B46CEFC93DD13CE8A2909A16CA2ED019873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:fc:29:6a:22:92:00:97:f0:1f:16:e5:5a:
                    32:3f:93:f8:c4:0e:95:1e:a1:51:70:8e:e0:39:72:
                    31:98:51:f1:38:6f:98:58:fb:de:5c:77:2c:d5:e1:
                    1b:c5:fc:9d:15:4c:8c:7d:39:a2:ef:a2:4b:fd:ff:
                    d2:cd:fb:d5:7b:00:71:f9:0e:07:38:ae:5b:57:42:
                    b9:12:28:4d:34:fc:e4:4c:7f:7e:52:3a:b4:b2:ad:
                    4b:a9:73:1b:c2:d6:f3:50:d3:f4:88:8a:fb:4f:49:
                    88:86:fd:6a:d5:64:c1:10:3b:5f:20:f3:c0:27:d0:
                    f9:22:a6:6d:e5:97:b8:53:8c:bb:48:e7:1b:93:ad:
                    91:d2:35:92:24:48:f8:66:83:12:0a:8b:62:b3:f6:
                    5c:87:f3:33:3c:5d:fd:d4:79:18:f2:8e:85:20:62:
                    f4:fc:ba:c1:d5:05:56:53:c7:90:d7:4a:6e:bf:68:
                    4c:9f:ad:d5:ab:4e:ee:5e:81:c0:75:ef:4f:39:f2:
                    9c:c1:5e:a0:50:07:38:2c:9a:c9:48:46:91:13:52:
                    e3:f2:d3:8d:b7:fc:ee:6d:6e:b2:96:5a:3c:37:0d:
                    8c:d5:e1:db:ea:20:4b:ec:f2:f3:78:8c:f1:6e:f1:
                    27:9a:e0:8c:32:56:48:b9:41:f7:f3:b7:ed:6b:3c:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E7:0B:46:CE:FC:93:DD:13:CE:8A:29:09:A1:6C:A2:ED:01:98:73
            X509v3 Authority Key Identifier:
                keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:9c:92:64:79:15:10:c3:88:2f:60:6e:7f:95:44:a1:3f:4d:
         e3:fd:f5:69:ad:27:87:c8:77:db:55:d7:ce:eb:59:a2:e5:20:
         ba:02:bd:00:be:b0:a5:84:2b:73:39:64:ca:05:e1:49:99:09:
         fa:f6:a9:2a:88:79:23:49:21:67:f0:bb:b5:35:bb:cc:d5:88:
         3b:51:e1:f1:8d:3b:eb:0a:72:e6:d1:74:b7:f2:11:ea:db:90:
         4c:cb:c4:25:05:c2:ac:b9:8f:f9:64:32:1d:35:f3:3f:1c:d4:
         f2:5b:b7:6c:3e:63:36:3e:cf:10:fa:8a:e3:66:bc:d2:3e:c7:
         b4:48:0b:7c:0b:78:b0:c3:98:5f:a5:bb:f4:d1:41:b1:a9:2d:
         82:8f:08:1e:0a:44:d6:ea:c9:a1:3c:e8:a1:38:18:b1:b6:54:
         df:db:fe:6b:52:d4:6f:cd:e3:3e:2a:48:5e:b7:cc:2e:c9:76:
         5c:da:49:87:cd:71:2d:01:b9:23:86:41:a8:f8:23:71:de:55:
         90:8b:c3:a3:f8:58:eb:e8:77:17:67:b1:8c:25:e4:98:04:aa:
         b1:0b:13:73:fe:a1:31:69:7d:ce:e2:fc:50:b8:1d:ee:21:69:
         88:d9:ad:e2:cb:04:0c:36:bb:72:71:f6:5a:8a:4e:fb:1e:89:
         97:6f:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:26:45 2026 by rpki-client