Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa
File:                     3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (raw, json)
Hash identifier:          oIB0azCHKZZD4LUQLYG0Yqlb4f/9KSBQ4JwecEqWsUw=
Subject key identifier:   E8:CF:51:C7:FB:5A:9F:DE:D0:61:4C:76:58:C4:81:D3:19:2D:FB:DB
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       26E630C37BD4A90A4A6B3DB0DA5CE3B31787BDDB
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa
Signing time:             Sun 03 May 2026 02:21:03 +0000
ROA not before:           Sun 03 May 2026 02:16:03 +0000
ROA not after:            Sun 02 May 2027 02:21:03 +0000
asID:                     149953
IP address blocks:        103.118.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 19:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e6:30:c3:7b:d4:a9:0a:4a:6b:3d:b0:da:5c:e3:b3:17:87:bd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: May  3 02:16:03 2026 GMT
            Not After : May  2 02:21:03 2027 GMT
        Subject: CN=E8CF51C7FB5A9FDED0614C7658C481D3192DFBDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f0:dc:01:22:c7:de:45:8b:16:8a:3f:e3:4e:
                    1f:bf:84:19:d4:07:c1:6b:46:2a:76:28:d7:47:33:
                    5a:07:52:84:1e:8e:cc:8c:7a:6d:e2:93:98:b0:72:
                    ef:81:7f:0c:d9:3f:34:6c:33:b9:4a:dd:2b:1a:ec:
                    67:c2:49:51:9e:17:67:f5:d2:90:4b:67:f5:aa:40:
                    82:42:ac:6a:26:e3:e8:33:61:f8:a6:00:ad:c1:bc:
                    e7:7d:fb:1c:74:77:a2:b8:cf:ff:01:ec:ba:7d:6d:
                    c4:bd:ba:da:f4:3c:ca:57:d2:96:eb:79:6b:09:bb:
                    43:cd:13:26:1e:18:15:60:c7:7b:ab:7e:04:b6:3c:
                    22:73:20:fa:74:eb:29:fb:9b:b3:15:b7:4c:7c:64:
                    9e:40:5c:48:db:a6:0b:19:39:f8:c5:9e:2e:1c:36:
                    27:09:9a:5d:a4:de:eb:38:fb:00:ea:63:18:ac:59:
                    5a:c9:ff:be:37:1a:39:7d:5f:dd:2d:d5:f7:4e:4e:
                    70:2e:aa:f7:57:37:4b:da:eb:4f:8e:53:4c:54:8f:
                    1c:42:2a:90:4c:49:6b:44:33:08:af:3c:8c:6e:40:
                    a6:6f:0e:11:73:b3:26:81:ae:2b:e6:4a:08:ee:08:
                    28:ba:d1:f0:d1:b4:37:78:c1:17:65:a9:54:3c:70:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CF:51:C7:FB:5A:9F:DE:D0:61:4C:76:58:C4:81:D3:19:2D:FB:DB
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:eb:df:87:3d:b4:a5:24:07:b8:3e:b2:f2:85:71:bd:48:b1:
         40:c7:da:a3:e0:29:ca:6b:ad:0c:92:5b:a8:47:2b:65:5a:87:
         4d:d3:53:4e:24:6e:8f:9d:6b:8b:9f:51:37:ae:56:17:a7:2e:
         95:19:5c:86:48:9f:ed:1c:8c:73:33:c7:38:b5:f9:c0:76:cf:
         1e:ca:b7:89:38:0a:4b:5d:4d:4e:2d:c5:65:37:58:e4:dd:e7:
         bb:d2:29:02:9d:fa:df:c7:02:a7:4f:f3:2d:86:04:7b:72:0b:
         e4:49:e4:04:d4:d3:89:b8:a7:7a:24:b2:ca:27:7d:e3:3e:31:
         1b:a5:d5:48:79:09:79:41:bd:d6:f0:16:a7:a0:68:dd:99:a1:
         30:28:b5:d4:48:ef:41:f4:b0:f2:82:7d:d3:77:77:7c:d3:e6:
         e7:fc:db:85:d2:69:bb:b8:ec:9d:6a:66:37:a3:40:0c:04:07:
         b8:23:f0:e4:42:ec:b1:9e:9f:8e:49:54:c2:10:ce:87:90:c5:
         ad:92:68:59:bb:77:83:59:38:d5:3c:94:49:66:0e:01:e0:5e:
         92:70:0b:cd:b5:b8:5c:31:37:fa:13:2b:8d:a5:8a:97:71:f6:
         f2:d4:4e:b7:13:28:64:d6:e9:86:87:f0:5b:4a:c8:43:53:b5:
         24:75:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:06 2026 by rpki-client