Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (raw, json)
Hash identifier:          0dcgbUIE4O45ZJeQQknhi7QzWy9JrD3T/y5JsTnfFC0=
Subject key identifier:   2D:79:E5:5F:97:F8:77:1C:1F:D1:B1:F8:2F:F0:FC:54:9A:9A:E6:E2
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       79F82F861E138860D060EABCCCD8BF898B9A0848
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa
Signing time:             Sun 03 May 2026 02:21:02 +0000
ROA not before:           Sun 03 May 2026 02:16:02 +0000
ROA not after:            Sun 02 May 2027 02:21:02 +0000
asID:                     149953
IP address blocks:        103.118.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 19:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f8:2f:86:1e:13:88:60:d0:60:ea:bc:cc:d8:bf:89:8b:9a:08:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: May  3 02:16:02 2026 GMT
            Not After : May  2 02:21:02 2027 GMT
        Subject: CN=2D79E55F97F8771C1FD1B1F82FF0FC549A9AE6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:18:c5:9c:1f:1e:72:b8:ab:06:a1:33:eb:
                    6c:bb:73:ef:7e:67:94:ec:63:68:f7:b2:ca:f0:56:
                    6c:99:b8:58:43:77:47:69:1d:56:87:eb:11:21:13:
                    93:ec:d3:f3:5d:dd:ad:c7:59:99:00:14:3c:68:e8:
                    75:05:2f:d2:fb:de:a4:18:f6:1b:9d:79:fa:59:5f:
                    81:66:b2:e7:26:71:84:a7:07:7d:42:30:28:af:e1:
                    05:b5:af:bf:20:65:e3:46:77:b1:f4:52:7d:24:38:
                    f3:10:26:bf:88:b9:6e:96:1b:c5:bc:2a:2e:84:ed:
                    a1:36:12:eb:26:61:d3:65:32:60:58:ba:ab:23:94:
                    5f:0a:8d:dd:bd:f9:f0:31:e1:7f:48:df:40:dd:d8:
                    18:ad:7a:f0:8e:ec:60:db:31:05:5b:7b:a7:7b:c1:
                    df:ec:cb:ed:24:11:c3:f8:b4:47:9b:5b:4d:21:a5:
                    81:52:1b:6c:ab:c3:83:7d:26:0d:f3:83:54:19:a8:
                    ed:d8:4a:37:3b:9e:a1:14:40:3c:99:09:0c:94:ec:
                    84:40:61:e4:c8:94:61:57:2f:b1:39:d1:4b:2f:4e:
                    b7:4d:11:b8:a7:1b:cd:10:91:ec:6d:43:a7:a5:07:
                    05:b3:af:44:ea:0e:f3:20:8b:37:26:74:82:89:f1:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:79:E5:5F:97:F8:77:1C:1F:D1:B1:F8:2F:F0:FC:54:9A:9A:E6:E2
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:48:68:25:34:2e:e6:cb:51:e5:5b:70:94:91:bd:c0:d9:
         fa:49:13:30:74:ad:9a:10:0b:e5:19:17:d9:48:73:50:72:af:
         1b:2d:a7:d1:99:a8:24:6d:94:f0:f8:87:4c:e6:da:1c:23:85:
         b9:50:fc:33:2c:5b:23:3d:6f:bb:b0:7a:38:7e:27:b3:29:3d:
         ab:04:4c:8f:02:f7:b9:ee:6a:f4:6f:b0:cd:9b:7e:80:98:26:
         58:60:bf:f6:14:e9:06:ae:53:31:cd:8e:b3:b9:de:bc:73:ca:
         ca:d4:dc:cd:38:24:8b:76:37:1e:45:14:0b:3c:68:6a:80:14:
         f8:d1:52:67:39:e3:60:47:ee:77:94:e0:c2:17:70:ed:49:80:
         0b:0d:a3:35:70:f9:82:a0:64:0d:ed:de:59:68:fa:41:43:c8:
         01:91:96:04:50:07:e4:fe:d4:98:90:61:6f:d8:65:1d:ea:9e:
         2a:0e:6b:63:6e:66:53:ad:f4:bb:e4:c6:bc:90:bc:8c:20:d9:
         08:14:71:e9:dc:d4:4d:0d:0f:39:ef:c6:16:fd:74:d2:c1:32:
         27:d4:5b:65:49:53:d5:18:83:b4:63:5c:e4:76:80:0c:f5:d2:
         ba:09:8f:37:ec:a8:c8:8e:9a:34:2f:e6:a0:39:c0:01:0f:3e:
         72:20:31:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:06 2026 by rpki-client