Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (raw, json)
Hash identifier:          jNXjwR9NoJrp9dtiwnlZ8ZD+nF3IUWQs6hiqUnrS/Ok=
Subject key identifier:   0A:5B:E6:11:33:F3:91:F4:A1:84:8A:24:5E:B9:D0:1B:15:EE:C1:70
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       31F3F96427D260753CF4B4370870FF4D327B2DC0
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa
Signing time:             Sun 03 May 2026 02:20:59 +0000
ROA not before:           Sun 03 May 2026 02:15:59 +0000
ROA not after:            Sun 02 May 2027 02:20:59 +0000
asID:                     152368
IP address blocks:        103.118.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 19:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f3:f9:64:27:d2:60:75:3c:f4:b4:37:08:70:ff:4d:32:7b:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: May  3 02:15:59 2026 GMT
            Not After : May  2 02:20:59 2027 GMT
        Subject: CN=0A5BE61133F391F4A1848A245EB9D01B15EEC170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:6d:cc:ad:d7:0b:66:be:dd:62:3a:84:85:
                    77:ea:63:8f:5b:3d:70:a9:a6:66:92:72:f2:5a:64:
                    f7:bf:01:fc:89:ef:32:f1:3e:b2:64:81:23:a3:4f:
                    eb:ac:71:f4:6d:bc:3c:59:cf:f0:71:43:86:13:41:
                    ab:a0:7e:9b:b8:e6:2f:c1:b7:d6:db:56:5a:dc:c5:
                    32:0e:29:5c:bd:21:9c:18:ba:18:20:08:54:11:ed:
                    1d:e1:01:19:d7:10:5b:e7:5b:cb:3d:01:1e:d5:48:
                    6d:a8:19:9c:23:83:60:be:e8:d3:d6:be:86:c9:bc:
                    a5:d7:22:b9:5a:95:38:05:35:a8:ed:39:b7:70:fe:
                    04:a5:9e:60:e5:3a:57:22:8f:de:7c:87:70:29:20:
                    42:73:0d:09:4e:12:9c:e0:2b:21:56:48:84:11:33:
                    58:77:98:c4:b9:d4:ee:11:88:d9:24:0c:a5:d6:19:
                    ed:9e:99:0c:36:74:b2:00:ed:66:47:fa:22:ed:e4:
                    a5:71:97:1a:73:3e:7d:7f:93:80:8e:5d:77:cd:4d:
                    f6:d8:60:2b:ab:16:68:86:27:d3:82:03:cd:d4:0c:
                    1a:56:11:ec:a5:aa:54:cf:f4:b1:4e:2b:db:7c:38:
                    61:f5:f1:04:cb:82:a4:a3:2d:7d:01:a4:92:2e:53:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5B:E6:11:33:F3:91:F4:A1:84:8A:24:5E:B9:D0:1B:15:EE:C1:70
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:47:22:e2:08:34:9b:ba:43:38:df:5f:c0:83:13:c2:c7:2b:
         29:41:6d:55:51:98:c1:78:2e:57:2e:fd:9b:7a:f8:f4:0c:94:
         95:de:9f:ff:1d:fc:9e:73:94:9c:51:09:10:f6:4c:33:d3:9f:
         71:eb:2d:98:32:0b:d0:5e:b0:6e:c8:f5:d5:c7:da:4d:88:27:
         e0:c4:cf:4f:b4:01:b7:d2:a2:7d:e4:6e:7a:62:a4:35:6b:5a:
         7e:13:14:b9:c1:55:b0:d8:56:33:6a:d6:d0:64:ec:13:93:cf:
         33:e3:fc:fe:19:d2:01:6e:9d:0b:a2:27:a2:2c:be:93:36:31:
         65:1f:e8:7c:76:51:ec:10:43:7a:04:65:b2:54:e3:26:ec:16:
         76:41:92:7a:d9:a7:de:ed:15:76:24:08:d3:9c:4a:77:79:01:
         8e:49:bf:99:ab:c0:30:c0:1e:08:d0:7b:62:63:d4:f0:46:f7:
         5e:16:ac:a2:3e:59:f9:ab:b3:00:d9:98:30:1f:a0:09:67:83:
         e7:9c:b5:7f:af:d4:e5:81:f1:c2:6a:44:d3:7b:3e:83:90:a7:
         5e:9f:48:1c:20:db:a4:6f:11:c6:4e:c6:82:b3:63:37:e5:e7:
         e4:5a:c7:7a:9a:36:e3:1a:01:8d:6d:b5:f0:6b:49:d2:79:d6:
         61:84:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:32 2026 by rpki-client