Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134332e302f32342d3234203d3e2039333431.roa
File:                     3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          uDv+UYL75QoUmpMlaL+3dQMgpVoz8iM4bxe1Z2EgXa4=
Subject key identifier:   D5:95:62:52:04:29:52:73:B4:D9:0C:6D:4F:CC:51:F0:A7:AC:89:EE
Certificate issuer:       /CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5
Certificate serial:       143BFB4189B5678612F5EE1F76B2459B4147465E
Authority key identifier: AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134332e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:30:28 +0000
ROA not before:           Sun 03 May 2026 02:25:28 +0000
ROA not after:            Sun 02 May 2027 02:30:28 +0000
asID:                     9341
IP address blocks:        103.17.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl
                          rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3b:fb:41:89:b5:67:86:12:f5:ee:1f:76:b2:45:9b:41:47:46:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5
        Validity
            Not Before: May  3 02:25:28 2026 GMT
            Not After : May  2 02:30:28 2027 GMT
        Subject: CN=D595625204295273B4D90C6D4FCC51F0A7AC89EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:82:ae:0d:42:bb:4d:bf:d2:a4:48:61:ec:
                    cd:cf:42:fe:a8:aa:1d:4d:30:9f:e8:38:75:5f:23:
                    29:8e:69:5d:71:09:70:ca:53:fc:00:69:b0:b3:16:
                    1a:21:13:ff:d2:85:5d:37:1c:f4:f4:26:2b:6a:8c:
                    a7:7c:23:b0:d2:fc:f9:50:8b:ef:e5:21:4d:70:dc:
                    c8:68:4b:ff:67:46:e9:a8:31:5f:ae:0d:b5:6f:0b:
                    6d:b2:3d:ca:6e:23:f4:d1:1a:1a:34:aa:c8:73:0a:
                    2f:9a:ad:3d:99:66:9b:b6:2f:a0:64:1e:25:7f:2a:
                    90:16:59:40:c7:fb:57:44:c2:84:d3:be:18:d1:35:
                    66:c5:c6:17:a4:70:7e:4e:4f:d4:74:9d:1b:2c:b4:
                    47:31:f5:38:0d:c4:41:dd:ea:1b:f0:02:6e:e6:68:
                    41:f2:ae:3a:fd:4d:34:30:5e:01:0c:7f:cc:09:5f:
                    30:85:69:ac:72:cf:96:83:e7:d8:3e:4f:2b:d9:08:
                    ef:c4:c6:04:3d:6f:5a:a0:dc:19:9d:c0:7f:bc:a0:
                    cf:4f:db:e8:56:df:cd:94:19:ca:ba:d7:7b:90:ce:
                    46:24:1e:fa:3b:98:b5:51:4c:44:2b:f9:ad:d0:69:
                    cf:f3:2b:38:2e:7f:be:c2:87:dc:42:f6:30:89:d8:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:62:52:04:29:52:73:B4:D9:0C:6D:4F:CC:51:F0:A7:AC:89:EE
            X509v3 Authority Key Identifier:
                keyid:AB:50:FD:BF:03:84:6E:33:D2:F8:C5:18:7D:EA:9F:5E:4F:4E:E0:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AB50FDBF03846E33D2F8C5187DEA9F5E4F4EE0D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:98:2c:ea:31:fc:10:d4:0f:7d:9d:c9:bf:b6:29:8d:08:bf:
         70:ac:93:ec:9c:c8:78:ff:b8:e5:a9:e5:b1:51:b3:bf:dc:d0:
         84:ef:dc:04:b6:3c:69:84:b0:2b:d9:34:86:b5:cf:60:cb:3f:
         03:4e:ab:2e:7b:09:1c:dc:25:5d:e1:26:20:4b:65:98:91:2d:
         ae:06:67:46:a7:50:33:cf:45:fb:a1:67:b9:d6:97:bb:43:6a:
         ed:0c:9d:5e:f6:9b:77:8d:52:d9:89:6b:cd:92:da:9d:3d:90:
         10:95:37:60:3b:33:8d:0d:da:d3:43:9c:65:7e:33:e2:b6:f4:
         20:3e:92:44:bf:35:e0:12:c4:5c:14:b7:c0:d5:2b:d7:af:cb:
         70:8b:7a:9b:38:3c:ff:a9:bd:ca:91:02:59:25:6b:ea:69:36:
         1a:3f:1a:a3:3c:62:2a:33:74:fb:f9:5b:7d:37:e1:40:39:5b:
         7f:03:88:29:7c:31:56:93:55:88:dc:a2:ef:6c:4c:9b:d9:ca:
         6d:c1:42:8c:9c:52:30:2d:af:ae:53:38:84:dc:54:15:b2:d7:
         2a:31:94:c8:59:3e:dd:98:5e:1e:ee:82:2b:ce:08:5c:5a:f8:
         b2:35:47:7d:d4:8c:d2:bc:c5:05:c1:dd:82:30:6f:68:1f:81:
         74:58:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:28:42 2026 by rpki-client