Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa
File:                     3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          mcWbJEiXl5it2u7QuEmPSl23YbD8dPwCyZHEOHxWrkg=
Subject key identifier:   2C:3E:46:AB:63:9D:5D:FE:E7:E3:80:DD:D6:49:EC:C2:28:D8:D6:AF
Certificate issuer:       /CN=62C5A0289DA41808F92D779B1EB95E027DBE14C3
Certificate serial:       594E1DB5DE60B9CC0E238501249E850B08DB5491
Authority key identifier: 62:C5:A0:28:9D:A4:18:08:F9:2D:77:9B:1E:B9:5E:02:7D:BE:14:C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:35:52 +0000
ROA not before:           Sun 03 May 2026 02:30:52 +0000
ROA not after:            Sun 02 May 2027 02:35:52 +0000
asID:                     9341
IP address blocks:        103.212.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl
                          rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 09:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4e:1d:b5:de:60:b9:cc:0e:23:85:01:24:9e:85:0b:08:db:54:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C5A0289DA41808F92D779B1EB95E027DBE14C3
        Validity
            Not Before: May  3 02:30:52 2026 GMT
            Not After : May  2 02:35:52 2027 GMT
        Subject: CN=2C3E46AB639D5DFEE7E380DDD649ECC228D8D6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:78:94:54:e8:51:a4:c9:31:23:75:0e:71:
                    fb:d2:4b:b0:d6:43:ab:09:31:e4:5b:08:00:1a:62:
                    52:25:b0:3a:d3:5d:2a:56:d4:f0:6c:fd:06:b5:e8:
                    39:29:4e:d7:ae:1c:e0:6f:20:c8:fa:73:24:f9:61:
                    cf:80:f5:41:17:88:ab:e4:9e:22:92:17:74:e1:0e:
                    29:48:50:b4:4d:db:43:e2:ef:dc:9e:e2:d8:dc:73:
                    8c:4a:30:2a:c9:8b:77:50:b2:18:d9:a2:24:8e:40:
                    ff:0c:a4:83:ae:ef:c0:24:38:89:33:87:ee:c0:11:
                    59:5b:ef:4c:84:97:bf:0b:b4:eb:29:0c:3a:d2:62:
                    87:b2:90:a5:75:e5:3a:ea:08:9d:0e:28:ba:65:94:
                    cb:48:17:75:0e:c2:72:3e:5d:4f:4e:f0:06:a2:71:
                    96:66:df:5e:67:5b:26:46:79:f6:bb:ad:6b:1f:9d:
                    36:16:2a:b5:17:ae:8b:8f:f0:b2:d5:57:57:4c:43:
                    22:8c:18:b9:97:09:0b:4c:6a:65:5f:64:cd:62:8b:
                    3b:74:89:77:0e:51:9a:92:aa:b5:c4:d9:35:74:57:
                    77:15:c3:6f:7f:98:b6:17:07:90:ea:95:d2:bf:4b:
                    bf:a8:c6:b5:af:41:6b:44:0a:9e:4c:07:dd:ec:07:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3E:46:AB:63:9D:5D:FE:E7:E3:80:DD:D6:49:EC:C2:28:D8:D6:AF
            X509v3 Authority Key Identifier:
                keyid:62:C5:A0:28:9D:A4:18:08:F9:2D:77:9B:1E:B9:5E:02:7D:BE:14:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/62C5A0289DA41808F92D779B1EB95E027DBE14C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62C5A0289DA41808F92D779B1EB95E027DBE14C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:51:3a:4d:9f:9f:9a:32:b6:43:5a:4f:8f:0c:a8:02:63:06:
         78:a7:23:d0:00:b7:bd:3d:90:b8:1a:54:5e:44:a6:43:e4:69:
         d0:21:3b:e9:25:f1:98:09:85:05:88:14:a2:23:3f:20:d7:7b:
         99:cf:de:5a:a9:d4:92:67:fb:bf:ab:67:d2:ad:fc:7a:54:57:
         00:a9:a5:26:2e:6c:42:e6:eb:50:cb:fa:ca:c5:c1:d4:28:6a:
         a7:f8:c6:15:06:8f:4a:10:d9:5f:26:67:48:a1:d2:ae:35:ff:
         91:f9:cc:45:68:d6:55:27:4f:b2:23:53:81:85:4a:82:ee:ca:
         16:45:29:89:5b:ba:60:68:3a:8a:7f:bd:fa:26:21:94:a4:33:
         28:2e:2d:2c:d0:ca:fe:ed:13:2f:be:14:5d:5c:fa:2f:18:d5:
         81:ea:d3:36:cb:c0:a3:be:06:c5:41:b3:34:87:0a:eb:90:10:
         8f:15:f0:1a:41:f7:37:f0:59:0a:25:dd:1a:8c:d9:d2:ee:a1:
         06:0d:9a:94:1e:c2:fb:f0:c2:fb:de:8d:85:8f:ce:0e:b1:c4:
         00:df:7f:3e:f2:40:13:c0:52:4b:ee:4a:dc:27:e5:68:cf:77:
         94:ce:d4:3b:92:c3:37:40:64:2f:42:21:bf:c1:13:97:85:ca:
         31:b6:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:27:31 2026 by rpki-client