Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
File:                     AS45305.roa (raw, json)
Hash identifier:          mZgjUh4Cl0k0VGsTJAmChAilzQ1jYqKe94v+4x/nV6Q=
Subject key identifier:   C8:19:D4:C8:2B:24:DB:BE:88:D3:26:98:7D:74:F2:EF:4A:BF:CD:28
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       33C753B1DA850ADBA9CB3492FEC1B3E46827792B
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa
Signing time:             Sat 02 May 2026 21:22:09 +0000
ROA not before:           Sat 02 May 2026 21:17:09 +0000
ROA not after:            Sat 01 May 2027 21:22:09 +0000
asID:                     45305
IP address blocks:        103.22.99.0/24 maxlen: 24
                          103.46.10.0/23 maxlen: 24
                          103.54.80.0/23 maxlen: 24
                          103.83.98.0/24 maxlen: 24
                          103.87.148.0/23 maxlen: 24
                          103.98.122.0/24 maxlen: 24
                          103.164.228.0/24 maxlen: 24
                          103.183.254.0/24 maxlen: 24
                          103.184.180.0/23 maxlen: 24
                          103.190.114.0/23 maxlen: 24
                          103.220.22.0/23 maxlen: 24
                          103.251.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c7:53:b1:da:85:0a:db:a9:cb:34:92:fe:c1:b3:e4:68:27:79:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  2 21:17:09 2026 GMT
            Not After : May  1 21:22:09 2027 GMT
        Subject: CN=C819D4C82B24DBBE88D326987D74F2EF4ABFCD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:48:1d:02:63:6e:c6:8f:d7:cf:01:0d:c6:
                    fc:a4:aa:cb:06:d6:da:53:ce:a1:52:6e:e0:25:10:
                    ab:54:ba:55:28:e9:02:b6:e9:10:13:3b:25:5e:1e:
                    44:00:c4:ff:a1:3e:ba:84:98:61:a4:dc:8f:61:c9:
                    43:87:0a:fa:df:13:d7:66:d3:42:6a:94:46:86:fd:
                    ae:94:21:d7:77:77:e5:51:2d:03:4c:a1:8c:bc:0e:
                    d1:d2:bf:05:6c:6a:ef:e1:0b:1e:cd:a9:f6:94:b3:
                    9f:ed:09:96:4d:04:51:b5:29:c3:6d:ad:ed:f0:a9:
                    d0:bb:14:5e:51:52:c0:7a:c0:c6:f3:ac:2b:af:dd:
                    41:b8:4e:c1:2b:c4:48:ce:fe:60:21:a1:06:94:b9:
                    31:6e:37:1a:d3:29:3c:2e:17:d9:85:ce:ac:49:58:
                    95:a2:12:64:8e:77:aa:1d:60:18:d3:78:1e:5c:b1:
                    8b:55:92:d4:6d:c0:b7:04:78:a1:fb:88:01:26:82:
                    12:5b:87:76:37:95:e1:be:c7:22:99:7f:21:b9:5e:
                    b8:03:94:6a:ef:d1:98:c3:2d:fa:04:49:f5:3c:2d:
                    a7:1d:38:77:cc:a2:d4:8e:a1:76:97:5b:1e:54:a7:
                    53:32:1c:59:c1:77:4b:92:91:b6:f4:e8:ec:6d:ad:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:19:D4:C8:2B:24:DB:BE:88:D3:26:98:7D:74:F2:EF:4A:BF:CD:28
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45305.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.99.0/24
                  103.46.10.0/23
                  103.54.80.0/23
                  103.83.98.0/24
                  103.87.148.0/23
                  103.98.122.0/24
                  103.164.228.0/24
                  103.183.254.0/24
                  103.184.180.0/23
                  103.190.114.0/23
                  103.220.22.0/23
                  103.251.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:57:2e:37:5e:04:ee:10:85:f5:c3:42:3e:b5:f5:c6:71:ea:
         31:30:53:8a:c6:f5:54:ba:3e:b5:c5:00:fd:32:68:20:dc:a4:
         84:4f:d8:f2:61:b2:99:80:a3:fa:b3:ee:d9:f5:a8:bf:2d:a1:
         14:a2:59:d3:c1:5b:6f:23:3c:76:5c:2a:e2:6b:fb:56:6c:d6:
         d0:90:99:16:56:e5:86:34:b7:6f:da:03:d5:04:e3:aa:1c:94:
         9e:fb:18:c9:e0:75:ca:29:cf:ed:17:9c:53:ee:4f:70:a5:b4:
         4a:49:0d:5e:0e:81:79:38:1e:b8:71:70:ff:28:c9:9f:9f:d3:
         5e:0c:f6:f0:d5:14:d7:da:41:eb:2d:e5:80:08:97:be:d4:f2:
         04:75:33:a3:2e:35:f6:86:82:99:65:06:36:2c:6c:16:bd:dc:
         5b:a9:69:f8:4c:f4:31:33:26:17:52:1f:9a:69:c4:45:02:9a:
         64:c8:c5:f0:34:82:a8:db:b3:2d:44:86:ab:c6:9e:76:c3:f4:
         1e:2a:0a:f3:01:c2:80:6c:79:da:20:09:ab:bb:fd:2b:07:d3:
         6d:7e:2b:d6:2b:16:45:72:3a:20:fb:75:4d:d6:35:07:4e:a8:
         bd:73:83:e1:c1:a2:e4:4c:ac:31:ce:72:b9:5a:4a:d1:33:0d:
         a1:36:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:29 2026 by rpki-client