Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=
Subject key identifier:   45:5C:E2:70:30:F3:12:5F:19:B4:2D:89:E0:35:ED:71:EA:F5:6B:30
Certificate issuer:       /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D
Certificate serial:       0FA3B9AAF13A636E5295F0AFE80A7A1A7C8B4067
Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:57:12 +0000
ROA not before:           Sun 03 May 2026 02:52:12 +0000
ROA not after:            Sun 02 May 2027 02:57:12 +0000
asID:                     9341
IP address blocks:        103.137.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl
                          rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a3:b9:aa:f1:3a:63:6e:52:95:f0:af:e8:0a:7a:1a:7c:8b:40:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D
        Validity
            Not Before: May  3 02:52:12 2026 GMT
            Not After : May  2 02:57:12 2027 GMT
        Subject: CN=455CE27030F3125F19B42D89E035ED71EAF56B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:5c:69:fa:c0:1f:92:db:1f:36:54:52:49:
                    41:48:eb:dc:61:20:1e:f5:15:ff:55:33:c9:6c:6c:
                    b0:61:34:2a:2c:e8:fb:5c:55:8a:86:92:68:6c:93:
                    92:59:9c:9a:54:91:b6:66:e1:70:64:35:c1:b8:30:
                    7c:3d:83:ac:31:f0:34:ad:15:5d:c4:1a:e8:3f:d8:
                    94:32:8a:35:8f:09:50:a1:60:48:b2:c1:a8:f4:e9:
                    d5:b3:62:19:cc:26:68:19:15:38:f4:01:cb:eb:41:
                    b3:fb:c4:a8:08:a7:ab:16:25:62:0f:a3:27:44:21:
                    8e:5e:3a:de:90:66:ea:da:e8:2b:83:9f:bc:5c:14:
                    6b:8f:01:6d:c7:bf:17:9a:2d:e3:fe:50:fb:d9:ab:
                    98:3e:17:d7:3f:d1:bc:98:99:cb:a5:0e:08:da:c7:
                    10:d1:31:9a:de:04:20:e2:0e:f0:43:9d:9d:25:b2:
                    da:0a:58:77:6a:82:c2:f9:1f:ca:5c:f8:2f:3d:6d:
                    7e:60:5d:d8:e9:8b:5f:74:e9:56:54:4e:98:5d:f9:
                    d8:04:56:b7:e4:2b:71:eb:c2:a2:1e:b0:1b:05:33:
                    fa:cb:cf:f2:22:52:33:1d:de:f3:1a:83:bd:12:df:
                    73:33:c1:55:ed:ba:bb:90:96:8d:93:73:30:81:08:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:E2:70:30:F3:12:5F:19:B4:2D:89:E0:35:ED:71:EA:F5:6B:30
            X509v3 Authority Key Identifier:
                keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:cc:85:1c:8a:d8:91:e6:4b:89:8a:f3:f0:a2:2f:54:44:e5:
         5c:86:17:ba:46:82:96:f1:52:8e:df:d6:e1:0b:d0:fe:f2:15:
         b7:7b:7b:6f:48:32:27:b0:fd:55:4e:99:bc:65:67:51:b0:3b:
         3b:80:76:ab:e3:cf:aa:59:5f:1d:46:16:89:ea:0d:18:a6:90:
         bb:c3:a5:57:52:40:d9:27:c7:00:46:fe:4d:45:23:e4:d8:74:
         20:68:b3:bf:97:6f:95:9a:73:59:47:d7:ec:f2:61:71:0b:94:
         ad:4f:c5:5c:2f:22:85:6c:ab:fe:f7:5c:54:8c:ab:34:37:f9:
         38:97:b6:13:98:fb:89:11:66:b5:f6:9a:ba:a0:de:b7:4c:b6:
         e1:55:40:d1:c9:3f:b8:12:db:a3:57:4f:b4:8f:e0:d3:11:75:
         0a:2d:89:94:97:94:63:b2:49:cd:5a:71:76:ef:45:ad:b0:1b:
         d3:ef:2e:26:85:fe:73:ad:51:29:a3:32:fa:9f:1c:a7:90:6a:
         b8:e8:37:e8:0d:3b:71:52:9a:b1:33:b5:ee:ac:27:3d:6f:db:
         af:16:31:41:3b:d1:0f:59:12:53:dc:78:69:c7:71:a8:16:71:
         b7:0e:93:10:b9:75:b7:be:6d:40:5d:3c:df:c4:59:ac:f6:73:
         9f:c1:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:32:09 2026 by rpki-client