Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e37332e3132352e302f32342d3234203d3e203539313334.roa
File:                     3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (raw, json)
Hash identifier:          bC6bKRWDg0Wg0P6AUiYBKd/mAgFiPv8qaxAU9zI3St0=
Subject key identifier:   12:A1:80:EA:EE:44:62:7C:96:82:CF:8F:B5:3A:6B:AC:E9:0C:9D:C2
Certificate issuer:       /CN=766F922EBE6693B4C229A00631F97A88C3ED7E42
Certificate serial:       1DFB891F521B87DE9C46816CC70AEEB0BA59B0C9
Authority key identifier: 76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e37332e3132352e302f32342d3234203d3e203539313334.roa
Signing time:             Sun 03 May 2026 02:12:37 +0000
ROA not before:           Sun 03 May 2026 02:07:37 +0000
ROA not after:            Sun 02 May 2027 02:12:37 +0000
asID:                     59134
IP address blocks:        103.73.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl
                          rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fb:89:1f:52:1b:87:de:9c:46:81:6c:c7:0a:ee:b0:ba:59:b0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766F922EBE6693B4C229A00631F97A88C3ED7E42
        Validity
            Not Before: May  3 02:07:37 2026 GMT
            Not After : May  2 02:12:37 2027 GMT
        Subject: CN=12A180EAEE44627C9682CF8FB53A6BACE90C9DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:f9:6c:7e:32:4a:9c:ee:d3:2e:b0:ce:2f:
                    58:16:80:4c:55:08:c6:9c:2b:20:87:8d:50:a6:8d:
                    61:d8:d1:90:24:cd:24:1e:c2:4a:f3:86:e0:31:c5:
                    4d:51:a1:df:3a:15:4b:13:d1:d4:65:61:06:9b:81:
                    80:55:66:23:10:ef:5e:61:4d:54:36:f1:06:46:af:
                    6b:e1:c0:7b:0e:9c:e5:18:5f:9a:bf:3c:f2:87:a8:
                    23:92:f3:69:56:e5:34:5f:7b:c9:b9:89:1e:96:c5:
                    57:da:fe:b8:7e:c9:08:1a:7d:34:29:ba:4a:55:8f:
                    14:19:22:28:4b:e8:28:5b:1e:ed:b1:6d:37:5b:fd:
                    46:6d:4b:cb:f5:e5:e7:3c:9b:69:ce:de:f6:53:e9:
                    70:cd:cb:aa:37:af:9b:08:3f:fd:be:a1:be:45:b0:
                    37:59:4f:12:3b:a2:fc:e1:2e:da:2f:ca:02:76:fd:
                    d1:7b:99:ad:6c:50:b6:cf:aa:66:c6:93:b6:fa:0e:
                    1d:40:ee:d6:93:ae:8b:85:2c:8e:13:38:70:5e:d3:
                    cd:2d:12:a5:5d:f2:0d:65:44:fa:f8:d9:16:d9:e1:
                    83:f0:fe:fe:1a:ff:32:17:f8:4b:86:81:8d:dc:ff:
                    49:c2:11:ad:3d:f4:fc:51:83:b0:dc:30:8a:88:40:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A1:80:EA:EE:44:62:7C:96:82:CF:8F:B5:3A:6B:AC:E9:0C:9D:C2
            X509v3 Authority Key Identifier:
                keyid:76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/3130332e37332e3132352e302f32342d3234203d3e203539313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d4:c1:cb:14:e7:5f:e3:a0:9a:47:d1:23:bc:b3:d5:c6:5e:
         ea:18:6a:ca:14:ee:36:56:fc:1d:cc:87:a2:72:84:2b:54:0d:
         0e:bb:b8:e7:67:bc:f7:74:49:dd:fb:ce:48:cf:43:12:68:0c:
         37:09:e5:ab:e6:2a:b3:84:9a:bb:53:0e:55:fc:8d:b5:e2:c0:
         1e:12:e3:ad:00:0f:be:5a:c6:3a:e8:80:2e:bf:97:aa:d5:57:
         1c:96:81:ae:3a:12:5c:91:75:7c:19:8c:cc:31:2d:27:f3:ce:
         d8:4c:4e:e7:97:b3:d7:49:79:c3:2e:9a:88:22:2a:ce:d9:a9:
         1a:72:1d:bf:15:22:ce:62:3d:df:02:89:41:6e:9a:81:d3:d8:
         e5:35:cf:b7:76:08:d3:01:87:63:37:b7:fa:6e:f8:18:89:e8:
         0e:d0:d1:ca:08:c6:12:58:b3:d3:58:cc:d1:4f:37:52:df:43:
         54:59:27:4d:a4:5a:59:80:7e:62:1e:f9:41:ba:1d:e3:05:13:
         9b:8f:95:3b:02:55:fb:17:91:e9:76:31:49:fb:47:20:51:57:
         aa:54:dd:8e:84:bf:d4:41:16:f3:d1:bf:31:c7:f6:17:58:d9:
         c3:d5:47:2d:f4:d5:df:d1:80:de:f6:da:37:4d:c8:ca:78:63:
         b6:e5:86:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:44 2026 by rpki-client