Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa
File:                     3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (raw, json)
Hash identifier:          WYe5M8+W5wSg2Rfo76ZEu34y6MT+kHyqh2vkljV+QtU=
Subject key identifier:   56:64:83:F6:13:9F:73:E1:DB:87:E9:B8:F5:CD:5F:89:0F:4D:46:CF
Certificate issuer:       /CN=AAB4671D9735066964F008C9DDFC52C3A710E040
Certificate serial:       2BE913A29B439BD23812F8601CC40D99889D6346
Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa
Signing time:             Sun 03 May 2026 02:13:20 +0000
ROA not before:           Sun 03 May 2026 02:08:20 +0000
ROA not after:            Sun 02 May 2027 02:13:20 +0000
asID:                     132649
IP address blocks:        103.24.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl
                          rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e9:13:a2:9b:43:9b:d2:38:12:f8:60:1c:c4:0d:99:88:9d:63:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040
        Validity
            Not Before: May  3 02:08:20 2026 GMT
            Not After : May  2 02:13:20 2027 GMT
        Subject: CN=566483F6139F73E1DB87E9B8F5CD5F890F4D46CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:b3:9c:b0:b8:2c:99:fd:f6:76:bc:74:09:
                    03:b1:7d:5b:37:69:b4:18:8a:fb:98:10:fb:b3:42:
                    4b:43:b1:d2:11:2c:4a:0b:69:bd:48:ed:29:99:c9:
                    90:88:cf:58:fc:06:af:d7:98:84:6c:d4:34:5d:c0:
                    e0:d8:a6:84:42:58:03:ce:9d:46:6b:df:c1:d9:e2:
                    d2:f1:3a:02:2f:d5:c4:8f:f6:16:bf:6e:fa:45:00:
                    31:b9:f9:4f:55:4b:c7:91:cb:93:cd:fa:e2:f0:39:
                    06:72:3a:51:9a:c5:72:74:be:1b:f5:91:a4:c6:fe:
                    1a:97:47:dd:15:be:1f:f9:52:c5:6d:4a:e6:fa:0a:
                    c6:ae:fc:cc:df:f1:25:93:53:54:3a:20:f9:5c:dc:
                    ab:37:47:58:de:05:3a:88:5f:38:d6:e9:8c:c3:b3:
                    b8:58:71:a9:c2:92:56:8f:c9:1e:ef:49:cd:81:61:
                    fe:4d:50:df:91:30:d4:f3:fc:72:e7:9c:f6:ad:a3:
                    28:85:58:c3:1a:90:f2:0c:0e:d1:7d:4d:66:2b:2d:
                    5f:ec:0a:66:20:fe:41:1b:18:9c:c0:7b:cc:5e:b1:
                    59:5c:ff:20:48:ae:c0:fe:78:80:9f:b1:f5:b2:b2:
                    98:60:d1:49:3f:e6:99:3f:af:b4:41:05:85:01:98:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:64:83:F6:13:9F:73:E1:DB:87:E9:B8:F5:CD:5F:89:0F:4D:46:CF
            X509v3 Authority Key Identifier:
                keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:4d:59:16:e1:43:5c:6c:b6:19:ca:3d:bb:19:70:33:d0:b9:
         3f:28:f5:c1:9b:dd:fe:25:6a:70:ff:94:5f:64:3a:53:45:d1:
         0e:b4:35:9f:31:f3:e1:2e:ef:1f:db:9d:8c:0d:b4:64:07:bf:
         48:d8:88:54:9f:aa:62:03:5a:a5:69:1d:b2:ae:b3:9b:4c:d2:
         48:e0:39:a9:6f:1b:99:60:ba:51:3a:5d:2f:e8:23:51:60:e4:
         5d:5d:bf:73:51:29:92:85:b7:a4:88:e4:aa:1a:b5:2a:6e:47:
         c9:aa:de:57:f9:2a:a4:31:ad:fb:a6:69:92:d8:ac:40:f1:10:
         92:9e:7a:e4:00:e5:2f:fb:26:28:bc:37:08:da:0b:7e:20:f6:
         c4:a0:ab:d5:31:a6:c1:49:f7:00:03:9f:3c:aa:dd:bc:fc:63:
         50:02:3d:d8:16:31:0b:b8:16:d0:2f:88:07:c6:f9:42:b9:81:
         81:06:65:d6:8f:20:27:04:1f:e5:63:85:d2:02:3c:32:33:d1:
         1b:52:4d:16:d0:1a:ea:37:ef:ae:4b:69:97:52:3e:64:b2:c4:
         c6:20:2b:1f:cd:ef:32:c6:18:2e:c4:e1:66:4e:86:74:08:7c:
         d0:9c:3f:c7:6f:68:8c:1f:b8:2f:ba:30:83:62:1d:f9:8a:ac:
         87:c7:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:41 2026 by rpki-client