Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa
File:                     3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (raw, json)
Hash identifier:          Q0OtuE0x+1dg20GdJHzojtIIWvsVtWVNvAlS/PxOJuA=
Subject key identifier:   F4:F0:21:7E:F4:CF:57:0A:F7:59:C0:84:CF:3B:F3:1C:7D:08:64:06
Certificate issuer:       /CN=7091DC8336BC57D39C24D1C393F2B14780B192CD
Certificate serial:       4520166A1CFCE3577705CAE7523FED0A919085A8
Authority key identifier: 70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa
Signing time:             Sun 03 May 2026 02:13:32 +0000
ROA not before:           Sun 03 May 2026 02:08:32 +0000
ROA not after:            Sun 02 May 2027 02:13:32 +0000
asID:                     138057
IP address blocks:        103.120.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.crl
                          rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:20:16:6a:1c:fc:e3:57:77:05:ca:e7:52:3f:ed:0a:91:90:85:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7091DC8336BC57D39C24D1C393F2B14780B192CD
        Validity
            Not Before: May  3 02:08:32 2026 GMT
            Not After : May  2 02:13:32 2027 GMT
        Subject: CN=F4F0217EF4CF570AF759C084CF3BF31C7D086406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:2f:83:d1:97:d4:fe:4b:7a:ab:b8:25:c7:
                    21:94:9f:ba:4f:b3:8b:2b:4e:8b:ec:c9:54:29:c3:
                    15:33:da:a6:19:ba:29:48:ae:d3:42:a9:26:fa:4d:
                    c2:a1:fc:7c:0e:dc:aa:86:47:38:4b:7b:d4:cd:71:
                    54:17:93:1a:84:c0:91:23:2d:94:82:74:4a:92:9c:
                    57:08:d3:50:83:15:9b:d2:08:7b:a2:0c:f1:f4:2e:
                    a7:73:5c:2d:90:80:17:e8:a0:a2:d5:01:06:cb:78:
                    84:4e:6d:88:d3:58:98:82:fb:e1:5c:ee:1c:5b:7e:
                    76:01:be:ab:50:b7:6c:9d:9d:07:b2:a6:0b:67:33:
                    02:c8:85:70:71:fe:2b:a6:c5:b4:f3:1c:2c:d2:aa:
                    ec:15:26:e3:19:bd:72:cd:10:13:9f:aa:bd:1b:a3:
                    22:6e:dc:f4:7f:77:23:52:60:15:8b:f4:57:52:e9:
                    ab:59:53:2c:54:30:7b:fa:29:52:5b:20:bb:9b:d4:
                    91:f7:8b:86:7f:7a:85:a1:3c:3c:9c:af:9b:51:89:
                    76:f6:3f:53:74:ad:b5:84:d5:47:27:54:04:79:c6:
                    68:c5:3d:5f:0b:8c:0d:1c:7e:20:4a:8a:6b:aa:91:
                    db:8a:0a:3f:ac:40:2b:8e:33:f4:e8:81:2a:f4:70:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F0:21:7E:F4:CF:57:0A:F7:59:C0:84:CF:3B:F3:1C:7D:08:64:06
            X509v3 Authority Key Identifier:
                keyid:70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:4c:77:d8:55:94:00:05:6d:dd:f0:4e:5c:47:44:9a:dc:14:
         a8:8e:17:27:62:da:da:c1:ec:e3:c4:cd:df:ff:37:cc:a7:e1:
         60:ff:dc:d5:2f:5c:a2:9a:36:46:c2:37:84:d6:cc:59:67:49:
         a1:78:8d:2d:26:88:f8:6f:69:3e:88:3c:df:bc:7e:f3:17:e5:
         43:ac:79:2c:d2:e1:72:0e:20:6b:e8:f2:f7:d0:31:4e:3f:dc:
         10:a8:4d:7b:04:11:3d:bb:21:db:f0:08:05:40:0f:57:7c:ce:
         75:db:a5:22:43:76:6e:52:98:ca:14:3b:e1:21:42:32:c1:4f:
         5c:64:ff:d9:ac:6d:60:d3:7f:08:5c:9a:60:d0:a5:55:70:b3:
         1a:39:b3:03:e6:c9:3c:1f:26:e0:7d:50:a3:bb:ab:22:4f:eb:
         5c:9c:43:4c:e8:c2:f1:f8:a9:bd:72:f9:20:88:04:ea:ef:cf:
         11:43:b2:73:01:f6:6c:75:b5:14:6b:7b:da:82:30:6b:81:94:
         bc:48:19:47:95:5b:49:f2:c8:2e:55:56:38:87:35:59:1b:19:
         a1:9f:6d:b4:f5:34:5d:6a:e6:0c:77:8d:7e:10:67:36:48:7a:
         a3:7c:e0:db:22:ae:ff:70:35:94:12:55:17:f5:3d:2f:bf:33:
         1d:17:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:15 2026 by rpki-client