Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa
File:                     3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (raw, json)
Hash identifier:          rPP6V0AAbWQPb0tykKnGuJ9vTxTL/c/Ko2tg0hbJTrk=
Subject key identifier:   DC:B0:BE:3D:95:46:33:FC:54:50:0F:90:0F:21:73:AF:DA:46:73:1D
Certificate issuer:       /CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
Certificate serial:       75F84779C03FF63644A1FAE668759E7CDD7B312A
Authority key identifier: 36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa
Signing time:             Sun 03 May 2026 02:20:34 +0000
ROA not before:           Sun 03 May 2026 02:15:34 +0000
ROA not after:            Sun 02 May 2027 02:20:34 +0000
asID:                     138072
IP address blocks:        103.123.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl
                          rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f8:47:79:c0:3f:f6:36:44:a1:fa:e6:68:75:9e:7c:dd:7b:31:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
        Validity
            Not Before: May  3 02:15:34 2026 GMT
            Not After : May  2 02:20:34 2027 GMT
        Subject: CN=DCB0BE3D954633FC54500F900F2173AFDA46731D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:85:24:8a:92:8b:91:58:8c:84:d5:d7:a1:
                    ea:71:eb:c0:36:43:bf:9c:c6:46:0b:8d:7c:e2:7c:
                    be:25:2f:b0:85:24:9e:ab:0b:3e:95:c2:01:c9:03:
                    a8:b4:0e:78:c6:8c:6d:59:ee:91:ec:48:27:22:c3:
                    b7:1a:2b:3f:11:4b:12:83:37:52:53:ab:95:96:63:
                    8f:db:47:c2:fd:9c:51:7e:18:62:09:f8:68:04:31:
                    48:e9:ea:ed:af:71:82:a8:af:8f:97:9e:c6:09:c4:
                    e7:7c:e3:ff:1a:fc:67:e7:f0:0b:15:04:d1:b4:c3:
                    f4:3e:73:7a:2f:17:e0:ae:b3:54:d1:a0:bd:a1:20:
                    04:8f:a6:01:38:fe:b8:08:c8:86:a8:62:cd:fd:f8:
                    15:f4:67:91:94:03:6d:f5:8a:7f:12:3d:29:e9:07:
                    57:6d:09:ee:15:c8:bf:cc:bf:c3:78:21:c4:bc:55:
                    55:9c:8d:75:fb:53:25:d4:1c:a0:d9:dd:a3:92:40:
                    b7:80:86:fa:a6:d8:c3:4a:29:0c:e5:96:75:38:db:
                    0d:10:93:7c:92:4f:a7:9f:01:6e:f7:f8:1b:27:57:
                    32:2c:10:64:a0:70:13:34:64:25:b2:08:14:fa:74:
                    30:e4:76:f8:cc:59:fb:90:9f:65:29:13:f1:11:53:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B0:BE:3D:95:46:33:FC:54:50:0F:90:0F:21:73:AF:DA:46:73:1D
            X509v3 Authority Key Identifier:
                keyid:36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:01:da:9e:b8:87:05:33:e4:69:78:7e:a2:29:9a:76:13:
         b1:f9:7a:02:d4:e6:0c:9a:8c:30:30:16:d1:b1:30:e9:9d:d8:
         bd:bb:fd:9f:f8:f8:c2:99:cf:90:4c:53:14:36:7a:29:e8:be:
         b4:bc:eb:29:5c:73:ef:c0:8f:dc:70:20:3d:3c:24:0b:f5:48:
         84:2d:4e:8b:f6:1e:7c:01:06:32:7f:e8:33:5c:9b:c5:db:73:
         de:d3:67:a6:67:dd:32:d9:82:14:5a:15:a2:58:14:af:21:66:
         c2:7e:97:91:8c:da:1b:4d:54:57:ca:9e:81:ae:bf:7b:8b:30:
         18:fc:2b:e1:86:6f:62:47:a5:aa:65:f0:2f:54:98:6e:71:e8:
         28:cf:c1:03:0b:8a:1e:60:ae:c7:0e:e7:3f:3e:d5:31:23:7e:
         74:c2:25:c4:4f:e4:62:ad:63:3a:6f:a7:b6:69:03:61:8e:69:
         7f:df:b4:81:92:ee:f8:85:78:2d:a4:8c:76:ec:a4:84:17:51:
         22:ce:86:92:60:01:7e:10:e2:61:69:4a:41:f8:92:73:f9:dd:
         52:03:0e:60:93:f3:ba:40:7d:6e:db:21:2f:f1:96:c9:64:40:
         ae:a0:f2:80:79:bd:0b:f2:54:36:2a:91:9e:b1:f9:54:fc:0f:
         34:ff:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:15 2026 by rpki-client