Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa
File:                     3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (raw, json)
Hash identifier:          P5ZIOPTsddeJTRgtwDMGa8DbnU/VOaQA2C+qkfXBoKA=
Subject key identifier:   99:27:18:E9:93:34:61:9A:52:D8:DD:D0:30:24:2B:79:26:5A:4F:A3
Certificate issuer:       /CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
Certificate serial:       6F34AD82371257112B9CC710F66E965750352C79
Authority key identifier: 36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa
Signing time:             Sun 03 May 2026 02:20:33 +0000
ROA not before:           Sun 03 May 2026 02:15:33 +0000
ROA not after:            Sun 02 May 2027 02:20:33 +0000
asID:                     138070
IP address blocks:        103.123.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl
                          rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:34:ad:82:37:12:57:11:2b:9c:c7:10:f6:6e:96:57:50:35:2c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
        Validity
            Not Before: May  3 02:15:33 2026 GMT
            Not After : May  2 02:20:33 2027 GMT
        Subject: CN=992718E99334619A52D8DDD030242B79265A4FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:05:f3:51:68:73:65:70:a4:ca:47:aa:26:
                    ae:fb:83:0c:44:16:de:f6:b9:23:dd:37:68:93:1b:
                    21:70:41:da:92:39:e8:89:ca:06:92:cd:9d:93:53:
                    4c:d8:5f:f8:9b:b0:97:b6:7a:f7:d8:bc:39:2c:6f:
                    9a:dc:ec:34:af:71:63:f6:c0:3d:b5:98:eb:7a:b3:
                    dc:98:0d:77:e0:6d:78:3a:1d:6c:8b:d4:59:19:69:
                    7f:bb:fd:6c:eb:0a:5b:eb:57:97:7a:20:db:c7:f2:
                    cd:17:c3:1b:8e:20:ee:ef:6f:58:c5:d6:dd:9e:12:
                    56:8b:db:49:97:4e:79:97:c4:08:72:6c:5a:2c:75:
                    ab:62:5f:3d:1c:0d:10:b5:3a:69:ea:50:9f:17:64:
                    bb:8f:99:1e:62:41:ca:61:ba:a5:53:f8:c9:f1:b5:
                    01:d4:ab:bd:04:34:4b:87:03:c0:b2:92:1a:d4:e6:
                    09:8b:c5:eb:ef:a6:b7:43:84:a9:2c:ab:07:6c:7e:
                    2f:24:f1:e8:4d:1c:2b:03:ac:08:4f:4b:c7:21:91:
                    0b:99:5a:a9:35:56:c5:ab:05:ab:e4:b7:57:11:05:
                    1e:3c:41:fe:36:dd:d4:4b:65:71:98:12:e8:17:a3:
                    0c:73:6b:e6:02:b9:8d:6b:ae:2c:68:fa:33:2a:87:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:27:18:E9:93:34:61:9A:52:D8:DD:D0:30:24:2B:79:26:5A:4F:A3
            X509v3 Authority Key Identifier:
                keyid:36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:0c:e5:c6:d8:e9:bf:0f:73:4a:e1:d1:4c:5d:ea:e9:93:99:
         68:3b:80:28:b7:9c:0c:ac:ee:ef:1d:2e:2f:e3:b8:88:a1:94:
         0e:18:ce:34:01:14:47:89:32:5f:9c:1c:0d:bc:f9:45:ac:f2:
         05:f7:dd:ec:ea:d0:d6:68:2a:39:a2:ff:fa:9f:05:a5:7c:95:
         dd:e3:77:bf:b5:60:58:62:0d:7f:f1:20:02:7a:e7:3f:fc:c9:
         be:cf:d7:e3:5a:dd:f2:1f:f8:94:0c:ad:4c:06:47:13:02:89:
         c4:4d:4e:27:2c:56:91:d3:d7:1d:b1:86:00:3a:8e:37:76:57:
         e2:f1:98:bf:bf:b6:8f:0a:8b:e3:e2:62:fa:b5:e8:e6:64:21:
         9f:fb:03:08:af:8a:c5:fa:2e:25:e1:c1:09:68:df:ef:8e:cc:
         70:f3:e8:44:c5:e6:d8:5e:c1:fa:65:24:de:7a:6e:4d:5f:52:
         78:4b:e5:38:a2:8c:b2:63:a4:92:08:40:35:9c:c8:c1:14:23:
         3b:33:0d:79:0f:c4:56:ca:4d:66:e6:ae:24:41:a1:46:20:b0:
         db:3b:01:9c:c7:42:1c:75:3b:2a:9d:7c:b0:8c:12:ef:0b:74:
         99:d4:0e:85:fc:e1:66:66:98:2a:22:4d:d8:a3:a1:4d:1b:80:
         0e:15:38:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:15 2026 by rpki-client