Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
File:                     3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier:          nOhj/KbLK8tB+8fzk/fF8cT34h0xCczJl9qDSLUlcwg=
Subject key identifier:   8F:E7:BD:B2:98:8A:81:80:AE:03:75:3B:2C:9F:BC:05:84:60:E7:F6
Certificate issuer:       /CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD
Certificate serial:       10D616436AFB00BABFE3C57A5B917929E69EB37D
Authority key identifier: 62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa
Signing time:             Sun 03 May 2026 02:21:54 +0000
ROA not before:           Sun 03 May 2026 02:16:54 +0000
ROA not after:            Sun 02 May 2027 02:21:54 +0000
asID:                     136842
IP address blocks:        103.100.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl
                          rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d6:16:43:6a:fb:00:ba:bf:e3:c5:7a:5b:91:79:29:e6:9e:b3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD
        Validity
            Not Before: May  3 02:16:54 2026 GMT
            Not After : May  2 02:21:54 2027 GMT
        Subject: CN=8FE7BDB2988A8180AE03753B2C9FBC058460E7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:6e:fa:eb:be:39:52:98:c5:dd:a5:5c:cb:
                    8c:dc:7d:35:ca:db:30:95:38:02:af:c4:73:14:ef:
                    90:6a:65:a6:9b:4e:2a:7b:8e:63:5b:50:3b:c5:78:
                    b8:36:91:65:35:cd:39:ce:0e:f2:64:ec:da:78:db:
                    c9:d6:00:5f:96:c6:15:68:3f:2a:2e:32:1d:50:dd:
                    1c:7c:e9:93:13:a2:a8:70:dd:c0:60:37:35:84:02:
                    e2:65:9c:ff:8b:9d:06:02:c6:53:9d:7d:b0:5e:f0:
                    41:9c:45:75:c2:e4:be:ba:4a:cc:33:f2:49:8d:f2:
                    42:0d:25:55:75:ea:a4:2f:a6:8b:44:6b:5a:2d:a7:
                    f6:96:94:6f:13:cc:3d:62:08:4d:54:1f:fb:1c:f9:
                    61:1a:0c:bd:19:bd:a4:e9:98:0d:8c:24:bb:ca:2a:
                    9a:0a:8b:41:5f:0c:9a:ce:bc:5f:11:d9:2c:27:55:
                    75:01:2a:21:0a:81:51:f9:47:09:1f:a9:7e:38:2f:
                    0e:6b:50:87:85:4c:0a:f3:82:c6:d1:32:61:b8:a8:
                    4c:c3:12:ae:d5:77:0e:f0:75:04:a8:2a:41:3f:0f:
                    d2:dc:99:ae:62:4c:01:f2:cc:19:8b:30:f2:0d:c9:
                    5d:6d:56:04:3e:ad:ce:71:29:b5:46:c4:a6:f9:39:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E7:BD:B2:98:8A:81:80:AE:03:75:3B:2C:9F:BC:05:84:60:E7:F6
            X509v3 Authority Key Identifier:
                keyid:62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:18:f6:3e:db:20:02:df:5d:51:79:cc:fb:cf:d8:5e:ce:d2:
         4d:d9:d2:04:eb:9b:c1:73:87:01:04:80:84:b4:2f:a5:d1:ed:
         16:77:ef:c4:14:ab:0f:54:78:9c:f0:f5:3c:d7:c9:88:0a:1e:
         b0:fa:78:77:84:d8:36:8b:f2:b4:76:d4:e0:2c:9f:67:19:c4:
         7f:1c:88:86:bb:6a:b5:1d:f3:3b:ee:ad:a0:65:a2:ac:87:2b:
         2a:8f:b7:73:13:31:96:ff:91:79:cd:db:d0:c9:44:2e:40:bf:
         19:eb:99:16:71:30:37:79:f2:22:24:95:fb:37:42:02:ff:1c:
         7d:40:9a:0f:73:90:3e:3e:06:5c:09:4a:f3:34:97:05:c9:d5:
         69:de:db:8d:64:25:00:4c:f2:5b:d8:8a:ac:bf:cf:c0:5f:04:
         04:78:cb:24:dd:e7:9c:e9:46:22:dc:72:9b:3b:74:44:56:29:
         86:09:e6:56:71:47:4b:c5:00:e6:f1:ef:62:14:4a:4e:33:10:
         1a:21:40:e0:75:01:69:fe:3e:a4:c8:6b:1c:2e:b4:ec:d3:88:
         37:ad:bd:fe:fb:4a:a3:74:8f:96:ac:a3:82:5a:dd:98:67:bf:
         99:90:17:0a:69:84:9b:8b:22:8f:fc:23:75:5d:a0:31:f7:44:
         c7:c1:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:14 2026 by rpki-client