Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa
File:                     3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (raw, json)
Hash identifier:          roqA5lD4sFTDR1g7UxqG9+ZjfyukoDRdAX9XNlxiMJE=
Subject key identifier:   8A:10:6D:F5:EF:7C:4D:FB:14:4C:81:85:4F:C4:38:6B:0D:34:D1:A1
Certificate issuer:       /CN=16FC1DF2D807E338985DE30932EA34E250228796
Certificate serial:       316D7D40447CFE0FA2F9FE0A9F54B0ED88275729
Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa
Signing time:             Sun 03 May 2026 02:28:33 +0000
ROA not before:           Sun 03 May 2026 02:23:33 +0000
ROA not after:            Sun 02 May 2027 02:28:33 +0000
asID:                     137378
IP address blocks:        103.119.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
                          rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6d:7d:40:44:7c:fe:0f:a2:f9:fe:0a:9f:54:b0:ed:88:27:57:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796
        Validity
            Not Before: May  3 02:23:33 2026 GMT
            Not After : May  2 02:28:33 2027 GMT
        Subject: CN=8A106DF5EF7C4DFB144C81854FC4386B0D34D1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:79:9f:92:37:c3:c1:9b:a7:e2:cc:c7:10:
                    12:e5:7b:f6:e4:b9:32:5a:5e:e5:62:7a:6b:c6:77:
                    93:5d:c4:0c:67:4b:c5:05:d8:81:7a:f6:ee:c8:42:
                    06:af:43:bc:07:44:ff:96:ac:fe:41:43:39:a4:60:
                    76:d5:c6:85:ca:bd:7d:21:9c:5f:47:df:39:15:19:
                    51:75:da:b2:c7:c2:e7:2c:5d:6f:b1:0b:27:ca:e3:
                    48:de:9e:85:76:f4:25:6c:32:49:e8:42:4f:4f:e2:
                    9b:d5:6c:c4:c2:21:48:f6:1b:8e:db:f6:72:7a:90:
                    74:bc:85:09:c4:54:b9:a9:62:09:92:90:c5:ae:87:
                    1c:a5:e4:be:17:8d:57:4c:9a:fd:23:96:81:3a:e0:
                    a8:44:58:c3:04:f3:27:7c:39:8a:ca:b0:0f:78:c5:
                    0f:5c:4f:b3:f5:09:dd:79:5a:d6:9c:49:ca:10:8c:
                    f9:83:3b:f9:ff:3c:6d:8d:d1:1e:ea:65:14:27:9c:
                    c5:e5:1a:b0:cd:6f:4a:df:b9:b7:ee:9c:78:82:28:
                    88:ae:e4:9e:67:4f:e8:fa:94:8c:e9:53:41:1e:a8:
                    19:38:41:3e:ca:5b:4f:83:86:1e:3e:2b:59:23:57:
                    9d:f7:24:86:ab:0b:86:34:29:6d:a0:83:45:f0:9a:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:10:6D:F5:EF:7C:4D:FB:14:4C:81:85:4F:C4:38:6B:0D:34:D1:A1
            X509v3 Authority Key Identifier:
                keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:26:19:b3:bb:dd:53:57:5b:50:a1:3e:38:80:88:07:89:2c:
         d4:22:62:7e:43:42:29:7f:75:10:1c:24:7a:53:04:a3:e9:3a:
         54:02:87:ea:de:76:2e:b4:4b:d4:46:b6:4b:57:4c:15:7e:1b:
         3e:e3:23:e2:f6:b0:1f:2e:df:42:3c:d8:db:40:04:00:d6:ef:
         fc:c7:21:b3:a4:4a:df:d8:89:8d:2c:16:4a:5f:c1:6a:27:16:
         2f:9f:cc:25:f0:e7:31:40:83:f2:43:1c:b0:70:1a:25:75:d3:
         44:ab:41:d9:c1:0c:8c:33:73:91:a9:13:59:a1:bd:83:35:1f:
         3c:09:12:da:ed:79:c8:86:79:75:cd:f4:9c:94:6b:b6:59:81:
         89:df:97:21:92:ec:6b:33:e1:ea:88:4e:7d:8e:6c:29:08:0c:
         5e:41:06:3f:3d:67:30:1a:e4:4c:ae:1b:05:04:0c:0f:14:de:
         30:ab:80:ad:7f:44:43:23:af:1d:90:79:cd:6e:04:14:3d:f2:
         07:fc:08:0a:34:16:9b:58:b4:10:be:9d:c4:cc:c4:e7:8b:47:
         ee:13:6d:d3:a0:fb:26:1b:4b:a5:0a:ba:f8:39:a0:11:cf:b9:
         26:b2:86:2b:15:59:6d:af:60:77:77:4b:0f:68:4e:22:ed:76:
         5b:9a:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:49 2026 by rpki-client