Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa
File:                     3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (raw, json)
Hash identifier:          fB2Vl1cIcPoBjN5rs9Ik+Eab2HMgRuDFWdtvrKSJoVw=
Subject key identifier:   67:5C:3C:E6:FF:42:43:72:96:20:77:68:AF:58:21:19:E8:EE:01:4E
Certificate issuer:       /CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C
Certificate serial:       5CDF6EE35549C296C3A1DF90DB4642EE141EBF23
Authority key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa
Signing time:             Sun 03 May 2026 02:28:47 +0000
ROA not before:           Sun 03 May 2026 02:23:47 +0000
ROA not after:            Sun 02 May 2027 02:28:47 +0000
asID:                     138821
IP address blocks:        103.136.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl
                          rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:df:6e:e3:55:49:c2:96:c3:a1:df:90:db:46:42:ee:14:1e:bf:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C
        Validity
            Not Before: May  3 02:23:47 2026 GMT
            Not After : May  2 02:28:47 2027 GMT
        Subject: CN=675C3CE6FF42437296207768AF582119E8EE014E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:8f:13:cd:88:1a:5d:09:f3:8d:7a:e7:f4:
                    3c:8e:5a:60:ca:60:5d:ff:8b:8c:36:1d:0d:e5:52:
                    e6:f0:29:de:e7:da:e9:f4:ee:32:2f:12:04:d6:75:
                    0a:13:47:3a:ba:0f:ae:4a:8c:3d:cf:f3:7c:d1:d1:
                    7d:86:34:d0:37:2d:74:cd:27:44:ae:fa:84:7a:39:
                    20:bc:1d:ce:e0:80:ab:47:65:50:e1:10:8f:dd:21:
                    3b:23:a5:de:d7:48:fd:c5:56:e3:c0:2b:e4:f1:90:
                    cc:dd:29:e7:08:f1:23:2c:a8:c7:85:6f:76:60:af:
                    1d:d2:75:d4:41:bf:82:c9:09:1f:c1:65:35:e6:ec:
                    d3:2c:9f:ae:70:4b:f2:de:d9:42:14:76:c8:21:f9:
                    35:bf:6c:99:1f:08:16:8e:04:0a:b3:6c:f7:47:0a:
                    c7:2a:0b:86:48:b4:64:ea:c5:19:0e:77:d5:27:00:
                    ed:27:28:3c:32:b4:c5:d5:fd:be:58:4e:5c:5e:d1:
                    a6:f8:8e:65:cf:dd:52:43:7e:fd:63:e5:a4:f5:02:
                    dc:4f:74:91:d5:8e:a5:a2:ad:cd:8b:45:ce:13:16:
                    c2:d8:8b:c4:7e:f9:28:0b:31:36:60:88:f0:31:73:
                    01:1d:33:75:dd:12:07:04:39:33:8f:56:6c:c4:b1:
                    dc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5C:3C:E6:FF:42:43:72:96:20:77:68:AF:58:21:19:E8:EE:01:4E
            X509v3 Authority Key Identifier:
                keyid:E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:71:08:5b:51:48:95:e2:f8:5b:5d:de:b4:c0:7c:cf:e1:6b:
         ac:4e:50:a5:67:4f:a8:64:5d:65:8b:b9:34:14:99:8d:8b:c1:
         8e:dd:a7:f2:e0:49:c4:2f:27:36:54:83:8c:a9:27:8e:79:50:
         a6:9a:2c:f1:35:b6:fd:19:c6:8f:4f:d3:8f:90:a5:a1:c1:3b:
         93:af:90:d5:f5:20:82:a1:97:05:6e:49:c2:4f:b3:45:52:a7:
         59:6e:87:ed:c9:8a:1d:c2:90:50:4e:92:69:b1:79:dc:17:83:
         c2:0f:16:52:8d:58:56:4c:1d:60:5b:f4:c3:fc:ca:41:85:02:
         67:9b:6c:a2:67:1e:24:f3:fa:a7:eb:d7:14:6a:88:ff:aa:93:
         11:d2:3d:10:bc:c6:7d:92:12:e9:03:fc:64:8e:1f:72:47:d8:
         0b:95:70:37:1a:30:8f:a8:a0:8b:fe:4e:e0:5f:65:51:c6:3c:
         49:6b:b3:41:3f:75:f8:aa:d4:58:76:71:8a:31:3a:0c:8a:f9:
         f5:d6:c3:20:38:b2:7e:22:b8:e7:3a:34:9a:11:53:dc:21:be:
         63:6b:69:41:0e:1c:fd:ea:f7:ce:54:42:fc:5c:76:0c:43:4b:
         ae:92:d6:7b:b4:e7:64:92:5a:19:82:0e:de:bf:58:12:f3:69:
         05:33:d6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:53 2026 by rpki-client