Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131392e302f32342d3234203d3e203234353139.roa
File:                     3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (raw, json)
Hash identifier:          3thO/9yyE41CicpFLtHQ75Nw909jV+2QY8QpbmSrjas=
Subject key identifier:   A0:99:C9:03:29:27:3A:6B:6C:65:34:4A:C5:45:09:5F:47:0C:C4:2A
Certificate issuer:       /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Certificate serial:       18C1D50D7DC5D226D53B1E79D998DCFBE5D3CE2E
Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131392e302f32342d3234203d3e203234353139.roa
Signing time:             Sun 03 May 2026 02:32:20 +0000
ROA not before:           Sun 03 May 2026 02:27:20 +0000
ROA not after:            Sun 02 May 2027 02:32:20 +0000
asID:                     24519
IP address blocks:        103.42.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
                          rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c1:d5:0d:7d:c5:d2:26:d5:3b:1e:79:d9:98:dc:fb:e5:d3:ce:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
        Validity
            Not Before: May  3 02:27:20 2026 GMT
            Not After : May  2 02:32:20 2027 GMT
        Subject: CN=A099C90329273A6B6C65344AC545095F470CC42A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:43:ef:49:d8:e5:9c:1c:35:9b:d3:ee:16:
                    28:4f:d3:b8:87:31:13:5e:4c:51:35:25:a1:18:fe:
                    8d:55:7d:5b:05:be:22:17:9d:4c:8c:fb:29:4d:6a:
                    61:9b:44:07:d8:6e:73:ef:42:7f:8a:20:b1:ee:70:
                    72:0d:05:4d:73:15:f9:c4:17:87:9f:63:0b:f7:cd:
                    47:3d:1f:e8:97:25:f1:31:f0:ed:a1:ed:67:d4:ed:
                    8a:1a:3f:f1:cf:1f:e0:f8:20:42:20:9a:ef:f2:5d:
                    81:df:c3:17:f0:db:ea:42:5d:93:23:a7:12:e1:bf:
                    b5:9b:b5:bb:c1:39:58:5a:ab:c7:9b:d3:dd:0b:5f:
                    93:38:46:ef:d9:f9:66:71:80:b5:09:b8:22:26:8d:
                    00:ce:c5:93:7a:89:55:12:4d:99:60:38:e7:a0:6b:
                    b7:26:82:e6:d2:da:d3:99:b0:db:0c:a1:b9:1d:44:
                    5f:17:e0:fc:85:45:8b:bf:6b:ad:6f:24:f5:54:3d:
                    3b:0e:b4:d5:e4:4c:4a:1c:bc:13:f0:f1:be:c8:27:
                    b1:71:b8:9b:21:f2:80:0b:e7:b1:6c:31:a7:00:0d:
                    3e:ef:eb:1a:d6:ca:b8:6a:28:65:6c:30:11:4b:3b:
                    12:37:43:81:07:3b:d5:c3:16:36:13:a5:e0:74:1b:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:99:C9:03:29:27:3A:6B:6C:65:34:4A:C5:45:09:5F:47:0C:C4:2A
            X509v3 Authority Key Identifier:
                keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131392e302f32342d3234203d3e203234353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:20:97:b6:d8:04:6c:fe:45:4f:60:96:ee:dc:97:d3:de:3e:
         2f:d3:27:ab:c9:29:9d:4a:18:13:53:00:48:3a:29:99:72:64:
         73:12:e2:a1:a1:f9:78:17:58:6a:2c:16:a3:e8:6a:c4:60:a6:
         68:3d:d9:fa:a5:63:f0:69:5e:b7:ca:9a:2a:d1:48:4d:47:c3:
         32:ce:3c:4a:00:e4:dc:24:46:ff:7a:81:59:76:87:39:38:c2:
         36:9a:44:57:24:b9:50:14:02:e5:86:c0:46:9a:98:2c:af:5c:
         fe:61:20:4a:72:8c:e6:e5:91:86:ad:dc:e8:0b:d8:15:59:1a:
         fa:46:63:8e:3b:67:f6:2d:54:18:c9:64:c4:a4:3c:f0:86:02:
         10:87:54:1f:3e:66:d9:e1:df:50:8d:2a:24:fc:10:55:b9:47:
         67:32:3c:eb:bf:dd:a7:21:6d:63:58:c3:65:c5:30:17:31:4e:
         b2:0f:e0:8f:82:8c:aa:29:5c:58:68:9c:29:93:c0:26:47:d0:
         d1:d3:f0:83:e3:ba:0d:95:df:ff:0c:71:58:86:41:b5:f5:69:
         8f:5a:13:6a:cf:0c:b1:8d:ca:c8:44:4d:1e:09:25:fc:44:3e:
         86:ba:25:57:49:73:10:59:3e:40:73:39:61:c4:30:d8:23:eb:
         0d:2e:73:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:13 2026 by rpki-client