Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa
File:                     3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (raw, json)
Hash identifier:          Sd3fhLkfAzIYKIa+lxI8//LD+Sqt+jk5hVCJVdmO8ro=
Subject key identifier:   85:DF:AD:E8:73:88:DF:4A:13:49:81:5D:52:0F:38:33:FD:99:C2:7A
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       0F11E34EC98F320EDC01B08252074D8889E8D1C9
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa
Signing time:             Sun 03 May 2026 02:32:24 +0000
ROA not before:           Sun 03 May 2026 02:27:24 +0000
ROA not after:            Sun 02 May 2027 02:32:24 +0000
asID:                     18004
IP address blocks:        103.234.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:11:e3:4e:c9:8f:32:0e:dc:01:b0:82:52:07:4d:88:89:e8:d1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: May  3 02:27:24 2026 GMT
            Not After : May  2 02:32:24 2027 GMT
        Subject: CN=85DFADE87388DF4A1349815D520F3833FD99C27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:7b:80:17:9c:71:85:71:ff:28:2f:f1:9f:
                    0d:56:3a:2f:6e:05:59:e7:0e:bc:22:6e:29:e1:9a:
                    cb:9c:76:d8:1a:14:ef:ae:3e:06:7f:ce:54:b9:bc:
                    26:96:1f:1d:6e:96:22:f5:a8:f3:a2:57:0d:2d:58:
                    58:2f:b3:ef:1d:e7:49:29:bf:60:f7:cf:3e:f5:ba:
                    7b:02:b0:ee:52:fe:27:a0:a8:d5:df:36:f0:b8:c5:
                    cc:f4:c3:2e:86:25:be:ad:66:65:7c:04:dc:ac:87:
                    89:2d:de:01:3d:0a:69:32:f2:cc:56:65:fe:ed:fb:
                    c7:08:06:02:83:9e:ff:76:7a:e1:23:32:cf:23:f5:
                    ad:c3:12:d5:de:06:30:bb:d9:39:df:9c:96:d3:8a:
                    79:96:76:b4:41:0c:99:13:14:bb:e1:c1:83:ed:2e:
                    44:72:57:0c:74:d4:c4:ee:bf:47:fa:0b:6e:dd:b2:
                    b8:d4:bf:4f:bf:e8:46:21:5f:4c:a6:5e:e2:f0:2a:
                    c5:75:d4:bd:89:c9:fa:5d:87:14:50:39:11:4c:e2:
                    4e:4f:c2:5a:7e:16:4e:5d:40:80:9e:f4:41:ae:39:
                    d3:22:cc:73:fa:d6:6d:fd:a7:4e:6b:d7:34:a1:76:
                    4d:78:22:33:de:9c:33:75:9b:b2:00:2f:47:bf:ed:
                    dc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DF:AD:E8:73:88:DF:4A:13:49:81:5D:52:0F:38:33:FD:99:C2:7A
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:63:50:da:7a:0b:87:ee:c2:f6:54:da:14:bd:d3:0e:96:2e:
         c3:0a:fd:5a:a9:f1:8b:78:b3:32:8b:13:2e:2d:15:e1:3d:9a:
         e1:72:bf:d2:74:7f:16:19:b6:c1:80:74:b8:7b:a1:de:a4:50:
         5c:ce:94:e1:52:93:dd:e9:1a:90:65:0a:12:59:83:c8:75:b0:
         71:af:06:1d:2c:4e:d7:6b:ce:ea:fd:69:aa:53:1f:5c:ae:16:
         ac:8c:cf:cc:84:b9:8e:30:21:65:04:9a:2e:9f:be:92:7c:51:
         fd:08:57:c9:14:3b:65:ef:a0:cd:22:7c:5a:2d:c6:3a:8b:af:
         23:a7:21:7d:69:4c:c2:95:e9:5a:b8:41:cc:90:a9:62:c9:a3:
         1c:16:65:e3:09:7c:9b:8b:2f:51:36:b3:6a:3d:af:09:4f:49:
         79:4c:13:db:49:23:7d:10:82:b4:0d:c8:ae:38:21:2b:46:25:
         bb:87:85:eb:c2:be:2a:2e:0f:8a:94:04:aa:b8:8c:f8:e6:33:
         2a:65:cb:d9:1a:b3:e0:20:1e:a4:fe:3e:42:d4:bd:42:d9:e0:
         6d:d3:3f:01:5b:99:1e:6d:58:73:be:3d:a6:41:ef:7e:f6:8f:
         8b:3d:cb:1d:75:af:28:e7:10:3d:b5:84:b0:ce:ce:b0:24:7a:
         b7:13:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:04 2026 by rpki-client