Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa
File:                     3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (raw, json)
Hash identifier:          fyLe+p/AB5OB4ujhmHeH2n5bm2C2Orl4eXn3b+l/rRM=
Subject key identifier:   AD:84:5B:7A:D9:98:30:DF:D9:D2:2F:AA:42:EE:5A:62:CC:59:62:3D
Certificate issuer:       /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
Certificate serial:       54E1E2DC1C6C270C7A85D77CCA0D514E15C215C1
Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa
Signing time:             Sun 03 May 2026 02:32:45 +0000
ROA not before:           Sun 03 May 2026 02:27:45 +0000
ROA not after:            Sun 02 May 2027 02:32:45 +0000
asID:                     137343
IP address blocks:        103.113.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl
                          rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e1:e2:dc:1c:6c:27:0c:7a:85:d7:7c:ca:0d:51:4e:15:c2:15:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
        Validity
            Not Before: May  3 02:27:45 2026 GMT
            Not After : May  2 02:32:45 2027 GMT
        Subject: CN=AD845B7AD99830DFD9D22FAA42EE5A62CC59623D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:90:4d:30:80:a1:8a:e7:69:3c:b1:31:95:
                    6e:37:de:a8:4d:da:5a:98:81:bf:86:42:a5:2e:fc:
                    97:8d:83:20:c0:bf:55:6a:b5:aa:97:64:95:9d:8f:
                    1a:5a:e7:b8:75:0d:cd:a0:28:09:8a:62:91:ed:a0:
                    3a:50:97:cb:84:e3:f5:4e:b1:35:ac:00:60:c1:bd:
                    17:b4:0d:6f:c6:dc:8c:b9:8f:dd:fb:5e:02:f2:3f:
                    97:b4:1e:d3:e0:86:7e:cc:cc:88:3c:cf:9c:40:72:
                    4d:87:8f:44:fd:4d:94:c0:20:74:4c:68:42:21:39:
                    2b:41:10:31:6b:55:8c:e7:21:81:b3:72:9f:64:e2:
                    88:89:50:99:ea:5a:06:71:50:8a:a2:ef:b0:57:c4:
                    1a:bc:4a:08:94:87:63:2d:cd:cb:41:e8:dd:5e:7b:
                    ee:9b:ca:19:74:75:2d:9a:2e:21:f4:0c:9d:46:86:
                    75:77:e7:8e:c8:44:33:13:91:11:11:44:8a:1e:3e:
                    e6:68:e3:0b:fe:e4:09:2b:c2:0c:a1:24:f7:ba:e7:
                    bb:76:59:5d:13:96:89:28:d2:df:7b:5b:fc:04:ad:
                    bc:12:a8:e5:6b:ee:27:05:0f:a8:f3:bd:e4:d1:a7:
                    3d:d8:11:53:d4:9a:5f:eb:8b:01:f3:7f:f9:47:b7:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:5B:7A:D9:98:30:DF:D9:D2:2F:AA:42:EE:5A:62:CC:59:62:3D
            X509v3 Authority Key Identifier:
                keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:8c:79:83:78:a6:8a:84:69:2a:c7:75:4a:cd:91:65:cb:
         19:8c:1b:4d:40:f0:4d:83:fb:e4:e4:84:25:e6:a0:48:83:bc:
         fa:4c:e1:e6:2f:58:06:07:7a:cb:4e:a0:15:c4:a6:b3:72:80:
         df:14:2d:04:8a:b6:9e:76:d3:05:97:2e:79:14:b0:b6:ab:c0:
         81:24:df:f4:7e:5d:a4:53:59:8b:29:e4:c6:d8:24:ef:a1:b2:
         fc:6a:0f:3d:50:3a:30:9e:46:6f:57:5e:40:78:93:c9:10:85:
         9a:a1:80:2e:4b:39:db:b7:c6:72:55:2c:21:8d:16:2f:56:81:
         c5:88:aa:5c:b1:18:e0:05:26:a7:a3:5e:3c:40:0e:a1:9a:a0:
         2d:71:ce:a0:ad:ce:c2:b6:2b:f5:f0:27:c9:54:54:03:83:65:
         68:70:6b:dd:32:5c:c0:5b:66:a4:8e:95:c0:5c:1a:fb:c2:fd:
         ab:e7:79:e7:61:c1:51:53:4e:6a:da:7d:98:ad:a1:ce:64:69:
         e7:8a:e9:5b:46:cd:73:ea:0b:55:18:5b:c6:2c:11:49:a8:5f:
         5b:12:f6:23:fd:69:b7:04:3f:d1:9c:77:91:a9:bd:15:6f:d0:
         b2:32:83:93:12:7b:96:2b:ec:d7:9f:d1:89:0c:04:33:37:c6:
         da:5a:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:12 2026 by rpki-client