Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          t30njUzebXe3AxcuIduvUxjNgMCTv9/yxa80hivgvRU=
Subject key identifier:   82:E5:77:19:7E:C5:30:7C:83:BE:1B:C8:FD:60:76:23:B2:5F:E6:85
Certificate issuer:       /CN=B030517A0B1BD65FBFEE74838496299F0BA05F7F
Certificate serial:       1F6FC11621D3B18465DF1F1756EBD81E9C29B8F3
Authority key identifier: B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:32:56 +0000
ROA not before:           Sun 03 May 2026 02:27:56 +0000
ROA not after:            Sun 02 May 2027 02:32:56 +0000
asID:                     135478
IP address blocks:        103.121.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl
                          rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6f:c1:16:21:d3:b1:84:65:df:1f:17:56:eb:d8:1e:9c:29:b8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B030517A0B1BD65FBFEE74838496299F0BA05F7F
        Validity
            Not Before: May  3 02:27:56 2026 GMT
            Not After : May  2 02:32:56 2027 GMT
        Subject: CN=82E577197EC5307C83BE1BC8FD607623B25FE685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:6c:6f:eb:68:21:7b:76:36:28:11:c5:84:
                    4e:6b:dd:f4:c7:5e:6e:d1:16:dc:3a:a3:bb:09:d1:
                    97:be:34:32:f9:ea:d0:72:39:2a:10:ce:80:f8:ad:
                    59:97:c6:78:ff:3c:fb:40:b9:f4:a4:d9:28:45:b5:
                    1f:70:92:f1:f3:e4:42:a1:d2:00:4c:31:18:3c:09:
                    96:98:ed:06:df:ee:1b:c0:51:14:21:48:fb:0a:27:
                    53:55:9d:b8:9f:8f:af:e2:6f:44:af:aa:69:7b:2c:
                    df:05:0a:23:6f:86:6d:72:dd:27:f1:03:de:89:31:
                    f3:02:f8:b0:b5:21:9e:53:3b:5d:f0:59:3c:ae:a1:
                    0b:9d:ce:57:dd:57:5a:b4:0e:a0:1e:a5:f2:23:31:
                    0b:23:7b:26:dd:fb:0e:ff:cb:0f:2c:11:a9:1b:35:
                    5e:6a:5c:ec:a5:5f:93:72:2b:75:4f:1a:3c:62:ee:
                    ac:df:2d:5f:1c:33:7a:a4:30:3e:3e:8a:4d:db:a3:
                    2e:24:d5:cc:45:b9:56:49:85:7d:68:b5:02:b0:03:
                    b3:42:fa:2f:d0:69:79:58:91:cf:c9:ed:43:0e:d6:
                    5d:83:d1:7d:63:27:40:b7:49:39:d2:5f:0c:ec:ac:
                    3e:c6:fa:9d:d6:f5:eb:fe:a2:68:fa:63:37:0d:fa:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E5:77:19:7E:C5:30:7C:83:BE:1B:C8:FD:60:76:23:B2:5F:E6:85
            X509v3 Authority Key Identifier:
                keyid:B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:6a:76:e9:35:3b:06:3a:c2:e3:f9:28:13:7d:1b:a3:8e:3c:
         93:06:2e:06:53:36:87:b7:9c:ef:9d:0a:71:b9:ba:bf:c9:93:
         02:a3:60:ee:7d:25:fa:17:c5:c5:5a:bb:a0:0f:70:c0:64:b9:
         72:2f:bf:d1:2a:88:68:3f:ba:59:c8:02:c9:c5:79:f1:cd:3b:
         08:85:6c:d1:65:c5:45:eb:31:f3:f2:90:dd:53:f0:da:9b:41:
         a7:b0:21:1f:8f:c4:c5:12:f0:f6:ea:e6:83:5f:30:4b:5f:3a:
         70:6a:a7:d2:31:43:f4:02:75:8c:46:1c:83:0b:7e:4b:59:8c:
         aa:ae:60:18:00:01:a3:d1:95:6e:4d:64:e8:0f:4a:d2:c7:23:
         0e:ca:f9:08:92:98:a4:23:e4:7e:f9:7f:1c:a0:fd:69:d5:80:
         19:ab:13:5f:45:81:f6:9a:92:49:d9:f0:73:9f:54:b0:2d:85:
         f5:09:5a:4d:11:c8:5a:87:ad:e5:3d:e8:0b:a0:0a:d0:ac:69:
         92:e7:85:dc:b4:2a:38:d6:40:2f:dd:45:c7:b6:e4:c5:cb:60:
         6f:b3:25:91:31:16:9c:03:49:a5:f5:f6:ea:d2:76:69:10:2f:
         e4:9a:c3:a9:30:80:6d:e4:dd:a7:c6:ce:1b:64:98:b1:82:2a:
         e4:a1:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:25 2026 by rpki-client