Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
File:                     3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier:          tUv0W4gMiS1vhejBIsoiDaLo6/xoWf91YpxI7rtj5ao=
Subject key identifier:   CC:BF:95:50:63:AD:15:3A:5E:89:7D:9C:47:C2:83:BA:04:B6:51:CA
Certificate issuer:       /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E
Certificate serial:       5AA5EB8A6FEFE9827E651F6B823C7C0D32392EDA
Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
Signing time:             Sun 03 May 2026 02:34:18 +0000
ROA not before:           Sun 03 May 2026 02:29:18 +0000
ROA not after:            Sun 02 May 2027 02:34:18 +0000
asID:                     136087
IP address blocks:        103.87.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl
                          rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a5:eb:8a:6f:ef:e9:82:7e:65:1f:6b:82:3c:7c:0d:32:39:2e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E
        Validity
            Not Before: May  3 02:29:18 2026 GMT
            Not After : May  2 02:34:18 2027 GMT
        Subject: CN=CCBF955063AD153A5E897D9C47C283BA04B651CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:10:1d:1a:b1:1b:7e:6a:97:6a:f7:cf:f0:
                    3e:e1:f3:61:50:70:77:a5:1d:b9:1c:29:76:be:ba:
                    2f:7f:ec:1f:83:15:59:42:26:7c:81:6a:a1:be:49:
                    62:98:1f:34:4d:34:62:fe:d6:03:70:82:47:3d:75:
                    e2:17:61:ba:1e:94:99:f5:4a:63:b8:61:d5:7b:aa:
                    cf:08:a1:2a:e4:73:0c:a3:7d:d0:f7:47:9c:a5:0d:
                    ff:14:8b:a9:94:20:14:26:db:bf:bc:e6:9a:ed:08:
                    59:68:c0:06:10:80:ab:89:97:22:c1:c9:2b:c5:e2:
                    d3:3b:23:36:fa:2a:7d:cf:be:16:c9:28:25:23:be:
                    9a:5d:22:37:cb:1c:47:dc:4f:62:9e:af:32:cb:a2:
                    95:7d:2c:53:8a:2c:e3:c5:84:66:ff:f4:04:a9:ec:
                    08:cc:60:2e:0f:e4:85:fe:57:f1:42:a6:08:00:ea:
                    03:ed:8d:39:5c:e4:40:9a:41:13:d3:a8:9e:b7:e2:
                    c7:cb:7a:34:fd:b1:ec:c9:95:eb:2b:79:6d:91:35:
                    28:40:0f:65:df:16:cb:a8:70:5f:79:39:63:ae:13:
                    13:fa:95:a0:b9:fe:f5:c4:4f:9b:05:8a:dd:04:b3:
                    ba:ca:7b:0a:0e:9c:89:6f:e1:62:8a:20:be:23:79:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BF:95:50:63:AD:15:3A:5E:89:7D:9C:47:C2:83:BA:04:B6:51:CA
            X509v3 Authority Key Identifier:
                keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:61:79:13:24:b1:88:f7:56:45:ba:2e:54:ee:58:97:00:
         28:6a:96:ea:06:a6:65:86:d3:9b:fb:94:f2:71:91:6b:c8:5c:
         47:28:ca:ff:7e:da:be:1e:55:99:69:db:00:80:39:56:f9:a8:
         a5:0f:71:99:0c:e3:3d:d8:fb:0b:91:fb:54:ea:51:8a:69:16:
         77:09:50:3c:47:53:a7:c5:0d:1d:c0:bd:b1:84:f1:78:a9:d4:
         46:72:81:9e:d1:07:56:9c:f4:6b:c1:be:e2:38:1e:1e:b9:97:
         c9:03:9a:c2:3e:95:04:41:39:a1:ab:87:83:cd:f8:d9:c9:a2:
         b5:9a:d1:6d:1c:e2:61:5e:c3:03:b2:04:87:7f:3d:c4:51:91:
         35:93:4c:2e:84:c8:70:f8:36:a7:b2:5f:4b:a3:9c:ee:52:30:
         12:af:6d:f9:60:20:1b:17:d2:84:bc:c4:64:0e:dc:1f:58:12:
         3d:69:39:81:b3:c0:78:5e:aa:fc:8e:96:cd:a8:00:6e:2d:e0:
         08:45:43:ba:5f:49:82:98:37:06:f8:88:7b:49:63:e7:af:53:
         07:2e:fd:5b:17:88:8b:11:34:d5:8f:e3:13:0c:1f:1c:bb:d4:
         a1:70:37:7a:10:ee:b9:b8:0b:b5:dc:ee:78:bc:ed:e1:2a:33:
         b5:75:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:31 2026 by rpki-client