Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa
File:                     3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (raw, json)
Hash identifier:          GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=
Subject key identifier:   E9:F0:A3:58:CB:67:FE:1A:1C:50:76:53:A2:08:8F:4C:B7:6C:CF:1C
Certificate issuer:       /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
Certificate serial:       31D7AA00BDF2D6D1FF97D3EEFCE8A457F1847CB6
Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa
Signing time:             Sun 03 May 2026 02:37:57 +0000
ROA not before:           Sun 03 May 2026 02:32:57 +0000
ROA not after:            Sun 02 May 2027 02:37:57 +0000
asID:                     142401
IP address blocks:        103.172.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl
                          rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d7:aa:00:bd:f2:d6:d1:ff:97:d3:ee:fc:e8:a4:57:f1:84:7c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
        Validity
            Not Before: May  3 02:32:57 2026 GMT
            Not After : May  2 02:37:57 2027 GMT
        Subject: CN=E9F0A358CB67FE1A1C507653A2088F4CB76CCF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:c9:12:d4:29:cb:05:1c:5f:db:24:f2:f3:
                    21:3b:ef:59:7b:21:38:99:3d:52:3d:69:e3:01:1a:
                    c4:14:d9:d7:66:13:8f:9a:2a:88:83:0b:91:74:de:
                    b1:15:af:38:2f:36:2f:7b:b6:b0:d8:45:9d:33:38:
                    5b:5a:86:5a:dd:55:13:33:74:42:c7:d2:a9:a4:07:
                    86:dc:70:7a:32:d5:19:13:1f:8c:52:e7:5d:74:e2:
                    6d:cf:6e:2c:4c:23:a6:55:76:04:70:75:91:cf:d5:
                    2f:60:3f:d6:66:0c:6a:3f:73:50:12:f8:03:33:4f:
                    38:5d:18:87:df:80:78:73:65:ca:f9:e5:90:05:fd:
                    bd:e7:88:fb:70:5f:62:b5:03:a3:4b:78:43:d0:86:
                    ac:f6:35:ea:5d:0c:52:f4:39:46:1f:3e:dc:70:61:
                    3a:67:35:f0:ce:71:89:28:53:5f:77:f5:8c:57:36:
                    47:dc:0c:c3:74:67:e0:ec:aa:a1:3c:04:d7:eb:99:
                    79:56:42:db:96:03:d8:5e:37:c3:20:d2:a8:50:da:
                    f4:92:8c:d8:4d:e2:c6:57:3c:50:44:c1:54:58:9b:
                    f2:49:00:52:40:d6:eb:72:c6:fe:76:b9:9b:d7:4f:
                    b5:82:9d:32:d0:9b:b5:8f:4b:0c:a6:39:73:5c:14:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F0:A3:58:CB:67:FE:1A:1C:50:76:53:A2:08:8F:4C:B7:6C:CF:1C
            X509v3 Authority Key Identifier:
                keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:4e:e1:57:48:66:54:17:c5:bb:70:cc:27:ce:1b:97:71:99:
         14:1e:cb:20:83:c5:38:c4:b8:55:74:04:c3:0c:c7:50:0d:7a:
         b4:92:ec:93:97:d0:ca:8d:1d:fd:b0:0c:54:b0:f0:57:1a:51:
         f0:43:11:78:81:2d:61:35:98:5d:a7:75:9e:30:d4:05:08:5e:
         e8:3b:56:0e:c0:a6:ea:e9:cc:79:dc:9a:96:dc:ad:49:a1:64:
         75:2d:eb:96:b7:c4:6b:02:bf:39:c4:d8:c2:ba:4b:cb:ee:ee:
         06:1d:51:da:5b:48:23:da:e3:cb:1c:47:bd:17:1c:4e:b0:30:
         2b:82:2e:03:27:d2:4e:8e:e7:cc:6d:5c:bc:48:7d:9e:bd:b5:
         60:84:1f:eb:30:64:da:a6:35:3c:63:3c:c6:79:1e:81:2a:2a:
         f2:1a:f2:79:6e:f5:33:b3:bc:7b:f1:3b:39:7b:11:99:2a:36:
         06:4e:db:c4:8c:1b:e1:68:19:ac:84:a1:37:f6:a5:3f:aa:72:
         fc:a0:51:90:ee:32:f5:eb:1f:19:8b:69:a2:b8:6b:6f:ae:78:
         f4:8c:a8:cb:fd:68:f1:70:74:1a:98:7b:f4:de:83:71:95:df:
         d5:15:d5:1e:d2:b4:1d:56:7a:98:93:8f:87:16:44:37:4a:9c:
         e4:bf:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:34 2026 by rpki-client