Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa
File:                     3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (raw, json)
Hash identifier:          wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=
Subject key identifier:   E7:40:E7:D4:AE:F7:2E:AE:F8:07:3B:73:A7:6F:04:20:8A:A6:AA:D8
Certificate issuer:       /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
Certificate serial:       24BFFAA239D55A16F94976F2512146F06FA7AB
Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa
Signing time:             Sun 03 May 2026 02:37:56 +0000
ROA not before:           Sun 03 May 2026 02:32:56 +0000
ROA not after:            Sun 02 May 2027 02:37:56 +0000
asID:                     142401
IP address blocks:        103.172.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl
                          rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bf:fa:a2:39:d5:5a:16:f9:49:76:f2:51:21:46:f0:6f:a7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
        Validity
            Not Before: May  3 02:32:56 2026 GMT
            Not After : May  2 02:37:56 2027 GMT
        Subject: CN=E740E7D4AEF72EAEF8073B73A76F04208AA6AAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:83:9c:4d:33:72:96:70:f7:c3:4e:02:4f:
                    b7:89:a8:55:68:32:d8:7b:8d:03:17:78:5b:27:5e:
                    a4:74:92:86:9b:2b:5f:b3:2c:29:9b:90:70:a9:54:
                    c9:55:1e:96:08:f1:54:a3:cd:5a:d1:b2:48:8c:1a:
                    02:a8:56:be:71:4b:fd:d4:71:73:02:ea:1e:64:b6:
                    b4:2f:63:54:db:61:3a:87:38:d9:a4:af:e4:3e:ef:
                    81:0a:8a:51:8f:a9:e1:e3:7e:b3:69:a3:4b:7b:ad:
                    0e:21:f9:d0:7b:8d:56:79:17:4a:bb:28:9c:7d:b4:
                    53:db:1a:78:1d:95:b5:1a:42:70:3d:6e:ba:47:61:
                    ac:d7:91:05:c4:66:dd:0a:46:8d:03:d2:72:7f:68:
                    68:33:09:18:d6:33:f9:e0:ab:ed:f2:13:26:7b:97:
                    ab:38:e9:01:d9:5e:94:89:c5:cd:85:85:95:78:cb:
                    18:a1:16:f1:00:4c:42:e0:eb:32:2a:f5:7e:8a:12:
                    9f:16:43:7e:47:81:f3:8a:08:93:de:63:ed:b2:33:
                    5b:91:fd:e5:d4:bf:b3:d5:94:5d:15:c0:8e:a9:dd:
                    25:53:63:7f:8d:a9:68:ca:88:17:4b:d9:02:24:a5:
                    14:bf:43:60:af:8d:35:f6:1e:f4:23:bb:16:ac:99:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:40:E7:D4:AE:F7:2E:AE:F8:07:3B:73:A7:6F:04:20:8A:A6:AA:D8
            X509v3 Authority Key Identifier:
                keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:3e:38:fb:97:6e:64:cf:ff:7a:02:70:9b:a4:63:a9:e6:
         3b:0a:80:53:7a:82:26:63:be:3c:67:29:a1:76:28:29:7e:fc:
         77:de:c0:88:5e:32:d9:f6:60:c3:8a:12:af:e6:5f:ae:08:21:
         d1:0c:ac:e8:1b:b8:eb:96:6b:f8:6b:e7:56:7c:ad:42:90:4c:
         f5:a6:6e:28:02:10:13:5e:fa:f2:c2:ff:b6:9d:60:af:ad:25:
         2b:4f:58:d0:4e:84:5c:49:40:e8:7a:02:70:e0:62:bb:40:11:
         3b:82:4c:c1:f8:8e:ba:17:d7:01:fa:a1:05:75:1d:62:2a:59:
         e6:ad:b4:ac:c4:76:4e:ca:87:94:f3:b6:20:2b:1b:99:06:6b:
         cd:b9:00:de:94:5d:d3:f6:41:36:b2:ee:ab:93:fd:ee:cd:0a:
         b5:bd:10:1d:70:03:e5:44:2e:c5:21:a0:27:e9:84:ff:5c:d2:
         41:46:1f:69:72:16:19:c5:34:40:88:3a:a2:e1:cb:8a:a4:28:
         47:17:91:22:46:c3:67:26:d1:0e:c2:72:4e:58:4a:50:2e:41:
         a1:a3:aa:9f:09:a1:61:63:a8:3d:60:69:48:1d:a8:a1:ee:95:
         bc:56:42:39:a6:18:24:c2:e7:94:46:60:57:d1:75:5b:30:72:
         53:25:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:24:30 2026 by rpki-client