Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3234203d3e20313333383030.roa
File:                     3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          ZSthn7Cgu8F7ezrRvGxx4MN4tqZJy9/SKBqVKux9q54=
Subject key identifier:   EB:C0:36:6E:E6:5B:47:2A:FF:49:F3:49:1E:2D:85:BF:BE:0A:E8:D0
Certificate issuer:       /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Certificate serial:       51C844AB30978433CD4BF1973CE75B8DD7DC58E5
Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3234203d3e20313333383030.roa
Signing time:             Sun 03 May 2026 02:38:13 +0000
ROA not before:           Sun 03 May 2026 02:33:13 +0000
ROA not after:            Sun 02 May 2027 02:38:13 +0000
asID:                     133800
IP address blocks:        103.87.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
                          rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c8:44:ab:30:97:84:33:cd:4b:f1:97:3c:e7:5b:8d:d7:dc:58:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
        Validity
            Not Before: May  3 02:33:13 2026 GMT
            Not After : May  2 02:38:13 2027 GMT
        Subject: CN=EBC0366EE65B472AFF49F3491E2D85BFBE0AE8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:ef:07:20:f5:d0:b1:9c:bf:6e:32:76:ca:
                    cd:d8:05:11:33:2d:3a:86:64:36:d6:ab:ef:bb:3b:
                    a8:93:03:69:60:e2:53:4e:aa:ba:5a:58:77:a8:a9:
                    f0:af:1d:dd:5b:84:13:3e:6a:2a:f4:dd:7e:8d:6f:
                    27:2d:8a:29:ca:a7:01:17:fb:6a:e1:e9:ad:ba:b5:
                    73:c1:38:16:2b:98:c1:81:93:30:27:ac:6a:b8:38:
                    0e:d0:53:1a:ad:4f:69:cb:e3:bb:04:e1:7d:3d:3b:
                    09:03:b8:87:cb:ad:ac:ed:0f:b7:16:78:38:40:0a:
                    94:0b:58:5c:89:41:70:a5:51:b2:08:77:88:29:24:
                    ab:d5:3d:14:94:f5:08:f6:ad:e0:74:d8:b7:d2:91:
                    51:7a:1a:80:35:ed:8e:e6:bc:65:95:da:1c:f0:50:
                    e7:13:bc:85:3d:78:a0:5e:6d:aa:82:5d:b3:0d:36:
                    d0:a4:6a:b8:2c:16:e5:96:43:3e:c4:ae:07:f9:da:
                    b4:5f:e5:5b:30:ba:2c:a9:3b:d4:13:fe:db:92:4a:
                    83:90:b0:76:39:40:f8:cc:29:e4:dd:73:8b:77:57:
                    82:90:92:e2:7f:06:45:f9:6b:92:99:1c:88:1e:82:
                    85:a4:2f:84:4e:eb:27:70:8e:e0:c4:56:17:d8:e4:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C0:36:6E:E6:5B:47:2A:FF:49:F3:49:1E:2D:85:BF:BE:0A:E8:D0
            X509v3 Authority Key Identifier:
                keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:93:ac:a2:af:90:5c:f0:03:a5:c6:91:f0:f1:a9:36:97:
         38:cd:ee:3f:ff:aa:e7:a2:fa:f3:b3:fc:4c:23:74:13:fb:f2:
         b2:81:11:63:fa:6e:ef:b9:a5:dd:11:2b:e0:36:71:ab:8f:c0:
         79:31:7b:f0:5a:76:e5:5b:e0:e1:e7:c7:6a:b2:83:11:a2:b1:
         96:08:14:a0:9b:b9:5f:0b:40:65:e9:36:d7:e2:35:85:8b:26:
         fe:bf:c8:46:92:44:00:c7:90:2d:0f:2e:2c:bc:0c:c2:15:0a:
         21:ce:d1:a0:79:00:f2:dd:13:d7:68:a8:fa:a2:30:68:d5:b2:
         52:ae:e3:14:a2:31:8a:f0:39:2f:26:0c:6e:7e:2f:73:26:2a:
         27:fe:7b:67:ac:72:49:ae:2a:04:55:2f:ae:ae:df:18:85:a3:
         ab:7a:75:72:a7:71:4d:67:3d:39:81:d4:c4:1b:38:8c:1f:7d:
         69:98:90:4c:cf:cc:d2:34:91:20:4e:dd:bf:8c:5c:59:da:fb:
         b9:6c:0e:78:7c:07:67:34:96:43:19:85:7e:1d:e8:ad:f6:bd:
         dd:50:f2:d6:43:79:a8:ee:a5:68:9a:44:b0:51:c5:a6:bf:2c:
         75:86:3e:38:12:03:20:c0:09:d7:4e:78:3c:ef:45:4a:61:7e:
         47:a3:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:32 2026 by rpki-client