Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/3130332e3130342e31322e302f32322d3232203d3e203535363939.roa
File:                     3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          yHStdJOfwpXotUrFqNRyBFcevnLpf2rHuaCz1qS9rN0=
Subject key identifier:   F6:9C:AA:7A:76:C4:9B:ED:70:3E:4F:72:D3:18:15:12:49:0F:C7:5A
Certificate issuer:       /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
Certificate serial:       5242C7AC204B33A6F6F83D298BD337BF9BE22129
Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/3130332e3130342e31322e302f32322d3232203d3e203535363939.roa
Signing time:             Sun 03 May 2026 02:40:04 +0000
ROA not before:           Sun 03 May 2026 02:35:04 +0000
ROA not after:            Sun 02 May 2027 02:40:04 +0000
asID:                     55699
IP address blocks:        103.104.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl
                          rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:42:c7:ac:20:4b:33:a6:f6:f8:3d:29:8b:d3:37:bf:9b:e2:21:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B
        Validity
            Not Before: May  3 02:35:04 2026 GMT
            Not After : May  2 02:40:04 2027 GMT
        Subject: CN=F69CAA7A76C49BED703E4F72D3181512490FC75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:72:32:67:7e:79:2c:e6:b8:39:13:31:d6:
                    b2:7a:7a:59:d3:9e:27:78:f4:b9:86:cd:c2:93:45:
                    05:96:a7:ca:90:d4:c2:7c:72:4b:88:00:b8:c5:3b:
                    c6:63:1e:a1:45:10:cd:d0:6c:40:97:6d:f6:81:2a:
                    10:8a:f3:a6:11:d1:9f:f2:4f:fc:99:2d:ee:cb:86:
                    15:22:fa:39:b6:c8:60:3c:c1:ba:ca:04:e5:55:70:
                    5d:2f:70:12:aa:fd:2d:03:e7:8b:7e:96:6f:af:1e:
                    f6:94:27:8f:fa:4c:93:52:92:a3:e1:58:34:26:5b:
                    4f:5c:d5:98:73:81:a6:74:15:ce:d0:15:61:53:91:
                    66:e1:64:04:18:2c:aa:0a:49:ea:0a:03:a1:e6:3a:
                    f5:b3:16:76:a8:9b:46:8a:54:94:d6:64:ac:fc:85:
                    c0:9b:8f:df:9c:ee:1a:09:d6:9c:76:66:47:ab:45:
                    7a:cd:50:4d:10:2b:bc:c7:e9:37:95:c9:74:2f:fe:
                    23:ec:d2:f0:35:0c:94:2a:8a:34:9d:8c:fa:44:ce:
                    5f:50:c1:3f:cf:7a:da:f4:3e:97:99:6f:69:87:06:
                    0c:28:ab:67:ce:2f:dd:25:c0:3a:94:9f:26:83:d2:
                    44:51:f1:6b:0f:b3:d8:07:20:b3:87:07:ed:b7:7b:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9C:AA:7A:76:C4:9B:ED:70:3E:4F:72:D3:18:15:12:49:0F:C7:5A
            X509v3 Authority Key Identifier:
                keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/3130332e3130342e31322e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:53:34:dc:e2:2a:01:60:98:45:c4:26:f3:d0:bb:46:81:26:
         6a:d2:fc:c9:a0:30:bf:95:89:20:8d:b7:23:ce:91:bb:25:5b:
         cb:ac:38:ba:cb:23:dd:fa:62:af:59:15:82:72:2f:0d:3e:c6:
         8c:99:dc:3e:85:0f:37:4b:58:bd:38:20:dd:8a:22:80:a1:b3:
         20:b2:61:90:61:59:e0:07:e8:81:27:d8:7f:b5:b6:f9:e4:26:
         db:49:08:1e:62:3c:af:ed:4e:5e:41:03:81:1e:90:69:2a:d0:
         57:0e:91:88:b1:95:a5:1f:b7:04:4a:9e:9c:17:9c:30:13:5e:
         2b:6e:6d:9b:b0:e1:5f:39:a2:a8:76:c9:3a:05:b3:bf:57:1c:
         34:97:7b:dc:3f:84:59:4a:17:c2:3e:eb:f7:00:78:84:61:eb:
         85:2d:b1:a7:5d:ce:4f:82:99:ce:af:4e:84:16:64:de:27:81:
         26:a2:99:50:d3:3f:8a:78:10:12:55:c8:c2:86:62:f5:5d:6e:
         9e:9b:ee:81:8d:06:aa:1c:00:0d:45:38:8b:6f:80:6b:59:b3:
         0a:af:0a:f9:8e:80:e9:34:26:71:cd:f1:fe:4a:b4:81:95:a5:
         ed:77:7e:f3:45:ec:ae:f2:8c:59:56:cd:03:6b:14:d3:6a:e9:
         7a:49:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:37 2026 by rpki-client