Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa
File:                     3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          Et4V5BBjDY+smzbUv7zxh8mvfaRbxf+JZnFllGh3+u0=
Subject key identifier:   63:9A:70:93:49:18:63:E3:33:4F:AF:85:70:47:ED:B4:DD:58:8D:37
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       325678B817130D4F08A8506623EF9C71D03F465C
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:23 +0000
ROA not before:           Sun 03 May 2026 02:36:23 +0000
ROA not after:            Sun 02 May 2027 02:41:23 +0000
asID:                     137316
IP address blocks:        103.109.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:56:78:b8:17:13:0d:4f:08:a8:50:66:23:ef:9c:71:d0:3f:46:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:23 2026 GMT
            Not After : May  2 02:41:23 2027 GMT
        Subject: CN=639A7093491863E3334FAF857047EDB4DD588D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:d4:ed:df:0b:46:d4:8a:b5:37:96:50:5b:
                    53:d6:41:06:0d:01:f4:19:51:8d:44:5d:ae:42:60:
                    2c:5b:27:c3:76:ac:9f:b7:30:d6:87:30:ed:32:ea:
                    cf:36:af:38:68:c0:28:13:33:e9:15:ac:8e:41:e4:
                    0f:1f:9f:22:e2:bf:ee:06:2e:9e:d5:c9:14:dc:34:
                    a4:05:1d:71:b0:8a:ca:0c:a4:15:bb:06:b1:67:29:
                    5c:33:0f:73:34:6b:5a:8f:e0:77:74:20:06:78:b1:
                    9e:7c:33:cb:a4:78:25:ba:e6:73:1a:30:86:27:90:
                    68:14:88:15:53:c5:00:2b:25:13:1a:36:61:30:5f:
                    8c:3b:b7:e4:1d:7f:57:aa:76:a5:ce:0a:44:5e:9c:
                    70:d9:b8:65:35:94:53:fe:62:da:7c:c5:b0:b0:4b:
                    00:2b:03:5e:68:0d:9b:25:36:83:ba:72:81:ea:8a:
                    76:9a:19:84:c3:18:43:ee:69:c9:5c:b3:ca:a9:b8:
                    37:98:94:ee:59:f7:ea:65:5d:ed:09:ca:65:a2:7a:
                    a2:ec:4b:6d:9c:b8:8e:b2:a3:d5:f9:c0:19:ab:3c:
                    52:e4:dd:a3:8c:fe:88:a8:69:cb:da:0e:b7:d8:30:
                    77:0a:66:f5:c1:c2:9f:c9:cd:6a:8f:41:b0:4a:2c:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9A:70:93:49:18:63:E3:33:4F:AF:85:70:47:ED:B4:DD:58:8D:37
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:db:b7:37:08:8c:cb:84:50:ab:a3:b6:fe:40:cf:c8:82:cd:
         65:09:da:6f:5f:f5:fb:5f:e8:af:67:8c:16:49:5c:db:5c:ec:
         fe:97:0b:87:7a:7c:6c:63:1e:54:96:58:3e:69:59:92:af:9d:
         33:ab:b2:30:ea:e8:f3:30:52:7a:37:ad:af:41:70:14:5e:7e:
         e8:82:7c:35:72:3a:a2:d8:db:55:78:7e:0b:b9:be:e4:82:3b:
         41:4d:2e:0d:0c:79:60:0d:6b:1e:d0:5f:04:df:b0:c9:ad:90:
         a3:b4:0d:3f:52:ee:fe:7a:7b:2e:08:ee:f6:54:41:32:d8:dc:
         e8:5d:32:c0:da:80:80:b3:c3:e0:27:44:df:9d:1b:f6:df:18:
         04:11:c9:0d:dc:6c:c9:7e:f6:63:dd:bc:4f:af:9d:c4:fb:e4:
         33:1a:bd:82:a7:7f:81:13:3a:68:63:98:07:ce:61:3f:81:ee:
         2d:00:e1:43:cb:e7:79:82:4f:2d:c2:02:fa:c0:ed:76:db:cd:
         80:d2:38:20:1c:67:ad:ef:48:18:4d:79:70:d2:ec:d4:fa:44:
         b6:48:e3:2f:4b:fd:ec:04:a1:be:3b:ab:13:d2:95:31:a1:33:
         ac:58:a1:cb:04:0f:f0:dc:92:16:6c:d6:2d:e7:ce:71:a6:02:
         5f:51:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:01 2026 by rpki-client