Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132352e302f32342d3234203d3e20313337333136.roa
File:                     3130332e3130392e3132352e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          0joIDzpo32RmafesDZw4GvhlvT0TeGAwEyASYCuHNL8=
Subject key identifier:   FA:AB:79:C7:3D:44:04:0D:2B:C9:6C:BD:CD:AF:A7:C5:64:D0:A4:B8
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       01FC870E1CE8A13DCC6F36837C00A1022FE55D7F
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132352e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:16 +0000
ROA not before:           Sun 03 May 2026 02:36:16 +0000
ROA not after:            Sun 02 May 2027 02:41:16 +0000
asID:                     137316
IP address blocks:        103.109.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fc:87:0e:1c:e8:a1:3d:cc:6f:36:83:7c:00:a1:02:2f:e5:5d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:16 2026 GMT
            Not After : May  2 02:41:16 2027 GMT
        Subject: CN=FAAB79C73D44040D2BC96CBDCDAFA7C564D0A4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:92:cf:8f:b7:35:41:63:b5:3f:ee:8b:c7:
                    2e:72:0c:e1:7d:31:b6:8c:e3:9f:91:96:68:b0:f3:
                    20:79:a4:af:bf:e4:d2:5e:6a:21:da:58:a9:1e:af:
                    0b:e0:be:8b:e3:4e:a2:c1:14:85:61:ab:29:24:84:
                    b8:2b:1a:30:e7:49:16:cc:80:3d:ad:01:73:d6:c1:
                    2d:a1:d6:76:c5:28:f3:83:fd:76:af:ab:eb:66:c3:
                    3e:87:af:43:62:60:57:19:3e:7a:d5:c9:95:c4:17:
                    09:3b:18:21:e3:81:6e:55:44:08:4e:0d:4b:24:04:
                    93:82:f5:80:6a:53:ea:07:e7:55:93:36:06:55:d7:
                    f4:0f:bf:46:63:2d:52:7a:0c:fe:57:eb:24:94:14:
                    53:e9:de:8d:c7:fc:ce:34:e1:aa:2c:85:36:e2:38:
                    c4:73:31:45:57:04:06:81:ab:18:c7:4a:6a:5a:75:
                    1d:8e:ad:72:54:02:b5:9f:d4:eb:cf:f2:c9:15:dc:
                    b8:89:1a:c1:21:61:61:7c:9f:77:d4:08:33:a6:6a:
                    97:97:49:e1:e0:9c:3b:e9:ea:c0:37:00:6a:78:66:
                    af:16:cb:3f:a0:78:bf:c4:c4:c4:76:4d:88:ac:6b:
                    53:67:a4:e3:17:73:0e:22:da:2c:88:b7:ad:84:2c:
                    5c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AB:79:C7:3D:44:04:0D:2B:C9:6C:BD:CD:AF:A7:C5:64:D0:A4:B8
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132352e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:39:cd:ae:b7:26:60:55:44:03:75:7a:50:85:b7:2c:8f:19:
         05:50:45:cd:12:90:eb:76:5d:7d:3b:45:dd:f8:cc:cf:ed:10:
         4e:a5:ae:7f:96:f2:15:cb:4e:f1:68:3a:07:e6:6a:ca:ac:c1:
         e0:fa:78:74:9f:1a:6b:ec:3e:e4:c0:bb:45:72:4b:f0:25:17:
         8b:bd:64:99:b1:90:e5:1b:bc:f8:26:85:12:67:49:0e:5a:b0:
         05:fc:3e:7e:82:1a:0b:60:26:4e:c2:be:8e:a5:fd:9e:a5:8a:
         0f:26:d3:68:a7:c2:c4:9f:22:fa:fa:98:ac:97:09:22:2a:d7:
         94:27:17:78:33:d6:0d:a4:ad:b9:b4:2a:93:eb:c7:eb:d4:14:
         41:69:ae:ab:51:28:5f:b4:2d:3b:d5:db:6e:f2:41:2f:9a:32:
         f9:95:d1:6e:45:46:88:cb:c1:b4:f7:a9:d6:aa:bf:27:45:53:
         98:2e:9e:af:96:b9:07:57:f8:5e:ea:3d:ff:90:ab:29:e6:6d:
         f5:1c:68:b5:d7:19:c2:1b:9e:a0:3e:8f:f2:3d:87:b1:4b:9f:
         09:85:23:a5:ae:c0:bb:b6:b8:2f:4d:c9:e4:28:af:87:bd:48:
         c7:ab:f3:44:af:01:5f:82:b4:f2:c2:b3:5c:fb:ab:05:7e:a7:
         e4:92:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:18 2026 by rpki-client