Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132362e302f32342d3234203d3e20313337333136.roa
File:                     3130332e3130392e3132362e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          ScuQUhsMfsEwaXYWyWxOhihnM0O8fe3wXd64M/4YoLM=
Subject key identifier:   C7:C3:AA:75:FA:0B:AC:3C:F5:E9:92:38:76:56:52:C5:13:DF:10:27
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       06222154366929D245AC490ADCF9260FFD389029
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132362e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:16 +0000
ROA not before:           Sun 03 May 2026 02:36:16 +0000
ROA not after:            Sun 02 May 2027 02:41:16 +0000
asID:                     137316
IP address blocks:        103.109.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:22:21:54:36:69:29:d2:45:ac:49:0a:dc:f9:26:0f:fd:38:90:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:16 2026 GMT
            Not After : May  2 02:41:16 2027 GMT
        Subject: CN=C7C3AA75FA0BAC3CF5E99238765652C513DF1027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:32:ff:47:75:cb:07:33:9c:f8:e8:71:91:
                    96:bd:53:e2:18:34:80:2e:63:9d:d7:cb:77:32:21:
                    7f:d7:36:02:f9:c7:30:3a:88:a3:dc:03:c9:59:60:
                    9c:aa:28:0b:2b:59:92:37:b5:93:85:95:5e:aa:09:
                    71:89:cc:06:91:59:37:3d:4a:25:e8:81:06:d3:94:
                    03:06:ce:98:ed:b3:cc:8a:b5:21:39:d9:67:69:e8:
                    4e:b4:70:7a:c9:c9:15:c9:11:ee:6c:07:ed:0d:01:
                    c0:87:dc:85:35:13:3e:51:82:3b:bf:af:63:27:dd:
                    8b:db:c0:23:ae:16:c2:ab:9f:a0:36:14:35:fb:8a:
                    3e:ea:fd:6f:3f:92:34:f7:31:37:2b:85:aa:08:dd:
                    4c:4d:36:32:3d:ab:01:59:04:5f:7e:d4:36:4d:83:
                    07:e8:70:39:09:6c:8e:7b:c2:71:2e:bf:91:67:12:
                    37:38:80:41:28:6e:f8:3f:65:b0:81:42:09:08:f4:
                    d5:33:27:b7:5f:d4:29:6f:55:45:b2:6d:c9:94:e4:
                    87:91:79:06:64:53:d8:83:6d:23:01:07:59:b7:7c:
                    68:b6:09:14:51:c5:0e:97:55:a4:91:26:6b:18:89:
                    86:e9:da:33:78:1e:c3:0d:db:6d:fe:c8:bb:2a:d7:
                    05:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:AA:75:FA:0B:AC:3C:F5:E9:92:38:76:56:52:C5:13:DF:10:27
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132362e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a3:47:47:19:71:df:7b:90:be:c6:c6:e1:9a:f6:9b:b0:31:
         39:07:cf:78:ff:1a:18:92:f3:05:4a:6b:f4:02:48:18:68:8f:
         3c:3f:a4:c7:1f:46:7b:5c:a1:8e:36:27:21:d2:91:84:06:25:
         73:f8:5e:a0:e5:71:f7:41:5c:fb:bf:29:8f:89:98:f4:1d:c3:
         76:f0:b3:e7:fa:ae:a6:dc:5b:a1:00:26:d6:34:1e:d4:fd:7e:
         4f:11:56:0b:67:34:3b:78:ab:ff:4b:a2:e1:93:61:f2:39:81:
         4e:d7:62:a5:48:3f:9f:b1:62:59:35:f5:86:4a:ad:b2:dd:5f:
         41:9f:67:bd:b2:27:3c:73:60:2d:cc:0b:b4:2d:39:92:41:ba:
         6b:b5:bb:b4:13:84:10:d0:6d:55:42:11:ba:ae:0e:6f:4d:6c:
         bd:a0:1b:92:47:f6:72:5a:1b:97:a2:e3:71:dd:a3:a0:be:2e:
         64:2d:da:93:3f:2d:76:ca:a1:a5:fe:f1:1d:23:db:e7:4f:69:
         ac:a6:06:7f:f4:6d:bc:6c:0a:9f:e0:51:8b:8b:d6:22:ed:79:
         c0:b0:9b:f6:9e:b8:4a:b1:f2:ec:e8:37:74:9a:47:a6:02:d2:
         0a:9c:77:d9:f8:00:20:74:e4:e6:bb:a1:32:22:e8:91:5d:77:
         75:82:75:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:54 2026 by rpki-client