Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa
File:                     3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (raw, json)
Hash identifier:          qHmMyZbiN3k/cS5UVLVJqORSDX8DOjqv/PbL7rfrzl0=
Subject key identifier:   31:B1:71:9D:B0:5F:A6:5E:98:80:21:85:30:BA:04:01:0F:07:ED:23
Certificate issuer:       /CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4
Certificate serial:       366FD44BDD4CF03A5121E6526217C87EE4D1F8FA
Authority key identifier: 81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa
Signing time:             Sun 03 May 2026 02:41:27 +0000
ROA not before:           Sun 03 May 2026 02:36:27 +0000
ROA not after:            Sun 02 May 2027 02:41:27 +0000
asID:                     138050
IP address blocks:        103.122.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl
                          rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6f:d4:4b:dd:4c:f0:3a:51:21:e6:52:62:17:c8:7e:e4:d1:f8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4
        Validity
            Not Before: May  3 02:36:27 2026 GMT
            Not After : May  2 02:41:27 2027 GMT
        Subject: CN=31B1719DB05FA65E9880218530BA04010F07ED23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:49:5e:54:d9:c4:2d:91:48:38:34:43:a7:
                    9e:c4:35:12:74:c9:0f:b6:db:23:38:60:93:84:e6:
                    82:4a:6a:29:78:d5:b0:57:a7:59:f1:fe:68:da:8c:
                    3c:3d:3c:0a:5d:06:41:e7:0c:02:72:6c:f1:8e:dc:
                    53:d3:d2:cd:6c:81:9a:92:f2:04:11:3a:97:8a:c2:
                    9d:be:98:0f:ee:37:ec:da:e3:a4:f9:5f:4d:9e:ca:
                    91:a6:a5:2f:b9:98:18:7c:7d:82:28:f2:55:75:db:
                    59:eb:af:c6:7d:01:e0:8e:c9:03:ed:df:94:97:15:
                    ec:2d:e5:46:7c:3e:f8:87:92:9f:5a:5e:86:7d:33:
                    79:6f:de:62:92:d7:39:d9:eb:bc:50:3d:09:02:af:
                    0b:08:8a:27:f4:46:ea:51:3d:bd:e4:77:35:d2:f5:
                    47:23:e6:98:e4:8f:32:22:51:a5:1b:fb:8c:42:12:
                    a7:2c:61:0b:ae:73:a4:3b:9b:39:8b:55:94:ff:98:
                    7e:71:49:5f:ca:93:8e:b3:66:89:9a:61:9b:52:cf:
                    d3:fe:0e:8a:72:29:d1:c6:15:84:f5:1a:1b:3d:c0:
                    8d:5f:47:e5:21:fc:dd:bf:93:f5:c3:77:95:27:60:
                    97:0b:f2:d7:80:97:e2:73:75:32:3e:93:17:04:f9:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B1:71:9D:B0:5F:A6:5E:98:80:21:85:30:BA:04:01:0F:07:ED:23
            X509v3 Authority Key Identifier:
                keyid:81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:55:38:e0:b7:3d:ac:8b:a9:ed:30:64:96:35:6a:4b:b0:
         57:07:01:5c:04:64:79:1c:81:09:33:bb:6c:f2:35:59:a6:3e:
         fc:a8:aa:b2:4d:64:b2:1e:84:44:c1:5a:b5:da:ba:a7:6f:40:
         6f:d2:a8:dc:ca:40:82:de:8b:23:eb:62:95:76:d6:0d:70:68:
         2d:f2:5b:96:dd:03:c7:f9:5a:02:8b:02:e4:ba:6d:03:f5:7e:
         d0:b9:de:6e:ab:61:29:eb:78:ab:d2:91:e1:50:d4:5a:7a:1b:
         b6:e8:b5:95:2d:0b:73:47:6a:d7:5b:75:c4:42:64:fb:e8:b1:
         c9:91:74:0c:3e:25:6e:ab:76:c7:93:e2:98:7e:6e:7b:4b:0c:
         27:a3:9b:6b:4b:07:f7:c4:02:a9:53:07:0a:2e:44:b9:de:90:
         3e:9b:83:d1:86:ca:c3:cb:99:48:1b:83:f6:09:b5:33:81:ee:
         c2:a1:e2:41:14:7d:9b:b3:98:b5:d4:aa:12:6a:84:13:9f:98:
         3b:6a:5d:5f:58:2a:3a:59:27:f6:b1:fc:64:0f:30:26:d5:f6:
         91:c8:2c:8e:8d:c7:0c:fe:9d:d0:8b:42:6a:f0:01:05:f5:e1:
         ae:54:d3:39:2b:ba:3d:2a:2c:2e:67:8b:03:4e:d0:28:e6:9c:
         02:71:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:58 2026 by rpki-client