Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa
File:                     3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier:          SLYwMEBT661dkmjDpYSCi8eFhdF8+h1KCwjAiRVXBbM=
Subject key identifier:   51:67:0C:74:8A:03:04:B3:61:93:80:90:0C:AD:10:E6:9A:96:56:F5
Certificate issuer:       /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
Certificate serial:       7467AAD6B76EEDA351FB80D23E017A07839C585C
Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa
Signing time:             Sun 03 May 2026 02:41:38 +0000
ROA not before:           Sun 03 May 2026 02:36:38 +0000
ROA not after:            Sun 02 May 2027 02:41:38 +0000
asID:                     138090
IP address blocks:        103.124.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl
                          rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:67:aa:d6:b7:6e:ed:a3:51:fb:80:d2:3e:01:7a:07:83:9c:58:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
        Validity
            Not Before: May  3 02:36:38 2026 GMT
            Not After : May  2 02:41:38 2027 GMT
        Subject: CN=51670C748A0304B3619380900CAD10E69A9656F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:50:6f:8f:7c:15:a8:9e:f5:09:60:64:82:
                    7c:02:8f:db:18:1f:c6:d9:95:d0:61:dc:c7:b2:49:
                    1f:d4:57:04:6f:ca:2b:53:01:42:50:a2:a6:c6:27:
                    80:9b:a6:93:b9:8b:80:2f:dc:b3:0f:2c:42:21:00:
                    be:38:38:6b:b0:a4:d8:96:80:73:82:b4:2c:8a:7a:
                    33:cc:2d:08:d5:86:3b:ba:8d:a9:5f:1d:17:48:5a:
                    f0:92:5d:c3:68:ce:01:0f:b8:b2:6d:18:81:d9:81:
                    b2:8c:7c:e5:4d:70:e2:d6:e4:19:73:76:23:6d:00:
                    de:45:c1:76:c3:6e:14:ab:ff:00:89:08:36:dc:36:
                    26:3b:b9:c2:92:d5:39:8a:93:44:32:bd:83:3d:cf:
                    35:4f:2b:52:28:26:52:49:68:cc:db:e4:84:15:c0:
                    5d:75:57:14:c4:e1:15:7e:a8:e6:2e:e3:10:16:66:
                    8d:2e:c1:0c:2c:e9:71:a5:3a:13:ab:f2:fc:2d:18:
                    6e:f4:7e:f3:0e:3b:82:2d:99:2c:83:3f:02:34:0e:
                    0c:80:43:dc:a9:50:bd:ac:31:55:3d:89:92:22:78:
                    ac:64:df:5e:cd:e3:bd:17:4a:99:ef:06:fe:a9:3f:
                    2e:78:ad:a1:44:e0:c5:b6:2c:e5:b3:01:4d:43:4a:
                    ef:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:67:0C:74:8A:03:04:B3:61:93:80:90:0C:AD:10:E6:9A:96:56:F5
            X509v3 Authority Key Identifier:
                keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:9a:b3:61:c9:e7:dc:5d:79:0d:91:86:70:3d:a0:49:76:c5:
         45:11:d7:36:7f:eb:05:d1:e0:c7:4f:ff:09:f8:a4:2a:9c:46:
         d2:95:df:6b:90:e6:09:29:7c:bc:7f:b1:52:fa:a8:85:e0:f3:
         9e:a0:2c:ea:79:52:82:a2:72:2e:9f:df:87:2a:90:1f:7a:7a:
         69:00:a2:85:17:4b:84:f9:f8:44:80:05:3d:19:2b:d9:d5:f5:
         30:80:f6:1b:6d:37:42:ed:e8:46:22:a7:29:95:6a:11:54:51:
         b3:8e:97:9f:f3:8a:75:34:48:7b:81:23:8e:84:b7:6d:f1:02:
         40:fe:43:6f:cb:17:24:52:d5:0c:f2:8a:27:1f:0f:15:c0:f8:
         14:bc:58:19:0c:46:48:38:4e:ef:62:db:86:fa:69:4c:5e:10:
         5f:02:7f:01:ed:c0:e6:cf:56:12:16:b3:cc:dd:be:ca:fc:da:
         df:34:24:d8:03:e0:77:49:6d:c4:33:98:dd:c4:ae:1d:21:ea:
         74:d0:c7:fe:6e:c2:9b:cd:5c:41:a8:a8:f9:3b:e4:74:0d:34:
         9b:9e:7e:cf:50:77:12:63:28:c7:5d:42:cc:16:f5:72:80:58:
         88:d5:22:2d:f3:96:68:60:b8:93:2b:c2:84:c2:2b:01:2f:3e:
         d5:19:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:06 2026 by rpki-client