Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa
File:                     3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier:          efvSat7dwZI7/h9HiVLzn4AEIjGPLWmD8NmsCl2Z3eg=
Subject key identifier:   7E:30:62:AF:C0:82:DD:91:24:14:CE:BC:68:AE:7E:DC:E1:D7:F5:18
Certificate issuer:       /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
Certificate serial:       1015A91DADC13B07CC91A4B3885FFF7AE89F90BA
Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa
Signing time:             Sun 03 May 2026 02:41:38 +0000
ROA not before:           Sun 03 May 2026 02:36:38 +0000
ROA not after:            Sun 02 May 2027 02:41:38 +0000
asID:                     138090
IP address blocks:        103.124.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl
                          rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:15:a9:1d:ad:c1:3b:07:cc:91:a4:b3:88:5f:ff:7a:e8:9f:90:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
        Validity
            Not Before: May  3 02:36:38 2026 GMT
            Not After : May  2 02:41:38 2027 GMT
        Subject: CN=7E3062AFC082DD912414CEBC68AE7EDCE1D7F518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:57:d9:06:f3:63:06:51:fc:1a:72:ae:a8:
                    9b:63:1f:f9:94:61:70:ca:7e:31:49:b5:3a:cc:f7:
                    d0:e5:c2:ac:e8:a7:a3:62:1b:19:69:43:84:67:34:
                    0d:46:ab:a3:20:ec:83:cb:d8:cd:35:b0:26:07:72:
                    5f:aa:c3:02:da:f8:4c:f6:ca:8b:8d:26:8f:db:ab:
                    ed:9e:0b:60:93:6d:70:ef:4f:10:8e:43:a0:07:5e:
                    aa:08:b1:90:9c:25:01:06:c8:ff:d4:f6:3a:60:ac:
                    3d:75:8c:cb:66:be:5b:c8:aa:c9:19:bd:0e:06:d4:
                    f4:bc:20:9f:7d:02:34:87:88:38:a5:41:7d:65:15:
                    5a:9a:64:c2:b4:0b:3b:55:1f:e5:2a:18:d9:38:68:
                    11:c9:08:9e:c4:b1:77:e9:f6:fe:c0:40:e7:83:08:
                    6a:00:d3:d3:78:e2:9e:20:95:9a:3a:70:ee:f2:2f:
                    b3:49:c9:0b:21:84:de:7d:e1:94:16:f2:12:79:3f:
                    f1:ec:2f:e8:01:f7:41:9a:c0:4a:7c:5a:50:96:41:
                    03:a4:a2:f2:49:de:cb:17:29:e1:f7:e4:92:67:fc:
                    41:c5:d9:49:0d:2f:c2:d6:6a:3a:92:70:12:39:34:
                    4a:f6:48:ce:d8:fb:2f:ca:5e:95:05:71:b3:66:2e:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:30:62:AF:C0:82:DD:91:24:14:CE:BC:68:AE:7E:DC:E1:D7:F5:18
            X509v3 Authority Key Identifier:
                keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:b4:1d:7c:5c:77:49:e5:a6:2f:05:8b:4b:d2:eb:6f:55:
         e4:6d:9f:65:a7:14:da:ab:40:b1:14:8c:86:83:9f:63:db:50:
         d4:3e:8c:c8:ba:1b:18:54:fe:f9:29:53:47:ee:98:75:3b:64:
         34:3b:d7:29:9c:fb:a7:1f:b1:1d:82:e8:03:7f:2d:f5:bb:7c:
         ce:68:02:ea:75:42:e1:d7:cc:6f:a7:7d:2d:c6:05:f5:81:4f:
         84:b9:a6:c0:38:07:8a:65:dc:be:b6:3c:44:2e:2b:f2:44:8b:
         40:00:96:60:e7:65:d9:ef:49:08:4b:bc:45:10:3a:71:b4:9b:
         8a:a6:ff:22:44:59:a9:57:90:a1:f3:2d:8b:a4:0e:ea:f2:4b:
         b8:10:a9:f5:c9:27:07:ff:9e:3c:8c:ae:9f:b9:a3:a9:57:6c:
         c4:b3:a7:15:09:ea:b5:bf:77:8c:66:65:7c:da:36:db:ea:d0:
         85:51:e0:99:60:3f:dc:d3:be:d2:52:2b:b1:5c:10:01:ee:c3:
         e1:50:4d:e5:27:88:2f:95:d4:3b:da:2e:4b:49:f0:da:91:2d:
         ad:25:21:6f:65:3f:29:7c:c9:b1:65:40:07:5c:d0:38:44:12:
         17:81:de:4d:74:b7:df:b6:75:c6:a5:bb:16:b2:c3:09:af:e4:
         1c:af:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:05 2026 by rpki-client