Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa
File:                     3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier:          GD5PKDcWrMo+jB6m0zjy8Pss+9lo2DQ/VB/jtC+zOzo=
Subject key identifier:   37:8F:B6:30:4A:58:20:73:BA:C4:89:E9:0B:DA:95:EF:B5:1A:99:D1
Certificate issuer:       /CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
Certificate serial:       7B0EB0FC770EA1EF9BB6A167A511348BE182D3AC
Authority key identifier: 5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa
Signing time:             Sun 03 May 2026 02:41:39 +0000
ROA not before:           Sun 03 May 2026 02:36:39 +0000
ROA not after:            Sun 02 May 2027 02:41:39 +0000
asID:                     138090
IP address blocks:        103.124.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl
                          rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0e:b0:fc:77:0e:a1:ef:9b:b6:a1:67:a5:11:34:8b:e1:82:d3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7BB6DBEA00E701779892AA686CCBF195A3D20D
        Validity
            Not Before: May  3 02:36:39 2026 GMT
            Not After : May  2 02:41:39 2027 GMT
        Subject: CN=378FB6304A582073BAC489E90BDA95EFB51A99D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:04:c0:6c:52:41:0e:ad:cc:92:92:cb:d7:
                    8d:23:87:c6:6e:60:0e:65:7a:00:83:00:1b:7f:cc:
                    70:92:21:44:68:7e:f0:b2:fb:92:93:d8:d5:db:d7:
                    ab:02:dd:7a:1a:10:92:f9:99:10:80:60:48:d3:db:
                    f6:21:97:b8:e0:2f:e9:81:51:38:27:0c:33:07:1d:
                    0d:f0:4e:01:b2:53:e0:ce:55:55:e9:fd:5d:e6:26:
                    fb:ed:ac:07:b1:bd:e8:c0:4b:2b:34:ab:eb:b3:ab:
                    6c:3f:5c:89:f8:8d:0a:c6:20:ca:fe:48:19:25:99:
                    35:e0:dd:bb:cb:4e:b0:e4:62:ac:3e:c2:b2:a6:51:
                    7d:5e:a2:79:6e:19:13:10:9b:1e:d0:34:1e:2f:21:
                    b2:71:5e:25:fc:75:a5:cc:86:14:24:a6:8d:d6:45:
                    59:fd:d3:33:2f:52:70:56:ed:61:ea:01:0b:ee:2f:
                    86:53:b3:f4:8c:80:44:ff:8b:17:41:11:ef:5f:62:
                    ab:0d:6e:fe:a1:73:92:cd:79:17:0d:b6:76:a8:26:
                    e0:8d:a5:9c:8d:f3:4f:78:b1:68:71:a2:65:1d:11:
                    3d:2c:7c:26:4e:7b:57:83:bc:f4:c2:c9:ff:9d:f6:
                    a5:c7:d7:de:f4:0c:34:58:d7:56:8e:69:bc:c2:4d:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:B6:30:4A:58:20:73:BA:C4:89:E9:0B:DA:95:EF:B5:1A:99:D1
            X509v3 Authority Key Identifier:
                keyid:5D:7B:B6:DB:EA:00:E7:01:77:98:92:AA:68:6C:CB:F1:95:A3:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7BB6DBEA00E701779892AA686CCBF195A3D20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:fc:81:7d:24:64:cf:75:41:62:0a:fe:b7:67:e5:4b:e0:cf:
         69:b1:79:dc:18:af:74:ab:5a:8f:84:5c:bb:bf:9f:5f:ca:05:
         9a:16:49:80:1a:d6:f4:a2:2f:57:bf:95:a0:de:e7:cd:73:3c:
         79:5c:a7:46:83:b9:0a:4e:82:81:28:b1:7f:6a:79:97:4e:9e:
         ac:6c:3d:74:d0:64:82:95:6d:54:e4:e2:a4:51:cb:e6:48:0a:
         25:d3:1c:6a:68:9e:3c:4f:d0:8d:78:bf:a9:57:df:96:3a:b4:
         86:bf:68:bb:f5:13:9b:0e:0b:51:00:f4:65:cb:af:fd:55:7a:
         23:df:4a:f3:c3:6a:b6:c5:58:cd:cb:2e:3d:5f:59:5b:68:21:
         6e:4a:92:7c:f3:eb:e1:3d:82:95:ab:88:3c:df:39:16:95:da:
         f2:6f:13:93:fc:67:71:ec:49:60:3b:34:86:54:98:f7:de:e9:
         65:a3:e0:b3:7f:3e:0b:8a:99:7f:7d:c2:b0:a7:08:ad:9d:fc:
         ee:15:0c:d8:27:56:64:bf:e9:52:6f:89:d2:4a:3b:32:57:bb:
         31:9a:f8:a2:da:9e:40:26:f5:84:5a:e3:51:ee:88:91:cd:1a:
         b6:8d:a3:eb:a3:1a:4d:cf:50:8d:83:bc:cd:24:82:f5:24:fb:
         eb:3a:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:08 2026 by rpki-client