Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa
File:                     3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (raw, json)
Hash identifier:          9PTwvaeRVFt7vMjuuHgRNVKrWXlVE2+CW1qlg4q1SF0=
Subject key identifier:   F6:B4:8F:FE:53:A5:F9:90:26:48:E5:F0:BC:A6:3A:2D:B2:2A:59:7C
Certificate issuer:       /CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
Certificate serial:       1AB4CC4AAF41C87F3288C94E4259A988AD865809
Authority key identifier: 5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa
Signing time:             Sun 03 May 2026 02:42:43 +0000
ROA not before:           Sun 03 May 2026 02:37:43 +0000
ROA not after:            Sun 02 May 2027 02:42:43 +0000
asID:                     138046
IP address blocks:        103.121.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl
                          rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b4:cc:4a:af:41:c8:7f:32:88:c9:4e:42:59:a9:88:ad:86:58:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
        Validity
            Not Before: May  3 02:37:43 2026 GMT
            Not After : May  2 02:42:43 2027 GMT
        Subject: CN=F6B48FFE53A5F9902648E5F0BCA63A2DB22A597C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:bb:a6:e4:45:70:19:b3:d9:d7:12:4a:ea:
                    3b:03:db:46:a6:62:d4:28:c6:37:34:c1:bd:ce:20:
                    61:f1:1d:c3:a5:a3:fc:6e:87:92:e8:45:26:c8:54:
                    6f:7c:27:0c:8c:cd:df:ea:c8:48:22:11:af:fc:b8:
                    82:6e:01:7d:13:f6:b0:31:9d:af:a1:0d:9b:4e:17:
                    29:8b:aa:61:cf:a9:d9:68:83:64:91:a3:28:55:2b:
                    c9:99:f9:a1:92:29:cc:4e:e4:ed:1d:15:30:22:b4:
                    3a:f0:26:3a:6f:67:47:d2:ae:2b:3a:20:63:10:b5:
                    1b:31:e1:e0:44:0b:be:01:78:ac:e6:f1:ad:1e:54:
                    42:f5:69:a6:5e:df:b3:08:db:22:97:29:48:30:5e:
                    e7:f5:a1:48:d1:3b:57:a6:5b:df:2c:53:c6:dd:14:
                    19:fd:fd:16:6e:0c:91:83:ec:08:2a:6a:8d:84:cc:
                    43:c6:b8:c2:14:dd:c2:27:5d:52:33:96:9a:cc:34:
                    bc:53:1a:44:28:a9:0b:7f:18:07:33:67:06:51:f3:
                    b4:14:14:78:6d:43:4d:3a:d4:80:2d:44:14:30:c0:
                    e2:ab:3f:8d:0c:6d:10:cf:b9:1c:24:8f:1a:fc:51:
                    e5:a0:2e:3e:f8:e1:a5:d6:5e:aa:b9:6a:c2:41:f4:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B4:8F:FE:53:A5:F9:90:26:48:E5:F0:BC:A6:3A:2D:B2:2A:59:7C
            X509v3 Authority Key Identifier:
                keyid:5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:47:39:44:0a:9b:7a:b4:9b:6d:38:43:a6:af:84:97:96:
         94:c8:6f:8e:c9:05:41:c5:eb:60:37:dd:10:1b:ae:4d:52:64:
         07:fb:2d:4e:43:f6:b6:7e:93:56:e1:e7:b2:a1:f9:95:b7:3f:
         93:62:20:c8:0c:9d:82:b0:9f:7f:54:6a:6e:74:08:54:84:e9:
         3e:c9:1f:10:ca:aa:b7:5a:f6:ef:7a:15:0a:28:e7:b1:5b:9b:
         70:87:5e:38:0c:8d:4d:24:f9:ff:73:b6:d2:77:d2:7e:82:9d:
         32:ff:5e:b2:f1:23:fd:6d:c3:a7:e1:a6:2a:7e:65:d2:96:a2:
         7e:32:b4:4d:6a:a6:c7:b4:0b:bf:33:cd:9e:b4:41:50:af:78:
         3a:3f:9a:df:63:8b:82:a7:67:4a:bb:57:1f:d3:b5:ea:37:10:
         ca:f6:3b:c4:ab:25:74:ad:eb:dd:c8:f2:dd:a5:fc:2b:59:29:
         ad:f9:48:48:f2:75:df:a9:34:b5:8e:7a:45:8b:15:c9:01:33:
         77:16:42:56:62:e1:fc:d4:ab:62:37:c8:60:d6:c0:ac:5f:ed:
         df:92:6b:dd:6c:82:bf:38:db:69:86:48:48:fa:c7:52:9d:7b:
         84:60:69:4c:ac:3d:30:b3:b6:f2:58:e5:8f:e1:db:db:b7:b1:
         28:d6:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:58 2026 by rpki-client