Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa
File:                     3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (raw, json)
Hash identifier:          l3e6649ftGy/RyoIrij/BvUADN52ueYZyLhMioJKOn8=
Subject key identifier:   7A:56:1E:3A:E9:06:93:AB:42:C2:65:D4:A2:25:0E:F4:87:D4:77:0D
Certificate issuer:       /CN=6392804C8E02387641837CC130058F05667A805F
Certificate serial:       255E4B27E2BEF9FDC0B290B4ACB18DA159BD066A
Authority key identifier: 63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa
Signing time:             Sun 03 May 2026 02:43:47 +0000
ROA not before:           Sun 03 May 2026 02:38:47 +0000
ROA not after:            Sun 02 May 2027 02:43:47 +0000
asID:                     138062
IP address blocks:        103.129.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
                          rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5e:4b:27:e2:be:f9:fd:c0:b2:90:b4:ac:b1:8d:a1:59:bd:06:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6392804C8E02387641837CC130058F05667A805F
        Validity
            Not Before: May  3 02:38:47 2026 GMT
            Not After : May  2 02:43:47 2027 GMT
        Subject: CN=7A561E3AE90693AB42C265D4A2250EF487D4770D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:8e:ab:a0:f5:ad:07:d8:77:38:42:88:61:
                    ce:67:99:29:ae:74:2f:51:56:3b:1e:7b:ea:90:0f:
                    28:1d:04:55:2d:b1:d0:b5:74:0f:8e:d7:81:e2:2f:
                    bb:0b:12:df:27:04:e0:f6:e6:68:f4:ac:07:9a:a0:
                    13:47:0c:6e:c9:a6:1d:5a:dc:7c:ac:ca:76:54:ff:
                    b5:e0:f9:d9:13:ad:b9:f2:de:af:17:a2:2b:fd:f8:
                    c6:e6:a2:d7:0d:40:35:2e:f2:99:85:9c:08:bd:35:
                    d5:4f:bb:34:4c:29:67:47:2e:f2:b4:b0:c9:4d:6f:
                    3e:51:21:3b:75:4a:a6:2b:ae:4d:01:d5:cb:e4:ab:
                    78:ec:70:5c:3b:e9:0e:65:ca:ef:a3:0f:6f:05:e3:
                    06:f1:5d:4a:27:1e:12:4b:37:73:a8:e0:53:f1:85:
                    05:fb:26:0f:2f:d1:bb:75:92:c0:58:13:73:2b:5c:
                    79:19:e4:73:e4:bc:46:97:96:df:e8:79:5e:b2:eb:
                    b8:aa:4c:a0:9e:72:53:ce:52:fe:8b:93:af:d3:b0:
                    27:3b:48:a6:a3:42:1d:d8:83:1a:af:fb:54:e2:a9:
                    61:72:36:36:2a:84:fc:cf:71:df:27:5e:72:a1:61:
                    a9:c6:ad:e4:21:d1:9f:b8:4b:3a:d7:38:38:51:86:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:1E:3A:E9:06:93:AB:42:C2:65:D4:A2:25:0E:F4:87:D4:77:0D
            X509v3 Authority Key Identifier:
                keyid:63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6b:a9:9e:52:fd:7b:5d:3e:31:ca:b1:d2:4a:fa:be:76:8b:
         e3:1a:2f:e7:fb:5b:b3:e1:89:16:23:f3:9e:84:9a:2e:b0:49:
         c1:c2:80:60:0f:7e:c7:8c:e2:11:3b:a9:88:3a:fe:b2:0d:a8:
         8c:1f:64:28:9a:9d:6e:22:2b:06:3e:82:ed:05:5e:73:81:1a:
         39:31:44:1a:61:14:2d:c1:97:ec:8e:92:fd:0f:c8:aa:5b:31:
         6b:2f:0f:04:97:93:d3:c8:39:c8:bb:ef:fd:3a:94:de:6e:f8:
         98:d7:a4:6f:7d:50:99:19:6d:ce:15:11:ec:55:f5:8e:cc:7f:
         3e:6e:68:15:e8:95:3a:2b:93:25:cf:e8:a4:82:54:2c:77:6a:
         f3:d6:8f:c8:8c:c5:dd:d4:4e:0d:94:58:21:62:57:76:1f:02:
         06:ce:95:db:ec:75:8f:c1:64:aa:de:ee:a6:4e:a0:ef:91:55:
         db:fa:cf:7a:81:9a:f2:6b:3d:cb:5b:6f:ec:1a:17:fa:6c:51:
         b4:1d:b7:5d:fb:58:5a:e6:87:2f:82:73:70:43:0a:05:ce:bf:
         17:1a:f7:29:9a:40:ad:05:67:96:e3:e7:b2:8b:97:31:31:ff:
         6b:02:f7:da:2c:e5:74:cc:70:0e:4a:39:eb:45:12:98:7b:91:
         d8:06:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:03 2026 by rpki-client