Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          ylJge9zfunu5v1K50c60A5sirSQ6LDBHCjbwOHfjZrQ=
Subject key identifier:   C4:A2:A8:C3:F0:C8:83:19:68:AF:38:17:DD:4A:4A:8E:82:65:80:BF
Certificate issuer:       /CN=4758527FF3B22322A18B7C6E96C4B735849522DD
Certificate serial:       1905D39A73DEEC6624F501F01617EFCF85B25BF4
Authority key identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:44:25 +0000
ROA not before:           Sun 03 May 2026 02:39:25 +0000
ROA not after:            Sun 02 May 2027 02:44:25 +0000
asID:                     135478
IP address blocks:        103.121.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl
                          rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:05:d3:9a:73:de:ec:66:24:f5:01:f0:16:17:ef:cf:85:b2:5b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4758527FF3B22322A18B7C6E96C4B735849522DD
        Validity
            Not Before: May  3 02:39:25 2026 GMT
            Not After : May  2 02:44:25 2027 GMT
        Subject: CN=C4A2A8C3F0C8831968AF3817DD4A4A8E826580BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:31:1e:64:14:18:86:e4:81:83:59:57:4e:
                    33:28:17:15:ac:d7:49:54:ff:49:03:4d:72:9c:0a:
                    3f:e2:9e:65:fd:db:e1:48:88:29:0c:51:c4:b7:eb:
                    31:ac:0a:29:9a:29:05:6f:ca:56:fb:a4:9e:e8:34:
                    66:46:f6:f7:75:8f:a8:97:f8:28:f7:bd:8b:99:8d:
                    14:d1:9f:9b:b5:d7:8f:1d:03:43:e4:ac:a3:e4:60:
                    95:f9:f5:47:95:98:85:83:fd:68:a9:ed:b2:9f:96:
                    11:0b:64:65:a4:04:5f:d4:5e:bf:b2:77:b7:88:2c:
                    37:2d:20:2e:e3:3b:e2:2b:c7:78:c6:50:14:b5:cf:
                    5b:ec:60:3f:62:e2:c2:76:e3:51:4b:09:c6:75:3b:
                    f5:60:5a:dd:f2:07:34:b9:d1:d6:b5:9c:2d:26:50:
                    cb:d5:57:fc:de:17:77:9d:ca:33:d6:a7:23:4f:4b:
                    f3:f1:41:e1:6b:9b:0e:c6:43:ff:ad:e8:53:23:ea:
                    59:d7:f1:2a:cd:fe:d2:60:ff:8f:7d:e8:4b:1e:cb:
                    6c:52:78:a9:90:37:c7:77:8c:36:dc:90:1c:a2:1c:
                    4d:a3:7a:f0:70:9c:0f:ca:bd:d0:5d:8d:68:60:c3:
                    dc:9f:dc:0f:fe:23:83:31:be:8d:64:97:f8:ec:ce:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A2:A8:C3:F0:C8:83:19:68:AF:38:17:DD:4A:4A:8E:82:65:80:BF
            X509v3 Authority Key Identifier:
                keyid:47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:17:25:9f:3e:28:46:35:e6:f7:a8:89:47:c3:af:78:e1:8b:
         77:e8:f1:31:3b:4a:87:94:bf:2f:25:42:74:f3:00:8d:21:04:
         22:36:d8:73:96:13:71:22:7f:4c:16:68:8f:5f:77:7c:2d:1d:
         3f:45:e1:f0:a1:68:f6:fa:96:18:2e:69:8f:21:a2:bf:47:ea:
         b8:97:3f:9a:90:ef:be:db:21:d5:fa:a2:9e:cd:3c:a7:4c:ba:
         67:03:f6:3f:fc:e1:df:6d:58:62:08:34:9b:68:ca:b4:9f:c9:
         cb:11:3e:0d:96:e4:b2:17:38:a8:65:b8:76:ec:3b:d5:b3:0b:
         80:13:87:e3:2d:61:30:74:16:e1:aa:83:cf:6d:d2:d8:3d:2c:
         47:ad:dd:9d:d3:dd:81:c6:e0:64:42:76:b6:43:90:47:6b:8a:
         4d:88:f1:37:87:f1:76:21:0f:0c:cd:f8:61:cb:a8:1e:2e:10:
         dd:6d:9f:7b:44:df:5b:fb:72:2a:a2:34:16:5b:93:b4:26:7a:
         4b:ef:49:90:24:9c:88:56:1c:7d:3f:d8:f7:eb:74:4c:ea:93:
         1f:28:1e:5f:db:3d:06:03:7b:ee:58:93:16:11:c0:9a:64:4d:
         b2:ce:ac:98:90:0e:10:33:bd:9c:60:75:e5:86:1e:bd:49:c2:
         16:80:04:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:05 2026 by rpki-client