Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          jSE6GYUud3AuGy6/ruvI9yrqiBFhTM+Gr4dy4Eh9xGg=
Subject key identifier:   90:BA:DC:D8:29:BA:05:EA:0E:71:CF:8D:EC:62:83:DD:70:00:24:C1
Certificate issuer:       /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
Certificate serial:       4086B7574E9B8DDE0953DBBF712D7A1DB1FC4DE2
Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa
Signing time:             Sun 03 May 2026 02:44:58 +0000
ROA not before:           Sun 03 May 2026 02:39:58 +0000
ROA not after:            Sun 02 May 2027 02:44:58 +0000
asID:                     138131
IP address blocks:        103.121.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl
                          rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:86:b7:57:4e:9b:8d:de:09:53:db:bf:71:2d:7a:1d:b1:fc:4d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
        Validity
            Not Before: May  3 02:39:58 2026 GMT
            Not After : May  2 02:44:58 2027 GMT
        Subject: CN=90BADCD829BA05EA0E71CF8DEC6283DD700024C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:36:b9:e2:0a:dc:40:57:e7:b8:6e:72:b7:
                    c8:1b:1a:df:48:b5:10:51:9e:7e:92:e5:0a:ed:c3:
                    40:80:31:92:c1:a2:e0:28:32:1b:5f:02:33:d7:fe:
                    2e:36:e7:f9:dc:b7:82:75:ff:a4:3c:33:df:12:d9:
                    18:ad:86:18:97:58:59:4a:73:5f:4c:cd:3e:9f:dc:
                    b3:3b:f7:f8:f6:04:c2:2b:42:b2:4b:9d:be:72:b9:
                    2e:e6:1a:a2:2e:60:3c:ac:92:3f:3f:28:ea:f6:02:
                    21:ff:12:e7:63:78:ed:20:4f:77:a8:ec:aa:c9:40:
                    68:59:45:aa:23:73:71:a9:90:35:e4:fe:fd:a6:3b:
                    62:e9:d5:e9:63:e2:f5:e1:7e:59:ab:fa:ae:ac:58:
                    e6:f7:d2:04:d8:29:52:0d:b8:7a:e9:9a:7f:ae:18:
                    de:a4:00:c5:e0:c0:5a:9b:9b:74:34:85:34:d6:d3:
                    54:b4:03:24:31:57:05:1b:61:7b:82:91:04:7a:3f:
                    ba:f5:ff:f0:ed:1b:cb:6f:94:ba:30:d7:db:7b:6f:
                    ae:7d:17:7b:81:3f:13:d1:5f:ee:02:cd:3b:c6:2b:
                    8f:79:4a:91:42:eb:59:fc:58:a4:86:58:09:8c:6c:
                    28:7f:3d:26:b1:a4:6a:33:4f:da:af:e0:2f:2b:db:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BA:DC:D8:29:BA:05:EA:0E:71:CF:8D:EC:62:83:DD:70:00:24:C1
            X509v3 Authority Key Identifier:
                keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:30:a3:47:1f:8f:cf:c5:5f:68:dd:8d:89:3a:b0:c1:22:18:
         26:ec:ca:6e:61:33:5b:a9:d4:a7:75:cd:7e:1d:ec:a9:54:ba:
         cb:6e:d6:e3:07:7d:c5:4d:cd:6a:88:c5:ef:73:de:ff:5d:67:
         c8:07:7e:d1:af:f3:85:4d:03:28:8f:be:fc:94:18:67:48:91:
         0e:10:4c:13:58:63:77:18:99:df:e6:ef:ba:c4:a6:05:20:d1:
         0c:84:14:64:15:a1:86:28:d9:bd:08:be:5e:83:31:ac:d4:b2:
         e0:2b:8f:cb:2d:1b:2a:50:5d:34:73:a3:fd:62:73:8e:22:d0:
         ef:55:97:ce:ab:ee:01:03:e0:d2:de:9c:91:3e:4f:8e:06:59:
         79:c6:22:4e:1e:57:9f:26:df:50:c6:6a:31:43:00:ae:67:e2:
         d3:15:50:be:e9:00:d5:4a:aa:6f:3b:5a:aa:f0:0b:a4:ba:cd:
         5b:5a:db:8d:15:2e:76:bd:15:d5:ed:7b:31:49:c7:6f:ee:96:
         34:d0:84:40:eb:3c:d8:58:99:fe:f7:7b:a1:0a:1f:29:9f:b2:
         b2:b5:43:ba:2a:c0:49:07:54:0c:e4:d2:fe:1a:f6:08:bf:91:
         f2:a2:b9:91:54:7c:57:1e:ed:80:38:32:19:77:08:73:7b:4d:
         b7:d8:3c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:27 2026 by rpki-client