Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa
File:                     3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (raw, json)
Hash identifier:          dt4pmE76WMWzPNZkKU1y0T8GmeM++xgUm8+x5NAeCc4=
Subject key identifier:   E5:E4:D2:EA:A1:96:3F:19:1E:DC:1B:D6:18:95:EB:E3:FE:E5:D1:22
Certificate issuer:       /CN=E2807BC52478D8B3952B24F68408B7477218FD9C
Certificate serial:       1AC9BA6FC3E9F26D47FE6AE20F16064265C7AC6A
Authority key identifier: E2:80:7B:C5:24:78:D8:B3:95:2B:24:F6:84:08:B7:47:72:18:FD:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa
Signing time:             Sun 03 May 2026 02:45:11 +0000
ROA not before:           Sun 03 May 2026 02:40:11 +0000
ROA not after:            Sun 02 May 2027 02:45:11 +0000
asID:                     136092
IP address blocks:        103.87.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.crl
                          rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c9:ba:6f:c3:e9:f2:6d:47:fe:6a:e2:0f:16:06:42:65:c7:ac:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2807BC52478D8B3952B24F68408B7477218FD9C
        Validity
            Not Before: May  3 02:40:11 2026 GMT
            Not After : May  2 02:45:11 2027 GMT
        Subject: CN=E5E4D2EAA1963F191EDC1BD61895EBE3FEE5D122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:d8:83:97:79:13:d0:73:a5:25:86:3a:07:
                    d0:33:9a:3f:d0:95:70:dd:a9:95:20:0e:cc:8c:c6:
                    05:1b:0d:b8:38:eb:a5:5c:1d:c8:a2:81:92:93:cb:
                    b9:bd:23:0e:db:9e:77:56:c4:88:5c:0a:a0:ba:47:
                    03:69:39:c4:82:cf:b2:bd:7f:62:1f:1d:1f:a5:c8:
                    c3:0a:a2:69:fb:6c:36:0a:44:5d:ba:1c:7f:ed:d1:
                    07:80:69:63:ef:8a:14:49:93:75:b4:40:91:fb:bf:
                    34:bf:42:33:17:97:0c:0c:2f:f7:6b:3f:98:c7:a3:
                    2f:c3:59:1a:10:a3:95:7f:a8:2a:87:e4:e5:33:96:
                    c6:b2:6d:3f:fb:74:5e:24:d2:05:03:56:b9:25:fe:
                    9e:ca:e8:b5:c1:fd:30:25:6b:d1:a3:1f:65:3d:34:
                    ec:6c:37:00:3a:67:58:d9:ef:8c:0f:25:3b:eb:99:
                    01:91:4d:06:b1:3e:59:05:b8:a3:d3:de:2c:e1:7b:
                    11:1f:50:2f:73:b3:22:8b:d8:5c:7e:0b:3f:2d:95:
                    2a:c1:05:9c:db:60:df:53:11:37:a3:25:a1:e1:a9:
                    ca:d8:d0:d9:79:d8:b1:46:92:ed:16:2a:c6:4d:e4:
                    78:87:2c:41:8e:e3:9d:a7:26:14:6c:8b:fe:b2:81:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E4:D2:EA:A1:96:3F:19:1E:DC:1B:D6:18:95:EB:E3:FE:E5:D1:22
            X509v3 Authority Key Identifier:
                keyid:E2:80:7B:C5:24:78:D8:B3:95:2B:24:F6:84:08:B7:47:72:18:FD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/3130332e38372e36302e302f32322d3234203d3e20313336303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:e9:97:8e:ab:d9:c3:40:aa:7f:b1:19:8a:25:ed:95:6c:78:
         cb:1f:5a:94:f5:3f:ab:3a:34:83:a8:eb:63:a9:ed:2b:3e:ef:
         15:47:d5:84:c5:61:2f:a8:0c:2d:11:70:2e:1b:1c:bf:04:0c:
         b6:c8:61:2a:0e:b4:48:f9:70:6b:4b:3a:c2:01:82:62:93:2c:
         46:6f:c4:27:f1:77:ca:1d:76:83:3f:e2:be:79:52:cc:3e:e3:
         fd:e1:3a:56:e8:0a:39:be:00:b0:bb:30:7d:d9:0b:75:c6:ad:
         4b:15:1f:c6:14:5c:ff:f2:02:30:bb:97:3d:c2:49:fb:a2:74:
         c5:dc:4b:90:c2:b9:92:8b:09:60:96:46:c7:57:9b:f5:82:e9:
         d2:b1:7a:f1:6c:ec:4b:38:d0:ae:ad:88:ce:38:8e:e0:ac:70:
         95:2f:91:d4:71:13:b5:a6:67:56:80:0c:bc:c5:ca:6d:54:36:
         95:41:e9:08:c7:4c:6f:cd:a0:f2:31:95:ac:f8:42:b7:64:38:
         56:57:25:f9:b0:a2:68:28:85:22:ac:75:61:9a:53:8e:e1:8d:
         99:80:97:c6:ae:37:29:72:65:bb:e7:cc:ca:3d:a3:bf:30:15:
         4b:fc:01:5e:f6:62:93:38:19:6c:29:2e:5d:67:f6:87:7e:d9:
         da:14:a2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:06 2026 by rpki-client