Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
File:                     3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (raw, json)
Hash identifier:          uDDSqQJALKhSiJ8HMA/VUDQe5THFv4WrWGBluPCxcKI=
Subject key identifier:   FF:86:CF:52:5F:03:5A:74:01:AC:FA:BE:D2:50:30:88:4B:16:AE:CD
Certificate issuer:       /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C
Certificate serial:       5BF0DF6A8ED50AC8591B484CD7346AA7D6A5B6CE
Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
Signing time:             Sun 03 May 2026 02:45:16 +0000
ROA not before:           Sun 03 May 2026 02:40:16 +0000
ROA not after:            Sun 02 May 2027 02:45:16 +0000
asID:                     139365
IP address blocks:        103.141.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl
                          rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f0:df:6a:8e:d5:0a:c8:59:1b:48:4c:d7:34:6a:a7:d6:a5:b6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C
        Validity
            Not Before: May  3 02:40:16 2026 GMT
            Not After : May  2 02:45:16 2027 GMT
        Subject: CN=FF86CF525F035A7401ACFABED25030884B16AECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:71:2b:d0:68:83:96:fe:ad:6d:5b:76:80:76:
                    d7:c1:cf:55:4e:29:cd:5a:6e:31:a5:30:cd:79:b0:
                    84:1a:0d:e3:d5:56:d1:94:b4:2b:e3:c3:ca:c3:60:
                    b3:b6:4e:d7:b3:00:1d:82:8e:fb:f0:43:3b:8b:56:
                    7e:b1:98:60:c9:c1:72:25:17:7a:19:8d:a4:a5:15:
                    59:79:02:c1:c8:9c:c4:81:73:a9:45:cd:01:af:cb:
                    6d:e1:e2:66:e6:a6:29:ed:44:d5:7f:db:25:d4:df:
                    65:b1:2d:f3:83:40:be:cc:05:b0:ab:28:30:f5:08:
                    8a:4f:ae:ca:d1:d2:e5:10:3a:f9:32:a3:3d:40:7b:
                    d6:ff:95:39:52:81:3f:b5:3a:c2:26:57:69:f5:0b:
                    0b:ad:d1:cd:e9:0b:31:1e:43:52:0d:d8:89:20:ff:
                    33:d7:4e:21:ea:c7:22:57:43:25:02:ab:24:76:98:
                    e3:ab:3e:f6:59:71:13:ba:21:fb:9b:e9:6c:a0:9c:
                    b9:51:ca:ae:4d:4f:1a:ca:b6:88:3d:45:7a:62:f4:
                    e6:d2:10:5b:9f:6b:7e:3a:56:61:29:f2:f2:3c:0e:
                    65:5e:f5:15:2e:54:57:e8:aa:0c:17:84:d3:0e:59:
                    26:3d:a5:09:52:a0:04:81:4a:8e:a7:2e:61:cd:6f:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:86:CF:52:5F:03:5A:74:01:AC:FA:BE:D2:50:30:88:4B:16:AE:CD
            X509v3 Authority Key Identifier:
                keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:4a:5a:3b:9f:38:4e:89:3e:c7:7f:03:be:92:1e:0a:71:72:
         bb:a0:3d:c9:46:28:34:a8:87:03:a8:92:ba:00:9c:11:bc:af:
         70:5c:fa:98:6c:47:1e:b3:10:cc:62:e2:65:64:b8:3e:14:fd:
         31:6d:bb:15:28:6e:cd:d6:70:60:31:d8:61:6c:76:06:45:d0:
         b5:4a:06:a0:48:99:51:72:1e:f3:d4:8e:1d:d1:dd:bd:d4:48:
         10:22:54:05:49:8f:ee:5e:04:74:3e:07:97:b4:94:7a:d2:65:
         3a:a0:fc:2a:56:07:7b:7e:da:6b:5f:39:c1:b8:47:ad:9b:81:
         03:c6:7a:9f:90:3f:72:3d:4b:4e:88:e8:73:a7:67:7b:06:cd:
         68:eb:f1:3b:f0:13:4b:c1:20:85:c9:4a:95:aa:c5:25:eb:c0:
         5f:0a:97:e9:83:cf:ed:93:2b:f7:ef:0a:3b:f9:a3:c7:de:28:
         77:59:c2:6a:f2:8d:61:e3:6f:ff:7a:2a:c5:ad:df:a0:bc:b1:
         8e:9b:d9:a1:6b:6b:8d:d0:fe:5b:82:25:7f:43:04:c6:be:4d:
         a6:8f:00:c7:b2:56:61:08:f1:f9:97:c3:fd:6d:87:e1:59:7e:
         cb:d0:73:66:67:f8:33:e0:b4:12:6c:7e:a0:f1:a9:ec:81:8b:
         e5:0b:79:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:20 2026 by rpki-client