Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa
File:                     3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (raw, json)
Hash identifier:          1EALwremo0OuX0UpvCbf2flDFJadlkhYoy6Ddmmbmd0=
Subject key identifier:   E2:21:58:3C:42:20:8F:0A:FB:B6:D0:E2:2A:8A:18:A5:E8:33:FD:34
Certificate issuer:       /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C
Certificate serial:       5CC00AD2E737B7C4C672381405BBB02E40E69C48
Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa
Signing time:             Sun 03 May 2026 02:45:16 +0000
ROA not before:           Sun 03 May 2026 02:40:16 +0000
ROA not after:            Sun 02 May 2027 02:45:16 +0000
asID:                     139365
IP address blocks:        103.141.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl
                          rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c0:0a:d2:e7:37:b7:c4:c6:72:38:14:05:bb:b0:2e:40:e6:9c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C
        Validity
            Not Before: May  3 02:40:16 2026 GMT
            Not After : May  2 02:45:16 2027 GMT
        Subject: CN=E221583C42208F0AFBB6D0E22A8A18A5E833FD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:57:ab:be:d4:3b:51:4f:7c:7c:ee:b6:5c:
                    03:6b:70:59:86:c8:3d:71:ce:39:f5:f8:48:b3:06:
                    8c:a0:02:af:7b:27:8d:2c:01:37:d1:b6:5b:37:8a:
                    ea:f8:e0:92:32:aa:d6:39:3d:88:f0:91:24:7b:f5:
                    a9:a8:56:c3:1a:52:dc:32:e5:bd:d6:a0:1d:98:25:
                    eb:16:6e:33:9d:a8:13:5e:58:8d:25:71:ff:90:30:
                    8e:79:06:b0:4a:db:0d:6b:97:df:b7:86:61:5c:90:
                    79:ad:51:3d:50:4b:c7:30:0b:f8:e4:4c:6c:e7:83:
                    b1:83:2a:4e:5d:24:45:ab:25:68:ce:a7:7e:ed:2b:
                    9e:8f:e9:74:e9:d7:35:7c:e0:7b:49:2b:ec:5f:c7:
                    7d:ba:9d:05:32:a1:e3:cf:69:cf:80:01:e8:15:d1:
                    1f:1c:cf:fc:d6:60:b0:34:db:3f:db:f0:4f:e1:22:
                    89:3a:e7:2b:a8:ec:cd:49:b6:0c:ad:59:4e:34:f0:
                    6c:d3:d5:95:f6:47:5b:db:f1:e5:1a:e1:d1:d7:9b:
                    08:4a:86:f9:e4:35:7e:81:29:05:a7:e3:14:52:0b:
                    93:da:ef:01:07:84:d0:28:ae:43:a9:59:e9:64:6a:
                    2a:a1:b0:96:b5:8d:b5:a5:c6:77:60:10:1b:26:9e:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:21:58:3C:42:20:8F:0A:FB:B6:D0:E2:2A:8A:18:A5:E8:33:FD:34
            X509v3 Authority Key Identifier:
                keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:6d:a8:37:22:19:d8:b4:be:44:68:2c:c7:f2:c9:95:d4:
         b6:e0:f0:55:08:3d:b6:82:6c:a2:d6:d4:e9:80:f0:dd:b9:95:
         d6:71:1d:ff:f1:bb:8e:1e:5c:c1:20:e7:8f:df:74:a6:fb:f6:
         82:c2:b1:0f:1e:ec:c4:6a:f3:a5:63:91:68:50:82:60:c3:89:
         3d:5f:6e:0a:29:2b:5f:10:5a:57:65:0e:0f:eb:61:0d:08:e8:
         50:1f:32:ea:f1:59:7a:27:ec:7b:8d:78:42:28:8a:99:fc:72:
         82:e0:2e:c5:33:a3:e9:a1:d2:76:b2:19:f9:ab:13:b9:23:08:
         98:73:a6:a3:7c:83:8a:b4:97:1e:8e:91:d8:ac:08:ce:68:b9:
         5b:3d:ba:fb:a0:28:ca:e4:fa:3c:c5:32:5b:68:b6:94:0d:72:
         45:01:80:31:0a:76:47:43:e8:27:dc:54:d5:05:e2:20:3d:10:
         7b:82:3f:d7:66:7b:47:55:a2:04:f3:a5:90:82:df:dc:7e:a3:
         72:b4:74:55:d4:24:fe:cf:e9:ef:ce:95:77:61:80:9c:f6:bd:
         c1:c6:ab:c4:9d:41:61:68:e8:5d:44:59:99:15:70:68:2f:10:
         b2:5e:6c:33:87:93:1a:49:f5:76:2e:39:05:82:dd:26:6c:2c:
         91:89:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:27:07 2026 by rpki-client