Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130382e302f32342d3234203d3e203130313337.roa
File:                     3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (raw, json)
Hash identifier:          OU86nZYQrz1f0zZsfAKDY29WgpGVg/0ubhimI1XnObE=
Subject key identifier:   99:1A:21:83:E4:32:1A:AD:D9:6B:EA:D5:E2:73:C2:87:AF:1A:73:B7
Certificate issuer:       /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial:       1DAF2FF94DB2E5E530589DB2A0D3B40D40579C30
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130382e302f32342d3234203d3e203130313337.roa
Signing time:             Sun 03 May 2026 02:46:01 +0000
ROA not before:           Sun 03 May 2026 02:41:01 +0000
ROA not after:            Sun 02 May 2027 02:46:01 +0000
asID:                     10137
IP address blocks:        203.99.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:af:2f:f9:4d:b2:e5:e5:30:58:9d:b2:a0:d3:b4:0d:40:57:9c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
        Validity
            Not Before: May  3 02:41:01 2026 GMT
            Not After : May  2 02:46:01 2027 GMT
        Subject: CN=991A2183E4321AADD96BEAD5E273C287AF1A73B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:cd:29:14:5b:d0:94:61:ed:d8:d3:16:14:8c:
                    a3:77:c6:46:94:e4:1a:41:a1:41:85:38:29:f2:fc:
                    67:dd:43:0a:6e:7a:2e:df:d4:2c:3f:a4:9d:4e:2f:
                    c1:c0:94:ff:89:61:86:5b:97:bf:b1:9a:6f:dd:cb:
                    c8:39:69:d9:d4:b6:2f:ae:29:b4:17:bf:94:ff:ab:
                    f7:55:40:ae:f2:bf:54:da:e2:5d:44:6d:fc:59:60:
                    52:dc:1a:7f:ef:6e:5d:bb:90:8f:21:67:26:ba:43:
                    10:4f:60:5f:b5:aa:bd:e1:07:77:e7:00:71:0e:fe:
                    df:f5:9f:c1:ad:3e:7d:27:af:4b:4f:07:bf:13:6e:
                    95:d4:f1:78:6b:e6:a1:90:ae:9e:b0:58:ad:35:08:
                    d9:9b:c9:73:fd:82:1e:d3:6a:24:ca:5f:65:70:c9:
                    2f:c8:24:6b:41:92:6d:91:24:26:fe:e7:df:d6:c3:
                    5d:ce:c9:1e:cf:f4:9c:db:9f:b3:b6:7a:0b:02:24:
                    38:41:90:36:7e:07:3e:9e:88:9c:ea:c6:54:64:36:
                    03:79:3e:a2:20:98:e4:07:4d:fd:c9:a4:58:6d:1d:
                    06:49:38:d4:a3:db:d2:16:04:e4:7c:e3:45:d2:e1:
                    02:ad:7f:3d:81:4f:5d:00:00:a3:eb:83:cc:28:de:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1A:21:83:E4:32:1A:AD:D9:6B:EA:D5:E2:73:C2:87:AF:1A:73:B7
            X509v3 Authority Key Identifier:
                keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130382e302f32342d3234203d3e203130313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:59:de:c7:ad:16:96:6e:99:5f:e1:c9:17:3c:b1:34:4e:18:
         e8:a3:62:67:c0:23:18:37:d6:6a:c6:1f:a4:2f:f1:9e:a3:f7:
         e7:07:42:07:29:b8:fe:56:53:86:9c:ab:74:6c:ba:1d:3d:71:
         04:da:bf:bc:3e:b2:04:3b:89:5c:05:a5:41:f8:ec:f5:fe:cc:
         f6:9f:c6:c4:8e:d3:c1:0c:8e:6f:ea:9a:34:95:78:b0:11:1f:
         cd:e3:0b:bb:ea:ee:f8:7f:9d:86:3a:45:a3:0f:b4:63:73:35:
         90:0f:02:da:49:8f:40:90:08:be:d4:8c:b5:35:20:0e:8d:71:
         1b:bd:b2:a2:88:44:b8:1f:30:73:c1:b0:5c:db:28:ac:75:68:
         16:22:db:63:76:56:83:7e:8f:49:c2:da:7c:87:74:05:d7:33:
         66:24:2d:64:6f:4e:a0:ad:c0:15:4c:25:4d:e4:f3:c6:52:b8:
         a2:00:1b:2c:5d:24:b7:49:6b:2c:c4:a4:47:d0:0c:d4:da:03:
         c7:84:7d:83:66:75:92:92:0f:5f:e6:80:45:2e:22:25:ef:eb:
         ba:a8:d8:c0:d7:22:44:dd:57:31:01:51:0b:56:b7:dd:30:1f:
         ed:43:ff:6e:c9:ee:c2:16:14:d0:ea:55:be:e5:ed:27:67:91:
         c9:d0:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:19 2026 by rpki-client