Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa
File:                     3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (raw, json)
Hash identifier:          BfqUHI21QYImi0lr+Z58Iqsa7Onxr7/qLGGPmYicXKE=
Subject key identifier:   C1:34:BB:0F:41:D5:01:2F:4C:BC:A3:CF:64:2A:A0:E7:4A:FD:A6:66
Certificate issuer:       /CN=5108179E3FB57F5AC45F1773279A69AF94DC10D1
Certificate serial:       2B61AE958C865D002D303DA07F83DF661C8DF30E
Authority key identifier: 51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa
Signing time:             Sun 03 May 2026 02:46:14 +0000
ROA not before:           Sun 03 May 2026 02:41:14 +0000
ROA not after:            Sun 02 May 2027 02:46:14 +0000
asID:                     136101
IP address blocks:        103.108.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl
                          rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:61:ae:95:8c:86:5d:00:2d:30:3d:a0:7f:83:df:66:1c:8d:f3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5108179E3FB57F5AC45F1773279A69AF94DC10D1
        Validity
            Not Before: May  3 02:41:14 2026 GMT
            Not After : May  2 02:46:14 2027 GMT
        Subject: CN=C134BB0F41D5012F4CBCA3CF642AA0E74AFDA666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:21:94:58:0c:f3:25:44:45:a2:40:8d:de:73:
                    c6:7c:f8:de:e8:69:d8:6a:94:e9:40:d0:89:b2:55:
                    63:db:70:f7:e4:16:07:be:26:e5:8f:88:9f:25:46:
                    62:15:57:c5:8d:b8:cf:78:00:38:37:38:c8:2e:4a:
                    a5:9f:35:36:0e:e5:dc:47:2d:13:fc:76:11:06:09:
                    d4:b8:a5:73:ce:ca:27:e3:71:54:bb:21:1f:57:cc:
                    48:0e:15:7d:04:ee:3c:04:46:9b:cf:5a:00:f2:8c:
                    ab:92:0c:be:c6:16:55:a9:24:4d:dc:29:e0:77:eb:
                    5e:e6:23:a2:4b:8c:ac:c5:21:22:a1:9c:1f:5f:11:
                    b0:f7:09:4f:a8:63:42:1d:64:e7:48:02:9a:f8:15:
                    95:9c:78:fa:ad:6d:b5:52:79:fe:07:3e:ae:4e:9c:
                    38:0c:a3:68:35:3c:55:58:d3:6d:ca:60:ee:b8:79:
                    96:9e:86:84:b6:78:d2:2a:ff:cc:c9:ab:af:9a:50:
                    f3:5e:4d:33:c3:98:37:01:3c:a7:da:bf:19:55:94:
                    02:18:eb:f8:db:cd:44:9a:29:7f:36:92:5d:86:6f:
                    42:b2:32:da:76:ca:b4:77:ac:49:f2:6b:0a:24:9e:
                    26:32:ce:ff:06:d7:10:ae:04:58:59:b2:2a:64:f0:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:34:BB:0F:41:D5:01:2F:4C:BC:A3:CF:64:2A:A0:E7:4A:FD:A6:66
            X509v3 Authority Key Identifier:
                keyid:51:08:17:9E:3F:B5:7F:5A:C4:5F:17:73:27:9A:69:AF:94:DC:10:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/5108179E3FB57F5AC45F1773279A69AF94DC10D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5108179E3FB57F5AC45F1773279A69AF94DC10D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:5f:08:6f:91:88:00:d4:82:3d:94:7a:64:f8:b0:aa:ff:9f:
         e8:e7:63:5b:bc:f0:1e:d4:16:14:83:f1:c2:3c:c0:af:cc:1e:
         27:6a:e2:44:7b:9d:19:64:26:d2:6d:fb:c5:3c:8d:bf:85:9b:
         80:10:f7:82:0e:6b:f8:9a:d4:0f:8d:2f:da:95:44:f6:13:c5:
         44:0f:39:27:1d:d2:af:be:5e:d1:15:8e:59:3f:b3:9f:a8:96:
         99:88:c5:50:af:04:2e:d6:49:c6:5f:4f:90:69:40:cc:02:44:
         fe:83:8a:33:17:a0:d3:09:06:72:30:f1:2d:70:3a:9b:51:01:
         c8:f4:96:97:11:80:bf:81:e8:71:97:e4:4f:44:38:bf:5a:93:
         2a:59:cc:6d:71:b7:50:90:63:a9:71:1d:64:c7:c9:da:2b:93:
         83:b9:92:cf:a5:49:f5:95:67:bc:1a:eb:c8:9c:c3:d2:38:2d:
         dc:fe:44:7c:16:1c:26:05:3e:e4:c6:ab:52:0f:99:af:66:bd:
         60:36:07:e8:ab:02:34:17:23:6d:6e:06:cd:e0:11:c7:df:42:
         57:f7:ae:7f:b8:72:fa:e6:51:81:26:d7:19:9d:02:1e:d1:0a:
         e6:fd:5a:8a:77:3a:9c:8e:a7:5f:6d:e2:89:2a:bf:0f:cc:d1:
         74:00:87:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:53 2026 by rpki-client