Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa
File:                     3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier:          cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=
Subject key identifier:   C0:08:F7:68:72:DB:3B:9B:61:C9:29:67:3E:42:56:5E:3E:8C:1F:5C
Certificate issuer:       /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF
Certificate serial:       7D3874BAB49B8F2D1A5101D229BE17E8CD931D9C
Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa
Signing time:             Sun 03 May 2026 02:47:07 +0000
ROA not before:           Sun 03 May 2026 02:42:07 +0000
ROA not after:            Sun 02 May 2027 02:47:07 +0000
asID:                     138077
IP address blocks:        103.242.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl
                          rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:38:74:ba:b4:9b:8f:2d:1a:51:01:d2:29:be:17:e8:cd:93:1d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF
        Validity
            Not Before: May  3 02:42:07 2026 GMT
            Not After : May  2 02:47:07 2027 GMT
        Subject: CN=C008F76872DB3B9B61C929673E42565E3E8C1F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:7a:1f:c0:9c:c8:05:0c:fa:0d:6a:ec:b2:
                    8c:2c:64:6d:d7:cc:d1:03:3a:b4:f1:90:06:e9:50:
                    34:a0:98:fb:b6:80:8e:5d:d4:ae:24:5a:09:be:df:
                    6c:ba:69:40:b7:85:f9:2b:89:5b:da:a6:ef:38:08:
                    02:6b:6e:23:b4:17:ee:cf:70:c0:43:50:ea:3c:4e:
                    4a:e4:cd:95:e5:a4:e9:5d:ce:80:c5:58:16:49:da:
                    e1:39:5b:b0:6c:c8:e1:53:c7:04:aa:91:20:14:5f:
                    e8:3e:d3:2b:2a:0a:b1:f1:30:bc:1b:90:0d:36:2c:
                    bd:17:51:a0:20:54:63:cc:38:5c:8b:ef:de:19:ef:
                    9f:9d:12:a1:38:e8:96:4b:b1:1e:49:41:83:11:79:
                    0e:53:c3:a1:3c:57:f8:38:31:40:52:a7:e2:3c:4e:
                    22:c8:6a:4a:1f:47:c9:ed:16:ec:80:ef:be:9e:f4:
                    c0:24:99:3e:71:89:f8:22:82:aa:1d:62:27:44:ac:
                    37:ca:fe:a5:9f:4b:5a:6f:31:fa:b5:99:40:ef:ca:
                    12:3b:82:22:d2:d1:29:09:a1:da:bb:4c:7d:4b:4d:
                    fe:7e:df:8f:38:aa:d7:40:10:86:7b:0b:12:99:66:
                    5d:da:98:86:3f:6b:01:46:2f:96:87:df:bd:87:e8:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:08:F7:68:72:DB:3B:9B:61:C9:29:67:3E:42:56:5E:3E:8C:1F:5C
            X509v3 Authority Key Identifier:
                keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:58:f5:47:b2:25:c7:9a:04:c4:73:f6:87:64:06:fa:3c:
         ed:e2:20:d6:aa:07:7e:d5:02:bc:aa:53:03:71:35:94:46:7d:
         d3:7d:5b:fa:28:ee:b0:9b:73:2e:0e:3e:20:58:29:83:18:e5:
         4e:bb:e9:0f:46:38:35:21:22:2b:97:28:1a:37:85:fb:ea:35:
         eb:81:5f:41:75:04:7e:3a:f0:08:e7:fb:c9:19:21:54:da:cd:
         bf:32:db:c4:99:71:a7:3b:6d:05:6f:1b:ed:75:fc:c2:50:3f:
         1b:21:3d:83:f0:82:b2:23:b2:b7:50:8c:6f:69:e2:94:ec:46:
         77:9f:3b:6f:10:72:47:8f:31:25:a2:1d:b5:82:a7:5f:a2:d1:
         0e:ba:26:88:c5:a6:de:f5:8e:01:26:0a:f6:bf:71:a9:e7:f0:
         69:e7:6c:34:40:d7:66:dc:37:16:4b:91:8f:71:18:55:95:93:
         1b:e4:bf:e4:e6:dc:e1:2d:8a:67:12:7a:9b:c2:b1:3f:36:9c:
         eb:09:1f:91:59:52:06:af:58:5c:6e:8e:20:d6:6c:ad:f0:e3:
         d1:c7:2b:ac:7e:27:39:d1:09:8b:2b:5f:32:5d:a0:6a:95:5a:
         fb:09:0b:07:f5:eb:ac:12:d0:fd:3d:4d:01:b9:c7:89:e5:83:
         2c:f3:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:36 2026 by rpki-client