Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa
File:                     3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (raw, json)
Hash identifier:          S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=
Subject key identifier:   BC:98:ED:70:BA:66:A2:52:72:9E:21:05:B7:BA:BB:16:CC:26:62:A1
Certificate issuer:       /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
Certificate serial:       2734F811BEB32ABF4D94CA4E708C639AF25B54DD
Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa
Signing time:             Sun 03 May 2026 02:49:17 +0000
ROA not before:           Sun 03 May 2026 02:44:17 +0000
ROA not after:            Sun 02 May 2027 02:49:17 +0000
asID:                     138113
IP address blocks:        103.126.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl
                          rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:34:f8:11:be:b3:2a:bf:4d:94:ca:4e:70:8c:63:9a:f2:5b:54:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
        Validity
            Not Before: May  3 02:44:17 2026 GMT
            Not After : May  2 02:49:17 2027 GMT
        Subject: CN=BC98ED70BA66A252729E2105B7BABB16CC2662A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:a5:e7:51:3f:e1:14:09:70:c2:0b:99:61:
                    7e:92:a3:c3:95:9e:af:4f:f0:8b:b9:2e:ac:00:4e:
                    3f:dc:b9:63:57:a0:6e:74:63:6b:f8:cc:02:a6:1a:
                    89:f4:e8:25:ab:ec:5a:80:e9:65:6f:e0:0d:ba:a7:
                    db:ff:50:f9:35:7b:db:ac:cb:6d:0a:88:f9:23:3a:
                    a8:cd:f9:53:83:85:75:c4:89:8d:1f:b2:00:c7:21:
                    eb:58:18:e7:b8:d5:c4:0f:31:42:97:71:bf:6c:b4:
                    98:50:68:20:4f:90:33:bd:01:e1:9d:50:ab:f3:97:
                    bf:3a:3b:d9:8e:17:28:f5:9a:05:fb:d9:2b:ff:fb:
                    3a:13:d3:64:56:85:65:35:47:15:6a:9e:90:d6:f0:
                    a4:04:3f:99:8d:46:1a:61:67:59:11:44:0c:e8:e6:
                    23:17:6e:e4:f6:d2:8a:8f:b9:4c:ed:65:22:55:aa:
                    5a:e7:4c:1d:cc:9a:bb:70:0c:26:f4:f8:62:20:60:
                    c4:30:53:ea:aa:7f:57:9d:ce:0e:0f:b1:3a:3d:89:
                    24:e7:c9:2b:c1:d0:6b:d0:af:a9:18:1f:30:db:0f:
                    6d:3c:14:a4:40:0d:68:a2:9a:b9:df:f8:6e:97:ba:
                    56:a3:7d:c8:1c:9a:37:8b:b5:e2:45:e9:91:ee:89:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:98:ED:70:BA:66:A2:52:72:9E:21:05:B7:BA:BB:16:CC:26:62:A1
            X509v3 Authority Key Identifier:
                keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:d1:2b:cf:9a:a3:8a:73:30:db:7a:17:7a:37:f6:b4:28:
         8b:97:17:dd:e9:e9:54:1c:66:43:06:6e:7f:4b:18:e9:ce:3d:
         52:26:99:3c:85:20:38:99:22:88:f2:e8:d2:17:7a:15:5d:ad:
         42:85:14:a5:41:8f:bd:1c:a2:c0:fa:e0:f8:42:ca:2b:0e:65:
         0c:0a:8f:e5:e9:6c:9e:fb:c3:2d:a2:b2:dd:af:ae:50:e3:94:
         a0:bb:7e:06:d7:6f:9a:40:6e:55:82:fd:63:d3:f7:2e:4e:0f:
         17:af:1c:8f:fb:08:1d:df:24:2e:87:65:7e:21:bf:95:88:f9:
         9f:d3:6d:dc:f5:d7:1a:52:ff:75:0a:ab:4b:4c:2a:c0:5e:cd:
         c0:5b:5a:01:40:00:63:96:a2:e1:3f:b6:21:50:8b:d1:5f:12:
         ec:7e:41:ab:09:bb:c0:f9:17:f1:87:00:ec:7f:57:3f:1c:e3:
         a3:6a:54:31:ad:75:fe:5f:5c:20:91:b9:fd:e3:c0:9f:5f:79:
         e6:c3:5b:aa:3c:34:f1:96:cb:39:f6:e3:5a:54:37:19:8c:2a:
         09:ce:e4:3c:2c:60:f1:91:db:96:6d:65:9a:5c:4d:7a:2d:ba:
         c6:88:c7:3b:6a:95:1a:be:3b:51:e2:8c:d3:77:e2:be:99:ec:
         ab:b6:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:30 2026 by rpki-client