Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa
File:                     3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (raw, json)
Hash identifier:          ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=
Subject key identifier:   9F:24:E5:D2:56:06:EF:95:CA:22:00:F9:DD:D8:CD:EC:60:01:0C:99
Certificate issuer:       /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB
Certificate serial:       0CF972D2105E0E016F2F6EF72A5B306E8D5BDAF4
Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa
Signing time:             Sun 03 May 2026 02:49:32 +0000
ROA not before:           Sun 03 May 2026 02:44:32 +0000
ROA not after:            Sun 02 May 2027 02:49:32 +0000
asID:                     138810
IP address blocks:        103.134.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl
                          rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f9:72:d2:10:5e:0e:01:6f:2f:6e:f7:2a:5b:30:6e:8d:5b:da:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB
        Validity
            Not Before: May  3 02:44:32 2026 GMT
            Not After : May  2 02:49:32 2027 GMT
        Subject: CN=9F24E5D25606EF95CA2200F9DDD8CDEC60010C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:ee:3b:05:ed:c7:c0:fd:53:13:b7:22:10:
                    65:34:92:14:43:1f:11:44:aa:80:e2:4b:4d:03:59:
                    57:c4:65:f7:ce:41:f5:4d:31:36:34:87:82:9f:58:
                    d0:d9:84:58:e1:32:8d:9e:73:61:df:25:53:89:cc:
                    c9:3f:4d:8c:de:9d:28:53:51:ff:09:d0:00:18:fe:
                    85:eb:42:6b:49:a5:80:a4:a1:b9:3d:af:05:81:32:
                    4a:e2:07:d0:63:c4:08:cc:02:c6:2b:39:d5:e3:4a:
                    63:2f:4a:15:a4:40:1f:b5:a7:ff:4c:1b:8f:92:59:
                    3e:96:f5:4e:f3:ef:69:6f:48:d9:96:e5:62:26:50:
                    4d:47:31:1c:ee:99:db:89:6b:bd:6d:fe:44:59:30:
                    f3:74:01:02:40:ce:cd:cd:c4:37:f2:45:97:51:3c:
                    94:ed:cb:cc:ed:c4:69:fc:c6:1f:32:49:7f:04:ed:
                    41:6c:42:0e:b0:13:c6:a5:4c:17:78:be:82:75:cb:
                    f5:93:31:e2:8b:00:1d:a5:f9:eb:5b:b7:48:0e:e2:
                    85:56:e4:de:38:ed:a9:96:58:7b:36:3f:71:d2:64:
                    ba:96:f1:ef:f5:e9:67:9f:a5:ef:8f:75:34:14:18:
                    3a:3a:ac:3a:eb:42:d9:87:c4:a4:7a:3c:37:fb:b7:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:24:E5:D2:56:06:EF:95:CA:22:00:F9:DD:D8:CD:EC:60:01:0C:99
            X509v3 Authority Key Identifier:
                keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:a5:d6:f0:8b:67:02:21:eb:4d:fe:ea:fe:d4:8a:4a:86:
         cc:e0:ed:c4:a0:db:6b:27:c2:57:fd:53:24:3e:38:ad:35:12:
         f8:09:f4:bf:ae:af:81:77:f7:4d:51:c5:de:36:07:cd:36:ce:
         ab:c3:ea:26:70:52:8c:74:0c:1c:04:f5:d4:cc:62:34:a0:9a:
         5f:15:80:c5:67:5b:3b:e3:c3:00:12:36:6e:ad:3f:77:ef:e1:
         4a:aa:76:d5:af:03:50:0b:bc:21:9a:57:35:15:64:0b:85:e0:
         0d:c5:6c:6c:e1:62:cc:9a:57:c2:fa:a9:8a:d2:21:11:bc:31:
         83:c1:15:3c:c6:07:1b:fd:63:ac:0c:74:80:20:cd:45:cf:b4:
         2e:66:b1:d0:c5:51:ad:ae:4d:6b:48:86:49:95:44:d5:3c:1c:
         76:4d:2a:96:25:0a:a2:dd:04:e9:36:fb:52:01:66:5b:db:b0:
         d3:2c:19:35:eb:48:69:fa:fb:c7:bd:13:40:be:7f:d1:49:e0:
         80:66:e2:61:c1:4a:fb:68:6a:83:35:47:4d:cd:fe:39:89:bd:
         fc:ac:dc:c0:27:71:e5:87:14:80:df:f8:27:e7:5c:19:d3:86:
         83:69:32:76:ce:f2:63:83:62:63:7c:14:41:bd:20:ac:c2:0f:
         15:7a:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:04 2026 by rpki-client