Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa
File:                     3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (raw, json)
Hash identifier:          rkaEF6HYd4Zi2mWDcZzpfUs0wzlSk0vuh2bW5RUAm1I=
Subject key identifier:   00:6C:2D:9F:77:11:40:55:68:C9:59:86:7C:AF:9C:D7:BB:97:47:C2
Certificate issuer:       /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB
Certificate serial:       74E60718A902A64AD60E8797CD20D25425DE3D56
Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa
Signing time:             Sun 03 May 2026 02:49:33 +0000
ROA not before:           Sun 03 May 2026 02:44:33 +0000
ROA not after:            Sun 02 May 2027 02:49:33 +0000
asID:                     138810
IP address blocks:        103.134.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl
                          rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e6:07:18:a9:02:a6:4a:d6:0e:87:97:cd:20:d2:54:25:de:3d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB
        Validity
            Not Before: May  3 02:44:33 2026 GMT
            Not After : May  2 02:49:33 2027 GMT
        Subject: CN=006C2D9F7711405568C959867CAF9CD7BB9747C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:cf:20:b7:1b:96:a7:c9:ce:4e:40:35:87:
                    22:27:d6:0d:e5:b7:70:81:ea:9a:b4:40:97:4d:79:
                    3a:91:8c:06:d4:e9:e5:6b:a4:1a:1c:af:fa:80:17:
                    b9:3a:91:86:57:fc:2e:14:ad:2c:d2:76:33:b5:b8:
                    43:54:3e:10:68:37:91:2e:2f:1b:83:d4:fc:f7:0c:
                    18:7d:37:0c:d0:91:86:57:ef:0c:0c:34:b1:d6:9b:
                    cc:54:7c:d8:5d:29:51:03:ab:88:87:d8:a8:52:0e:
                    15:46:d3:36:ea:33:22:51:54:8e:f0:86:2b:42:04:
                    82:c2:8c:67:43:b5:fe:16:4d:56:30:9a:5c:42:00:
                    02:52:23:c3:20:2b:a0:9b:3c:12:f3:f1:c2:7c:3d:
                    79:f0:8e:b1:3d:62:b8:1e:7e:46:5a:de:c1:5b:79:
                    a7:92:e5:27:9a:a1:4b:51:95:11:55:cd:9a:b8:54:
                    1b:1b:72:04:2a:c6:fd:87:a7:53:7a:24:9a:3c:5e:
                    f5:f5:1c:69:2c:c2:0a:df:2d:e2:27:83:6d:b1:fd:
                    62:58:fd:da:54:5e:a3:ea:20:1d:0d:4c:d1:ee:17:
                    c0:38:3b:fb:b1:1a:8e:c5:aa:d6:e9:1f:f0:e2:9f:
                    ab:0a:7d:ec:43:18:d7:23:e2:1b:a9:8e:31:23:26:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6C:2D:9F:77:11:40:55:68:C9:59:86:7C:AF:9C:D7:BB:97:47:C2
            X509v3 Authority Key Identifier:
                keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:47:9e:5d:8b:4e:02:46:60:32:dd:47:4d:92:87:57:dd:3f:
         37:92:9a:f8:59:6f:1c:36:f2:87:f4:37:1f:98:b2:df:d6:22:
         55:fe:70:e1:0d:e5:29:5c:b8:ef:67:c0:cf:6c:dc:01:79:c2:
         72:f1:2d:4d:64:f7:db:49:75:ce:70:55:39:ac:1d:3d:c5:c2:
         63:05:9c:f0:67:bf:db:db:4b:d6:02:54:7f:14:25:43:66:dc:
         7e:c8:aa:95:8b:2a:33:16:73:73:81:74:11:fa:e0:4b:f8:3b:
         13:80:2b:95:57:88:b7:08:16:5e:d5:cf:b8:13:5f:5e:15:2d:
         72:82:da:07:26:34:17:24:da:ef:49:50:7a:d6:ea:3b:89:4b:
         e5:cf:fe:7e:28:4a:5a:bc:92:9c:7f:98:93:5b:a6:e6:7e:f1:
         50:1b:7f:3b:1c:be:89:13:68:c4:4e:4e:cc:08:7d:75:30:d9:
         8e:39:04:ff:5e:d3:80:13:0b:5f:63:8a:7d:8e:91:02:52:0f:
         a0:c2:00:29:aa:d1:b1:68:42:73:92:02:64:ca:1a:79:43:3c:
         18:82:7a:2a:ee:64:b3:d7:a1:21:ae:3e:e2:8a:ed:46:40:43:
         61:6a:78:22:5e:00:bb:77:41:a9:b4:f3:e9:63:3f:c6:33:84:
         d3:12:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:00 2026 by rpki-client