Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31382e302f32342d3234203d3e20313336303835.roa
File:                     3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (raw, json)
Hash identifier:          3YW3wpzif7Ii0+9H5ajQcKu+WhGUBsXKkY6vurMFFkQ=
Subject key identifier:   26:0A:85:51:F0:88:2A:D8:F1:ED:C0:30:9D:F2:67:D9:6B:D0:0D:25
Certificate issuer:       /CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC
Certificate serial:       138EF8117E591A806327C2173C4B5127401FCC65
Authority key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31382e302f32342d3234203d3e20313336303835.roa
Signing time:             Sun 03 May 2026 02:49:50 +0000
ROA not before:           Sun 03 May 2026 02:44:50 +0000
ROA not after:            Sun 02 May 2027 02:49:50 +0000
asID:                     136085
IP address blocks:        103.87.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl
                          rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8e:f8:11:7e:59:1a:80:63:27:c2:17:3c:4b:51:27:40:1f:cc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC
        Validity
            Not Before: May  3 02:44:50 2026 GMT
            Not After : May  2 02:49:50 2027 GMT
        Subject: CN=260A8551F0882AD8F1EDC0309DF267D96BD00D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:b2:e0:d7:92:77:b6:a1:11:7c:52:cd:d1:
                    2e:80:5d:4e:fd:df:d1:d5:7e:29:81:09:9f:98:22:
                    9d:98:4a:95:88:d9:de:4a:f8:9e:a9:09:a2:a1:1c:
                    6d:60:5c:1f:2d:e5:e2:03:07:16:cd:ee:83:72:62:
                    05:57:1e:f0:2d:ff:92:c6:6d:78:bb:d9:79:02:73:
                    c6:7a:e2:74:e6:0a:4a:87:93:b0:d5:b7:31:3d:36:
                    c2:ff:a8:28:88:ee:40:46:72:33:ca:8d:2e:5f:5a:
                    fc:4b:00:29:81:b4:88:9b:7f:70:68:bd:e6:06:ec:
                    e3:f5:2b:5a:16:38:b3:28:1c:63:a3:29:37:3f:4c:
                    30:83:be:31:2a:d1:ab:f5:ec:d6:6d:a9:bd:7f:ca:
                    b2:4d:30:ab:d4:17:e4:f7:b2:92:6c:50:7b:46:3a:
                    57:08:52:11:71:e2:72:bd:68:2b:33:c1:55:68:de:
                    a3:3a:d5:d5:f8:f3:67:bb:b8:fe:32:78:b7:b7:72:
                    4a:b2:6b:3f:00:48:2a:0c:ea:51:a4:a5:28:ee:03:
                    a1:f7:bc:6f:50:30:f8:b0:51:9d:4b:99:82:3f:06:
                    d7:24:dc:ef:6c:ed:81:4c:e8:bb:27:12:3a:c2:f3:
                    c2:7a:ea:f7:12:ae:c0:4f:32:9a:6f:f3:41:6c:87:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0A:85:51:F0:88:2A:D8:F1:ED:C0:30:9D:F2:67:D9:6B:D0:0D:25
            X509v3 Authority Key Identifier:
                keyid:91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31382e302f32342d3234203d3e20313336303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:87:10:3c:15:a9:a2:3f:94:b7:d4:0a:db:1c:4d:f0:74:bb:
         25:e7:7e:15:26:28:58:9c:eb:94:e6:74:d8:f5:ff:ef:07:34:
         a1:bb:b6:5d:64:14:72:f0:fe:88:2e:b0:a4:96:eb:e8:07:44:
         f7:3c:84:79:a3:5b:00:da:d9:f7:b7:db:44:84:1f:ca:b5:69:
         df:18:3a:4b:21:00:0d:c6:15:d6:43:de:0a:21:95:4e:1b:95:
         e1:13:9a:6d:e6:9d:76:bd:3e:7d:87:9f:47:e6:ec:2d:83:fa:
         37:20:ed:8e:26:cd:54:89:51:c1:20:fb:9f:55:5d:50:a8:aa:
         d7:14:5e:bb:b4:c5:94:03:8a:4e:18:b6:b4:60:85:30:d9:eb:
         3e:91:7f:cb:f9:56:31:cc:db:08:9c:48:d0:39:60:8b:86:1f:
         8f:71:68:ae:c2:35:ee:01:d7:0c:6e:81:f8:56:f1:fa:39:79:
         83:02:7f:e3:6b:6e:7b:15:53:74:29:aa:a0:fb:12:53:57:e1:
         f2:7a:21:e4:3e:53:88:29:ea:2d:e7:7a:8d:51:c6:05:53:f5:
         33:46:27:c8:dc:bf:65:dd:7b:f4:a5:b8:28:aa:fd:66:3a:5a:
         33:ea:36:34:93:74:d4:ce:3a:c1:73:1f:91:e3:42:ad:3c:b0:
         08:87:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:49 2026 by rpki-client