Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
File:                     3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          v0zolYiVBPX0V+L+LtqJkU2q6rbdcBpLF4u+nGbvKcY=
Subject key identifier:   9B:1D:68:25:91:AC:6C:B6:FD:8B:42:29:8A:CE:A1:75:D4:80:F5:91
Certificate issuer:       /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial:       02BE15EA3381480FD8912EB773464FD61ACA003B
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
Signing time:             Sun 03 May 2026 02:51:40 +0000
ROA not before:           Sun 03 May 2026 02:46:40 +0000
ROA not after:            Sun 02 May 2027 02:51:40 +0000
asID:                     138818
IP address blocks:        103.103.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
                          rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:be:15:ea:33:81:48:0f:d8:91:2e:b7:73:46:4f:d6:1a:ca:00:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
        Validity
            Not Before: May  3 02:46:40 2026 GMT
            Not After : May  2 02:51:40 2027 GMT
        Subject: CN=9B1D682591AC6CB6FD8B42298ACEA175D480F591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:79:bd:ba:9e:bb:be:aa:ed:49:4c:8f:04:
                    16:1c:46:6b:4d:50:83:2f:c2:97:6b:ad:b6:3f:5e:
                    c1:86:1f:dc:bd:df:6b:e4:bf:f5:8f:24:d9:cf:40:
                    5d:ae:7e:87:74:6f:ac:fd:f5:e5:fb:c9:31:a2:86:
                    54:17:a1:15:dd:8d:bd:fc:d4:e5:f4:05:fb:30:ca:
                    3e:db:65:8f:2e:15:7d:7f:2c:13:fe:fe:a6:0f:c5:
                    4c:52:44:f7:c8:0a:7d:3d:7d:c3:8d:2c:40:c2:87:
                    c9:03:0a:16:f7:75:90:ed:b8:3f:07:57:bd:15:37:
                    5f:9d:be:47:a8:4a:66:8f:0b:91:c4:07:65:27:ed:
                    9b:94:52:e7:e6:2f:8d:71:7d:13:a6:f5:74:72:ca:
                    85:4d:98:4b:5d:b4:07:14:d0:c3:12:f4:77:82:c2:
                    1a:df:ec:00:2c:be:f5:c5:c8:fd:92:9c:25:52:a1:
                    37:ae:a7:c6:b8:97:fe:9f:b8:17:5e:2b:3b:ce:a7:
                    94:ce:54:f8:7c:1c:e9:f2:15:80:37:24:8d:35:89:
                    ac:4d:14:3d:d5:cc:5e:71:9b:09:12:03:48:d4:d6:
                    17:31:26:a9:d4:17:8e:25:75:01:22:89:08:10:23:
                    b7:50:54:df:59:e3:a9:dd:30:9e:5a:df:f1:96:61:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1D:68:25:91:AC:6C:B6:FD:8B:42:29:8A:CE:A1:75:D4:80:F5:91
            X509v3 Authority Key Identifier:
                keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:1c:6f:50:93:75:25:3a:08:33:40:cf:c5:04:ef:7e:91:4a:
         2a:d3:54:b9:b6:c0:98:ca:91:25:5e:44:d8:37:c9:34:30:59:
         0a:4e:ae:5e:13:24:af:11:33:bd:88:12:89:3e:be:ea:36:10:
         95:16:30:eb:01:d8:54:75:59:7c:61:86:48:ac:ba:61:2d:87:
         30:4f:fb:cd:3b:95:30:01:c4:68:dc:ee:b1:0e:fc:2d:91:f9:
         77:39:62:a1:bc:cb:a4:a9:7c:a8:03:13:f7:fe:b9:ec:4e:fd:
         ed:eb:4b:3d:6b:ae:b9:32:6a:c5:da:37:69:65:13:23:4d:db:
         14:d5:51:7b:fb:ba:e0:f9:20:b9:91:2a:4f:95:3d:25:ea:d1:
         c3:ba:f4:3b:0f:c0:ee:6c:62:9c:ec:9a:c4:92:8e:37:56:40:
         73:16:0a:c2:d0:35:6d:32:b1:f4:35:38:f5:cb:1c:29:b0:f7:
         1f:bf:f6:62:67:3d:ae:b5:5f:1f:2a:e2:f7:5e:c5:51:78:4b:
         9d:16:3a:03:ba:b3:50:cb:07:85:6a:cc:22:56:9b:6c:3d:61:
         6d:98:a1:f3:fb:ae:ce:1f:18:8e:d9:94:36:95:12:ec:8b:3f:
         c4:09:b2:83:dd:8d:ab:1e:eb:97:9f:c4:9f:c4:bd:35:c2:a4:
         4e:0e:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:31 2026 by rpki-client