Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa
File:                     3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (raw, json)
Hash identifier:          PRU3xKp5Vx/uul+EMJIb2hSjg7qhpttIRi3G7tygtR0=
Subject key identifier:   70:C8:A5:0B:A0:D3:28:56:69:BB:65:04:55:D4:88:21:9E:05:EC:7D
Certificate issuer:       /CN=A178C6332DA881B104F0F93428812E41FBC50469
Certificate serial:       2A455BDFA349872C6FE38A0EFAC72FCE2486D9C6
Authority key identifier: A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa
Signing time:             Sun 03 May 2026 02:51:47 +0000
ROA not before:           Sun 03 May 2026 02:46:47 +0000
ROA not after:            Sun 02 May 2027 02:51:47 +0000
asID:                     138079
IP address blocks:        103.130.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl
                          rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:45:5b:df:a3:49:87:2c:6f:e3:8a:0e:fa:c7:2f:ce:24:86:d9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A178C6332DA881B104F0F93428812E41FBC50469
        Validity
            Not Before: May  3 02:46:47 2026 GMT
            Not After : May  2 02:51:47 2027 GMT
        Subject: CN=70C8A50BA0D3285669BB650455D488219E05EC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:a2:2a:0a:08:77:76:0a:1e:09:c1:27:3a:
                    f1:e5:23:7a:c0:4b:a2:54:03:38:2f:ed:49:0a:e4:
                    68:e0:94:4e:35:26:1d:b7:b5:21:8a:e4:74:94:e9:
                    5f:06:a9:b8:72:86:ac:a2:04:b3:24:74:dc:f6:6f:
                    9d:a3:ac:8b:f6:10:39:b5:1d:a8:8a:46:9b:08:3e:
                    4f:fc:85:2a:49:a5:29:4b:52:1f:f6:67:0e:5e:63:
                    ac:b6:2d:a3:39:c9:38:97:8e:d1:f8:5e:8e:5d:19:
                    ba:08:65:40:21:cf:1f:eb:8e:a8:bd:66:be:24:d4:
                    5c:55:39:67:81:58:fd:21:d0:41:2d:a5:da:64:fe:
                    c2:e2:72:b2:bd:74:8a:8f:fc:2a:a3:e1:28:15:2c:
                    f7:f3:b0:51:19:88:ba:78:b7:0b:88:92:ff:a3:ef:
                    9e:7a:da:6f:77:86:5b:47:92:e9:b0:49:65:00:4c:
                    8e:ad:31:8e:f7:f1:98:e5:e8:c8:f9:99:70:49:0f:
                    a5:bd:35:5e:ed:90:b5:e7:b6:cb:63:ab:8a:4e:88:
                    ea:8c:d0:28:c1:f9:6c:7b:5c:ab:70:89:ea:5e:14:
                    ca:88:a0:d5:e3:2b:fe:73:4f:10:ca:8d:53:ca:4f:
                    c5:d7:01:fb:1c:ad:50:d5:15:8d:7c:3b:a0:45:09:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C8:A5:0B:A0:D3:28:56:69:BB:65:04:55:D4:88:21:9E:05:EC:7D
            X509v3 Authority Key Identifier:
                keyid:A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:ab:cb:a6:b3:a8:1f:93:52:c0:fb:bd:cb:ef:71:bb:85:4b:
         67:f7:93:e4:cd:8e:f3:17:d8:cf:e1:d4:70:3a:ab:4c:88:24:
         ef:89:92:0d:46:57:85:aa:04:c0:8d:77:05:65:dc:e8:a9:e1:
         51:d3:05:64:72:17:6d:56:d5:c4:bf:0e:42:ec:e2:62:b8:fb:
         75:59:84:93:65:e3:46:ac:3a:f2:23:c4:a5:cc:1d:b6:71:cc:
         12:7c:71:70:f9:c0:47:32:76:ba:25:9f:64:4d:9c:59:79:a9:
         ff:4e:cf:65:b3:f5:7d:2c:4f:1e:86:54:18:72:b8:c5:f7:3c:
         90:ed:35:fe:9c:0e:18:02:dd:3e:04:9f:8b:72:c1:db:67:40:
         c7:a9:4c:b8:d7:11:37:28:3d:08:05:7c:30:53:81:6c:56:b9:
         06:27:30:92:06:cd:d7:bd:e8:44:03:53:e6:bc:9f:1f:12:bd:
         fb:1d:a4:cc:4a:2b:47:21:65:de:e9:be:17:b9:5e:fe:6b:18:
         e7:eb:7b:51:3a:a6:fd:84:4e:61:e2:a0:69:f6:d1:db:11:a3:
         b5:e8:5c:fa:60:57:e9:67:bd:44:cd:88:63:2c:31:dc:28:90:
         8f:f3:1f:ef:f8:ce:60:44:c3:27:81:39:f9:e6:36:46:43:24:
         00:a4:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:52 2026 by rpki-client