Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa
File:                     3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier:          y5uAk2aLtDJOH/AO3GV3v97lCgPXV0mBWicCymq9t4k=
Subject key identifier:   20:22:79:CC:79:55:7D:5E:AA:5A:FC:64:D5:4E:98:B6:0D:FD:2E:FE
Certificate issuer:       /CN=A178C6332DA881B104F0F93428812E41FBC50469
Certificate serial:       3F66321616EAC023661925290C4840F4DD6FCBE5
Authority key identifier: A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa
Signing time:             Sun 03 May 2026 02:51:48 +0000
ROA not before:           Sun 03 May 2026 02:46:48 +0000
ROA not after:            Sun 02 May 2027 02:51:48 +0000
asID:                     138079
IP address blocks:        103.130.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl
                          rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:66:32:16:16:ea:c0:23:66:19:25:29:0c:48:40:f4:dd:6f:cb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A178C6332DA881B104F0F93428812E41FBC50469
        Validity
            Not Before: May  3 02:46:48 2026 GMT
            Not After : May  2 02:51:48 2027 GMT
        Subject: CN=202279CC79557D5EAA5AFC64D54E98B60DFD2EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:80:d4:97:40:35:89:c6:c8:79:a0:89:f5:
                    e0:65:0a:d0:d7:96:bc:97:93:5b:b7:6b:f9:d9:6a:
                    3e:71:36:ef:50:97:de:7e:47:c5:3d:b9:b8:17:f1:
                    42:4a:fd:5f:e8:41:28:ab:ae:7b:d9:d9:04:ff:c1:
                    1c:01:fd:0b:96:ff:53:ca:a9:53:4e:2c:1c:35:c7:
                    36:0f:48:e0:e3:23:76:53:b6:b0:6b:b5:71:d1:1e:
                    ec:b3:db:45:c4:5a:eb:73:c7:62:71:76:57:ee:19:
                    79:dd:32:4d:4e:c9:ce:d6:1d:e0:ec:8b:41:d8:fc:
                    6a:f4:ff:86:a9:8a:ff:63:24:75:61:67:97:41:66:
                    28:b5:36:9a:66:33:d4:2d:50:94:2d:ed:e5:7b:09:
                    e7:c3:35:1d:1a:5f:35:9c:9f:53:be:3d:38:7c:c3:
                    ce:07:e0:aa:b6:d4:9f:60:a4:61:ad:89:fc:9a:66:
                    8a:31:6a:84:ec:22:9f:91:66:00:e2:a4:05:f2:84:
                    16:de:d3:a8:7c:7d:91:c8:57:e1:e3:3a:48:0b:f1:
                    e3:c8:e4:a2:9e:c3:3b:27:8e:4c:b2:57:8d:47:44:
                    2b:2f:31:f7:ce:0d:bd:d2:eb:29:a3:35:95:70:b7:
                    93:65:6b:72:5d:09:3e:95:7e:8b:27:89:7b:ae:54:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:22:79:CC:79:55:7D:5E:AA:5A:FC:64:D5:4E:98:B6:0D:FD:2E:FE
            X509v3 Authority Key Identifier:
                keyid:A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f2:ae:09:d0:0d:3c:ba:46:ae:c3:31:c4:e1:11:af:f9:4e:
         dd:58:3d:93:d4:12:d3:0d:2d:52:12:e4:a8:fd:f1:2c:2a:91:
         16:fa:c2:78:91:d7:35:b8:01:9a:bb:1d:2d:b1:9f:0a:72:42:
         ff:3f:30:bf:1c:3d:4c:fc:2b:a2:ad:41:cc:ba:a5:46:29:e3:
         6e:d9:e5:66:0a:70:a7:73:ae:27:57:f4:db:c5:27:93:e7:67:
         04:d0:a9:a4:20:10:37:10:95:b9:76:07:27:97:a7:ea:1d:13:
         7e:af:e4:90:95:8f:eb:0c:fd:f3:0b:2a:f6:59:fb:f1:32:2f:
         d2:33:c8:08:8e:1a:a7:96:a1:b5:b7:d9:53:37:c9:66:65:36:
         e4:52:7a:0f:8b:56:f7:24:98:b7:cb:4f:02:03:06:f8:b4:16:
         0a:f7:6b:86:11:e4:4a:1a:b6:72:e9:56:9f:e3:87:d1:48:21:
         39:cc:7b:5d:12:41:61:1f:8d:8c:a2:16:ab:9d:e2:39:f3:91:
         76:9c:19:c2:04:6a:07:50:c2:15:ed:cc:47:e3:5b:86:68:a8:
         6e:74:5b:9e:98:53:af:95:b3:a2:bd:f7:7a:dc:5b:c5:e5:b7:
         2f:1b:e8:39:8c:27:03:9a:5d:26:f6:22:69:d4:38:34:58:f3:
         16:15:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:22 2026 by rpki-client