Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa
File:                     3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier:          r93AiQLpEiiQUZdR6WD0a4zObzoCKw/EIXeQ7BGbSPw=
Subject key identifier:   0D:C0:FC:41:0D:19:29:69:1E:99:02:D5:74:F5:23:35:B8:3D:74:21
Certificate issuer:       /CN=A178C6332DA881B104F0F93428812E41FBC50469
Certificate serial:       266818BFE5515731D0EBBBC788E42F3727EA49D9
Authority key identifier: A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa
Signing time:             Sun 03 May 2026 02:51:49 +0000
ROA not before:           Sun 03 May 2026 02:46:49 +0000
ROA not after:            Sun 02 May 2027 02:51:49 +0000
asID:                     138079
IP address blocks:        103.130.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl
                          rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:68:18:bf:e5:51:57:31:d0:eb:bb:c7:88:e4:2f:37:27:ea:49:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A178C6332DA881B104F0F93428812E41FBC50469
        Validity
            Not Before: May  3 02:46:49 2026 GMT
            Not After : May  2 02:51:49 2027 GMT
        Subject: CN=0DC0FC410D1929691E9902D574F52335B83D7421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:5d:cb:e3:84:51:0f:da:da:a7:79:e0:5a:
                    d6:a1:ba:f9:ba:6a:70:6b:b6:51:f5:01:e3:15:ba:
                    b8:06:03:ea:b5:8c:8f:a4:10:26:17:80:5a:eb:ff:
                    33:ff:0a:02:5a:3f:6c:8a:67:54:cb:5a:16:ea:94:
                    6b:d0:54:61:1b:59:9b:2b:2a:5e:80:38:04:ad:21:
                    8c:f1:83:f8:9e:9d:77:0f:a2:b8:69:d2:32:72:5d:
                    27:55:2f:d7:11:81:51:f8:19:64:d2:e0:18:76:5a:
                    b3:7f:73:e9:e1:cc:67:8d:d0:ec:38:e7:24:34:66:
                    fe:94:e6:d8:6d:b5:b7:d1:8b:e9:eb:ba:8a:8f:64:
                    55:8a:8b:18:03:2e:7e:4c:e0:b4:b2:35:5b:ae:62:
                    2e:e8:71:e1:b6:0a:ab:53:1e:83:e3:7c:3e:c9:92:
                    68:f5:c8:a4:53:2c:6b:37:f5:47:81:8d:10:db:41:
                    da:92:2d:86:c6:6b:82:88:4d:b3:d1:d4:3a:e7:a7:
                    a1:4f:ce:16:e2:69:7c:44:26:35:f5:9d:55:68:55:
                    cf:a5:bd:70:c6:17:8b:c0:ee:26:10:cc:df:37:58:
                    89:a8:3b:00:22:db:16:02:a6:e5:d2:81:b9:b8:ea:
                    4d:30:10:22:d3:09:72:45:1a:05:ab:db:b0:0d:c0:
                    94:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C0:FC:41:0D:19:29:69:1E:99:02:D5:74:F5:23:35:B8:3D:74:21
            X509v3 Authority Key Identifier:
                keyid:A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:96:07:0a:d0:c4:47:7f:75:f2:aa:c5:a2:0a:16:4c:2d:79:
         be:59:a1:11:66:68:60:7e:10:29:97:3f:26:5d:48:c0:76:5f:
         95:7c:ba:0f:1b:12:d5:08:6d:52:ac:81:32:11:ae:6c:db:7d:
         df:b4:79:01:4f:36:26:c2:81:5e:80:48:6c:8f:e1:ec:7f:93:
         67:f5:38:b2:23:42:2c:3f:5d:61:ac:7a:67:eb:4f:b9:2b:40:
         bf:0a:a6:10:07:21:01:f2:9e:cd:e4:77:d7:01:67:eb:8a:58:
         97:0e:89:5b:75:89:83:c0:9e:fe:97:f6:3b:c4:2d:e0:47:e3:
         ec:e6:10:0c:26:e8:12:60:fa:78:4f:0d:37:39:ec:9f:66:2c:
         11:91:8e:d9:99:85:39:e3:d1:53:7e:f9:b3:f6:45:a3:89:a4:
         fa:d0:e4:a6:7c:04:9c:fe:fb:64:50:26:e8:f9:43:26:52:48:
         d0:93:de:34:ee:88:e9:5f:83:d0:3b:6f:51:e5:8c:79:60:4f:
         4a:36:81:ea:38:29:b0:06:24:da:d9:64:80:81:0b:92:d1:79:
         de:69:13:8d:63:02:22:a5:23:2f:17:c3:dc:87:bb:6e:0d:e9:
         7c:fe:d0:ba:34:44:62:47:af:76:e7:d4:23:cd:01:16:a4:8f:
         e3:2c:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:28 2026 by rpki-client