Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31352e302f32342d3234203d3e203633383237.roa
File:                     3130332e33392e31352e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier:          CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=
Subject key identifier:   60:EF:E5:18:F4:D9:FC:6A:23:2F:B9:68:24:63:6C:9C:24:B0:32:FA
Certificate issuer:       /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial:       20B67A12E5902417572422A1A687837260E8EFF0
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31352e302f32342d3234203d3e203633383237.roa
Signing time:             Sun 03 May 2026 02:51:56 +0000
ROA not before:           Sun 03 May 2026 02:46:56 +0000
ROA not after:            Sun 02 May 2027 02:51:56 +0000
asID:                     63827
IP address blocks:        103.39.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
                          rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b6:7a:12:e5:90:24:17:57:24:22:a1:a6:87:83:72:60:e8:ef:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
        Validity
            Not Before: May  3 02:46:56 2026 GMT
            Not After : May  2 02:51:56 2027 GMT
        Subject: CN=60EFE518F4D9FC6A232FB96824636C9C24B032FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:f3:ba:79:d4:b3:fd:59:da:16:a0:f1:e1:
                    15:43:73:65:3b:7f:d0:d5:98:ae:71:c9:c8:67:a1:
                    03:99:78:0b:bb:bf:3a:2d:01:7a:2a:3e:de:e9:a6:
                    e8:3f:b8:95:dd:cb:ce:a1:9b:65:ac:19:90:e6:37:
                    ca:ec:df:19:91:94:b9:67:66:b6:4f:cd:51:f2:82:
                    35:75:75:28:b5:26:3a:cd:bd:d6:c4:d2:76:7d:bd:
                    9b:fb:af:28:ca:27:f5:31:84:a0:bf:c9:88:a0:07:
                    04:c3:4b:43:ee:2a:9c:21:f0:1e:fc:ad:3c:58:8b:
                    b2:a4:74:9a:05:8c:7c:24:5f:e9:ce:0f:e4:d1:d1:
                    48:5c:dd:14:86:56:36:76:92:3a:93:44:cf:cc:cd:
                    e3:69:8a:32:40:ae:f4:20:e9:5b:60:21:bf:4a:6a:
                    fc:9a:8d:3f:92:35:e9:10:89:e8:22:ca:b6:6a:e9:
                    7b:a6:62:e7:ae:f1:4a:e6:ab:51:3b:8e:43:e4:f9:
                    3d:a9:0c:3f:96:c6:66:11:36:ef:7a:e0:61:dc:dc:
                    59:e5:94:9f:5a:60:ba:b8:cb:00:3a:d2:f6:f1:13:
                    a4:37:95:a0:ca:f0:03:64:4c:82:53:56:eb:45:92:
                    2a:45:1d:e4:56:d0:5c:35:37:d5:f6:cb:f8:55:e1:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EF:E5:18:F4:D9:FC:6A:23:2F:B9:68:24:63:6C:9C:24:B0:32:FA
            X509v3 Authority Key Identifier:
                keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31352e302f32342d3234203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:75:6b:99:6a:c9:2b:a3:18:3f:52:5c:8d:ef:d6:3a:bc:
         1b:bc:28:44:b5:c1:79:5e:71:be:4e:42:5a:9b:a5:10:ee:76:
         78:bc:6c:c1:a4:46:f2:a0:fc:a7:c0:b2:1d:58:6e:88:af:02:
         75:2e:bd:41:7b:2e:1c:30:b8:84:20:93:c3:38:5d:b1:69:80:
         8f:73:dd:6c:c6:53:45:30:7f:39:c1:b2:b4:ec:d5:83:38:05:
         4b:5b:e6:f1:76:b7:6f:df:66:ed:f2:d6:a0:13:d5:eb:b2:7b:
         38:47:69:ef:7b:9f:de:1e:a6:16:b2:aa:25:d3:79:a8:c3:aa:
         4e:8a:28:cb:de:86:72:12:b9:eb:f3:1f:ed:54:7d:3e:39:6f:
         d7:77:2b:2e:66:2f:69:dd:79:f6:1a:7e:fa:84:ea:92:40:d2:
         3d:48:12:d4:e6:9d:bd:f7:5d:99:49:00:4c:43:33:14:60:cc:
         c1:6c:e7:db:96:2c:01:af:57:73:01:f1:00:f5:7e:aa:ed:72:
         7a:e2:85:3d:98:b2:6f:fb:91:30:69:8b:02:c7:b1:6d:6f:97:
         0f:51:24:1a:7e:69:4e:f1:b8:14:ca:6c:59:1f:20:53:f1:38:
         5b:2b:2c:d4:ac:5d:d8:92:bb:73:37:3d:07:f5:56:97:f8:56:
         3f:55:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:17 2026 by rpki-client