Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
File:                     3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (raw, json)
Hash identifier:          EhQ7R7hv9ww9SVAVibUO5OafRSJMymQa0QNdea7zNE0=
Subject key identifier:   49:A7:ED:B4:ED:75:35:3E:69:EA:C9:4F:76:40:00:7B:6A:D9:0C:17
Certificate issuer:       /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
Certificate serial:       7045DD3530D3BEB9FF636D7CD92FA3CF0698EB49
Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
Signing time:             Sun 03 May 2026 02:52:36 +0000
ROA not before:           Sun 03 May 2026 02:47:36 +0000
ROA not after:            Sun 02 May 2027 02:52:36 +0000
asID:                     135455
IP address blocks:        103.68.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl
                          rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:dd:35:30:d3:be:b9:ff:63:6d:7c:d9:2f:a3:cf:06:98:eb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
        Validity
            Not Before: May  3 02:47:36 2026 GMT
            Not After : May  2 02:52:36 2027 GMT
        Subject: CN=49A7EDB4ED75353E69EAC94F7640007B6AD90C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:5c:9f:cd:0e:7f:ca:ac:07:0c:80:f2:45:
                    81:b4:8a:22:4a:8e:42:d6:73:99:05:08:eb:33:cb:
                    f6:4d:0a:06:a2:11:8d:bb:01:48:af:cf:f8:e7:88:
                    4e:4d:8e:3f:c6:ed:89:bc:67:1b:11:cf:e0:9c:2d:
                    96:99:96:54:00:08:d3:10:f5:85:5d:98:0b:1b:c7:
                    04:7d:29:9e:95:4e:82:15:0e:1e:f4:82:37:b2:26:
                    b3:55:2e:a1:5d:7d:67:46:fd:0f:00:91:fe:90:36:
                    84:ce:f1:b8:f0:e1:76:81:95:4e:8e:b9:b7:26:d4:
                    b8:43:9a:c2:99:09:42:15:c2:61:30:9a:ba:6d:a2:
                    0c:0d:e8:f5:3a:95:ae:69:ec:a0:f4:dd:c6:2b:83:
                    f9:19:86:1c:cb:87:e7:22:43:58:13:12:1b:3e:73:
                    64:f3:f7:3d:be:2c:d2:e9:17:de:e4:fb:8f:f1:22:
                    29:24:01:1c:6d:04:c3:dc:85:ce:cd:2d:51:e3:b2:
                    2f:0d:2c:6f:ef:0b:14:ea:74:3b:b8:e3:53:17:2c:
                    a8:e8:50:df:a1:0f:2c:f9:1e:7a:c6:e6:e3:fc:d7:
                    1d:04:24:31:1a:76:48:a0:65:44:96:b2:6f:4a:78:
                    83:36:c0:9e:80:fa:1e:f2:4f:85:c5:66:23:91:97:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A7:ED:B4:ED:75:35:3E:69:EA:C9:4F:76:40:00:7B:6A:D9:0C:17
            X509v3 Authority Key Identifier:
                keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:58:83:45:9b:21:dd:72:26:3e:86:d9:87:42:1e:d5:ff:a0:
         7f:f0:22:90:55:40:d6:7f:f0:bb:ad:20:5c:e1:8d:f5:65:90:
         25:02:35:db:a6:5e:b1:c5:4a:9a:2d:9a:47:0d:a8:cb:48:02:
         5c:88:a9:16:08:98:5c:9e:08:22:2b:e4:de:b5:bc:d6:d0:84:
         70:01:32:47:b5:57:9e:96:19:ef:92:59:29:64:26:2a:b3:ae:
         a5:65:e9:ca:29:bd:05:ef:5d:3a:83:30:db:ce:10:2f:8a:5e:
         7d:1a:64:53:3c:ad:ba:bb:1d:69:8e:b8:14:b1:2d:f6:b4:7d:
         06:c7:ba:ee:1f:28:1a:92:24:b7:7b:4b:f8:1b:5b:32:51:03:
         14:07:b5:ed:37:eb:7e:ed:cc:2d:63:f8:83:67:df:a9:0c:54:
         85:71:b4:53:2c:c6:15:29:ce:d1:86:b7:01:c8:28:18:89:40:
         18:98:4c:5a:ca:0a:5c:1c:ab:ab:ef:d2:76:39:46:f7:1f:a1:
         ef:ce:3d:33:0f:56:55:d4:1b:40:e6:cd:ed:a9:80:55:6c:22:
         57:1b:82:25:dc:46:18:ca:4a:d2:fd:27:4e:a7:56:4f:0b:46:
         4f:92:4d:b7:ab:79:bd:0f:43:a1:c1:b4:20:8c:b3:88:47:01:
         28:71:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:12 2026 by rpki-client