Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e203338353131.roa
File:                     3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          GFz+TTDbnW2nztXcZjgib7laNHpvzTT0hcf+2L3G+7o=
Subject key identifier:   9D:56:66:AE:53:0A:1C:EF:82:20:F2:83:C2:A9:F7:CA:CA:D5:44:EF
Certificate issuer:       /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
Certificate serial:       06B61F53A229B2172D6B26080E1E9E6FAEC6C58B
Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e203338353131.roa
Signing time:             Sun 03 May 2026 02:52:38 +0000
ROA not before:           Sun 03 May 2026 02:47:38 +0000
ROA not after:            Sun 02 May 2027 02:52:38 +0000
asID:                     38511
IP address blocks:        103.68.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl
                          rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b6:1f:53:a2:29:b2:17:2d:6b:26:08:0e:1e:9e:6f:ae:c6:c5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
        Validity
            Not Before: May  3 02:47:38 2026 GMT
            Not After : May  2 02:52:38 2027 GMT
        Subject: CN=9D5666AE530A1CEF8220F283C2A9F7CACAD544EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:a7:9c:ed:8a:ed:34:05:1d:30:54:0b:a4:
                    74:2d:76:ed:24:8a:97:0a:11:1d:98:d6:59:7c:ea:
                    7a:55:7c:95:52:ef:2c:f6:72:a6:fe:2a:ff:c6:3d:
                    4c:aa:60:a5:b8:72:bd:75:04:4d:75:08:74:78:a8:
                    2c:9b:66:5d:63:ff:38:c6:6e:cc:33:a7:aa:06:5a:
                    c0:4f:65:06:a9:5d:0a:be:72:70:d3:52:64:4a:17:
                    a7:be:83:4c:c1:eb:14:25:85:57:a2:8f:d3:aa:43:
                    97:78:78:08:52:dd:1d:68:3b:08:3b:10:c7:d0:b6:
                    88:e7:b9:71:fa:5c:f4:aa:46:3c:5d:26:1b:68:44:
                    bd:24:25:8f:bf:a5:b0:0c:82:b7:5a:74:18:cd:46:
                    9f:86:ac:b4:ef:69:55:3c:aa:c2:ae:b9:36:19:75:
                    41:94:38:17:64:80:b0:01:2c:2c:07:b0:88:c4:73:
                    53:e9:c9:f6:9e:63:9a:ee:0e:79:00:f4:f5:e9:82:
                    72:33:74:e8:d5:2b:03:35:51:01:63:fe:db:c9:3e:
                    ea:ee:5d:bd:c0:5c:3b:f7:3f:4b:2f:c7:ec:18:7b:
                    9a:4d:a3:be:bb:2f:54:8b:a6:14:c2:00:1f:32:12:
                    b1:42:10:e1:3d:77:4f:cc:e0:88:01:92:c4:b1:b6:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:56:66:AE:53:0A:1C:EF:82:20:F2:83:C2:A9:F7:CA:CA:D5:44:EF
            X509v3 Authority Key Identifier:
                keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:8d:46:ed:d7:d9:bf:ed:58:c0:c6:a7:7e:f3:e0:72:a0:a7:
         83:2b:32:4e:e8:99:63:0e:54:6e:0c:c8:ec:fd:5e:ff:cc:8d:
         07:a8:84:ce:41:3d:05:29:a8:b8:33:93:8a:4d:31:aa:71:8a:
         d6:db:44:67:69:66:54:29:8e:6c:5d:d8:b8:8b:f2:17:1c:c9:
         23:54:7a:66:ca:0d:6f:c2:6e:c3:7d:42:6f:cf:29:a3:8d:26:
         d5:8e:f8:85:01:4f:2b:31:71:29:50:c8:d6:6d:de:58:07:65:
         50:9b:47:bf:61:ff:60:31:83:24:58:4b:fe:b6:79:63:da:cc:
         3a:2e:ff:98:a5:df:9c:b8:07:69:d9:4a:6e:cd:2f:7c:9f:5e:
         cd:72:9a:89:11:53:35:8e:c2:59:87:7e:1a:ef:2c:6c:26:f9:
         07:4b:cd:e7:45:74:00:49:d7:a3:c8:b0:bb:1e:0c:38:57:dd:
         a8:cd:f3:8e:5b:2a:a5:dc:85:53:dc:97:17:65:26:24:e7:83:
         4d:42:b1:52:e6:af:f6:dd:be:5b:30:a4:01:7b:a9:83:81:0d:
         95:fc:b8:86:1c:f1:c9:e0:73:2b:a4:64:5a:f6:f6:9a:51:10:
         2e:c5:4f:8a:84:09:e8:d4:a6:0a:ed:15:27:45:5f:8e:5c:d5:
         b5:80:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:50 2026 by rpki-client