Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa
File:                     3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (raw, json)
Hash identifier:          Krmv1AxkIDz5LLeXvcbdvz01Nz4bM3ujfE5J9HEWSQM=
Subject key identifier:   53:7C:10:0B:B0:3A:CD:CD:BE:02:EA:66:6C:59:8D:DB:C0:2F:F1:3E
Certificate issuer:       /CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
Certificate serial:       24002ED9DD9864C779493161BE5AB5960B03B742
Authority key identifier: 18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa
Signing time:             Sun 03 May 2026 02:52:45 +0000
ROA not before:           Sun 03 May 2026 02:47:45 +0000
ROA not after:            Sun 02 May 2027 02:52:45 +0000
asID:                     138129
IP address blocks:        103.132.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl
                          rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:00:2e:d9:dd:98:64:c7:79:49:31:61:be:5a:b5:96:0b:03:b7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
        Validity
            Not Before: May  3 02:47:45 2026 GMT
            Not After : May  2 02:52:45 2027 GMT
        Subject: CN=537C100BB03ACDCDBE02EA666C598DDBC02FF13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:61:43:c1:df:87:e0:f6:e3:08:f4:4b:36:
                    5c:3e:13:55:72:b1:50:5c:cd:a6:dd:23:b3:cf:cf:
                    00:9e:49:aa:16:2d:6a:2a:ce:38:91:42:5f:49:b1:
                    b1:f5:2e:d5:6b:72:65:61:3f:6e:5a:63:8d:e9:0b:
                    38:47:88:36:83:05:4e:ef:9f:f3:9f:4f:08:93:39:
                    b8:09:b7:8c:de:71:f3:a0:a6:d7:37:e2:2a:bf:a2:
                    98:ef:d6:67:73:ee:24:2c:2f:55:58:c1:1d:1e:62:
                    de:89:2a:94:94:4d:a1:d5:40:09:ff:11:8c:73:2b:
                    c7:2a:85:7e:d0:3f:ef:8d:23:c4:b2:98:48:32:32:
                    32:27:2e:d3:50:29:99:90:01:0c:d8:ac:26:09:9b:
                    22:ad:c0:2a:dd:95:17:07:53:39:f3:38:94:e8:54:
                    2c:60:19:f1:49:d7:b4:d5:8a:c4:1a:9a:34:1b:70:
                    2a:be:c1:cd:bd:cc:c9:c8:54:95:dd:c5:c5:bd:8d:
                    6f:b2:7f:1f:c0:56:05:36:c2:66:e2:75:f7:01:e9:
                    89:1e:18:77:4f:70:23:b0:79:84:58:55:aa:34:e0:
                    b0:ae:83:42:ec:4c:d7:51:75:c2:72:c7:8a:52:8e:
                    72:cc:e7:31:b1:10:94:3c:a7:c3:d9:29:e6:1d:29:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7C:10:0B:B0:3A:CD:CD:BE:02:EA:66:6C:59:8D:DB:C0:2F:F1:3E
            X509v3 Authority Key Identifier:
                keyid:18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:57:09:24:b4:16:ad:01:22:59:d9:a2:cc:0e:dd:9f:0e:
         f7:71:37:fb:93:8e:1b:94:96:72:e3:19:ed:25:78:0f:a3:71:
         b3:95:ba:60:35:97:6b:7c:49:3e:93:20:9a:06:30:2d:38:55:
         94:45:f4:2f:06:88:5f:36:6e:5e:35:70:20:2d:dc:6d:c9:2b:
         ad:84:37:1a:56:84:cd:91:e9:6a:3b:81:e4:5f:8f:20:bd:57:
         ee:a8:6e:61:33:8a:b5:30:f4:a6:f3:8c:24:43:38:ed:ae:8e:
         d8:c8:8a:5b:c8:7f:43:99:ce:66:99:4a:49:0a:00:12:44:94:
         21:f9:4f:e7:d1:da:29:31:d8:db:68:e3:77:f1:6f:32:d0:61:
         d9:89:be:f4:e9:84:4f:a8:4e:b8:a7:ff:e9:ab:96:a7:2e:be:
         69:64:b9:7b:d5:cf:71:19:b3:c6:08:b7:7b:8f:cd:5e:b5:4f:
         17:01:dd:3d:46:13:fd:65:3b:9f:cb:60:63:a7:ba:8c:d2:e8:
         68:39:72:63:8c:ef:36:64:8b:0c:41:c8:57:9e:78:66:59:d2:
         93:43:ee:49:ce:7d:de:7c:33:e9:04:07:54:dd:76:fd:39:c3:
         03:96:49:24:23:d4:95:e1:0c:86:1c:40:4e:8a:0c:5a:e5:3c:
         cb:95:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:23 2026 by rpki-client