Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa
File:                     3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (raw, json)
Hash identifier:          NRcKgzAD1aXFV9xSYN/NAX4+lhq8SGmZ0ijJnrN5qYY=
Subject key identifier:   DD:19:32:B9:68:3E:4C:07:F6:A5:86:8A:1A:FC:AE:00:92:D0:8A:C9
Certificate issuer:       /CN=96348B9579D234769BDF15F375368D3C0BDE1860
Certificate serial:       04997FC6D5CC8C2129317218DA335ADDDAE20E76
Authority key identifier: 96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa
Signing time:             Sun 03 May 2026 02:52:52 +0000
ROA not before:           Sun 03 May 2026 02:47:52 +0000
ROA not after:            Sun 02 May 2027 02:52:52 +0000
asID:                     138893
IP address blocks:        103.139.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl
                          rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:99:7f:c6:d5:cc:8c:21:29:31:72:18:da:33:5a:dd:da:e2:0e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96348B9579D234769BDF15F375368D3C0BDE1860
        Validity
            Not Before: May  3 02:47:52 2026 GMT
            Not After : May  2 02:52:52 2027 GMT
        Subject: CN=DD1932B9683E4C07F6A5868A1AFCAE0092D08AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:2e:9b:4c:4d:a2:14:07:ff:eb:13:e8:da:
                    96:d3:ae:21:3a:b4:4e:4d:c2:f4:9b:3a:10:e3:a5:
                    31:cf:e4:b2:92:f6:77:95:07:23:b3:cc:c3:9b:74:
                    81:8b:bf:de:4e:b6:b5:ca:e7:cc:5d:5f:e0:38:65:
                    5a:65:98:03:bc:4d:36:15:37:ae:de:e0:ce:d5:d6:
                    16:58:a1:f1:32:d8:71:61:41:47:9a:70:71:ac:85:
                    a3:99:cb:71:05:0d:86:0c:19:f1:c8:4a:d6:be:38:
                    ed:15:7e:31:18:fa:d0:fa:ba:62:a0:60:42:10:e7:
                    ae:25:86:43:67:ba:3b:8e:31:b2:79:c9:f3:7e:c6:
                    53:7c:2b:d9:fb:cf:74:02:ee:36:d7:42:98:5f:e3:
                    55:95:ef:bc:6a:52:9e:b5:f7:b0:db:5b:30:8e:67:
                    28:42:4d:0d:d2:f7:5f:4e:67:a4:9a:e3:3a:eb:bd:
                    4e:e4:77:92:65:09:e6:3a:30:62:bb:8b:53:5b:21:
                    5f:08:85:bc:f6:46:c7:a8:53:a9:c8:af:16:98:34:
                    53:00:9f:d4:dd:4e:a7:73:c9:20:8f:88:ea:cd:8b:
                    ce:d2:2a:d9:91:e5:11:df:5c:da:b3:96:04:a2:be:
                    51:9e:42:3f:66:28:1a:21:de:6c:40:fb:67:c2:eb:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:19:32:B9:68:3E:4C:07:F6:A5:86:8A:1A:FC:AE:00:92:D0:8A:C9
            X509v3 Authority Key Identifier:
                keyid:96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e7:b7:94:e8:26:7f:d4:d9:de:35:8d:32:bf:71:b2:93:1f:
         72:33:92:a0:64:55:a8:87:8f:bf:52:fc:40:37:85:14:4b:c8:
         19:56:ac:ab:f2:08:6b:c3:28:93:bb:05:38:27:b6:21:f6:dd:
         7f:33:9d:a1:10:d7:61:a5:5f:21:e1:01:d3:41:ec:2b:95:b1:
         96:b9:40:f1:ce:a5:89:94:23:a9:37:97:c7:3d:14:9d:62:70:
         80:65:86:4b:00:6c:4b:6c:6a:6b:cf:39:be:9f:c6:5a:d4:68:
         b4:c6:ac:e7:06:8d:74:97:f2:a7:0c:4e:b5:5f:10:a0:d8:87:
         e4:96:a2:8f:1d:cb:af:85:c4:67:67:85:32:52:26:e6:bd:37:
         23:b5:cd:88:72:74:13:36:9e:53:b6:9e:b4:18:a8:61:47:01:
         da:f8:51:6b:18:b6:95:d7:b6:3a:fc:d5:2e:14:f6:53:8f:48:
         cb:fe:aa:19:d1:1f:f2:d4:86:db:c3:84:de:02:3f:1a:a8:57:
         06:a0:05:01:8c:88:dc:61:81:89:f0:82:3e:bd:f5:72:7b:b4:
         60:c9:fb:f3:cd:12:38:cd:f8:74:62:58:17:ec:fe:3a:b7:ad:
         77:db:c0:e0:31:ed:5d:91:74:58:bf:9f:4c:69:56:0b:05:4d:
         a7:a2:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:55 2026 by rpki-client