Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa
File:                     3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          LH3jAEJt2gXKsQX/zjbaNzaUSZMXYsu7qVfx3W9RCWQ=
Subject key identifier:   06:09:52:58:20:9C:E6:04:5F:F9:20:5B:AD:30:50:F5:C6:AA:13:B6
Certificate issuer:       /CN=6259AAB8ACC12928C43A617CC9988F166C9AF024
Certificate serial:       28E0F90E1F0D50920EFD4483F9E66CEF8AE27F47
Authority key identifier: 62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa
Signing time:             Sun 03 May 2026 02:53:22 +0000
ROA not before:           Sun 03 May 2026 02:48:22 +0000
ROA not after:            Sun 02 May 2027 02:53:22 +0000
asID:                     133800
IP address blocks:        103.126.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl
                          rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e0:f9:0e:1f:0d:50:92:0e:fd:44:83:f9:e6:6c:ef:8a:e2:7f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6259AAB8ACC12928C43A617CC9988F166C9AF024
        Validity
            Not Before: May  3 02:48:22 2026 GMT
            Not After : May  2 02:53:22 2027 GMT
        Subject: CN=06095258209CE6045FF9205BAD3050F5C6AA13B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:b9:19:8c:ad:38:1d:3d:8e:0e:62:c0:13:
                    63:22:65:52:34:f8:81:72:13:b6:06:e9:f1:a8:76:
                    f9:3e:87:94:7d:cd:82:ca:ae:ec:63:ad:7a:8d:91:
                    e5:9e:5e:3d:c7:86:8e:9c:17:12:27:4f:84:45:e9:
                    05:51:7d:dd:54:5a:2c:9a:a0:cf:63:cd:20:1f:c3:
                    ee:43:cc:39:42:a1:9b:34:01:80:19:e1:9a:ea:94:
                    5d:ed:bd:a7:a4:9a:9c:80:be:ac:d6:d6:70:67:5c:
                    15:80:1f:0f:64:d2:c3:b5:90:1a:49:b7:16:eb:b8:
                    48:31:b3:75:10:2f:c9:d6:53:da:e8:9a:40:3c:25:
                    21:f2:35:4c:b1:b5:cb:4b:46:25:4f:8b:91:a7:9d:
                    c7:a6:f9:a5:fd:f7:4d:a3:7e:38:f0:8a:16:9b:e9:
                    2f:19:9a:86:e9:57:6e:fb:97:7e:7e:86:8f:02:72:
                    ed:c8:3b:31:63:85:74:6b:2a:33:db:8f:d2:a5:d1:
                    f7:43:fd:9f:c6:35:8e:72:58:78:82:3d:c2:51:58:
                    37:51:65:72:2e:5f:9a:d6:62:a7:cb:f8:9f:09:04:
                    f1:04:e1:a0:c1:91:13:68:f2:ce:ae:f7:84:8d:3d:
                    c4:bc:19:26:d9:6e:95:f9:a1:66:7b:8b:40:d6:92:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:09:52:58:20:9C:E6:04:5F:F9:20:5B:AD:30:50:F5:C6:AA:13:B6
            X509v3 Authority Key Identifier:
                keyid:62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:c1:41:63:0e:b7:ff:69:85:71:09:fb:59:89:a5:81:9a:0c:
         19:fa:a4:d7:e3:2e:08:c5:b8:f2:91:f9:bb:2a:e3:8a:d2:a9:
         8e:b7:f0:76:8e:c1:cf:14:e9:d6:7a:e0:93:2d:09:dd:7e:84:
         d0:e3:49:cf:ce:ae:a3:54:29:d7:36:64:8c:8d:1f:7d:4f:ea:
         e0:4f:7c:0c:22:fa:2c:9a:6d:e5:20:71:e7:c8:8a:09:92:a1:
         45:d6:98:f7:8f:b2:8b:cd:a1:0d:4d:bb:d4:2a:20:4d:75:d5:
         78:e4:0a:6d:15:d9:da:68:8f:04:c9:82:4b:ce:d5:91:42:98:
         b0:f8:41:f4:16:56:1a:01:e2:a8:90:34:b8:30:d4:3d:37:a1:
         2a:bc:df:98:38:e2:3b:11:61:a8:e8:c7:a3:ec:25:03:a8:e5:
         d2:ce:20:7f:5d:cc:a7:2a:d9:0b:20:93:b4:aa:ef:43:f7:cb:
         98:0f:d7:76:cf:cc:78:4b:55:ca:86:0c:ff:38:89:b9:ef:66:
         f1:1e:c8:70:ad:16:00:76:5e:5c:31:50:cf:70:a2:e5:53:64:
         39:42:88:d8:b7:59:83:82:01:c9:f2:23:21:17:9a:2b:81:55:
         00:4f:3e:de:ea:14:ae:34:7a:35:86:78:3f:8c:51:7b:79:cd:
         02:65:d2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:04 2026 by rpki-client