Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa
File:                     3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (raw, json)
Hash identifier:          b4ggDV/ZNf+4NQdflqYvb28UdjLCoRXT/ZsbTg3v/fE=
Subject key identifier:   60:88:FF:1E:B8:C5:F2:BB:DE:37:7C:3D:30:2D:19:1B:1D:4F:4D:A1
Certificate issuer:       /CN=6259AAB8ACC12928C43A617CC9988F166C9AF024
Certificate serial:       53B14A838BEF4D43C86AA7C2A967ED53F09FFC08
Authority key identifier: 62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa
Signing time:             Sun 03 May 2026 02:53:22 +0000
ROA not before:           Sun 03 May 2026 02:48:22 +0000
ROA not after:            Sun 02 May 2027 02:53:22 +0000
asID:                     138116
IP address blocks:        103.126.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl
                          rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b1:4a:83:8b:ef:4d:43:c8:6a:a7:c2:a9:67:ed:53:f0:9f:fc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6259AAB8ACC12928C43A617CC9988F166C9AF024
        Validity
            Not Before: May  3 02:48:22 2026 GMT
            Not After : May  2 02:53:22 2027 GMT
        Subject: CN=6088FF1EB8C5F2BBDE377C3D302D191B1D4F4DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:79:eb:44:4a:48:d8:fd:73:ee:23:af:91:
                    9b:d4:4b:2b:15:82:05:42:4a:43:a3:cc:2f:c0:ef:
                    d1:4c:13:de:0f:2e:28:94:af:30:e6:05:b3:cb:89:
                    9b:4f:18:ef:6d:d2:26:a8:b9:73:64:c7:d1:2b:4e:
                    96:ff:c8:18:41:91:81:47:1b:7f:23:1c:ed:89:19:
                    1c:34:33:0f:8e:a6:ba:23:bf:f8:14:b7:ad:ac:90:
                    bc:07:0a:18:78:8e:54:74:b3:26:dd:78:c7:93:65:
                    e0:79:73:0d:73:7a:99:e3:7f:89:2c:e0:0b:13:61:
                    d5:8e:26:4b:c9:f0:fd:cb:4a:df:95:21:d2:62:84:
                    f4:d1:6f:91:d5:3c:dd:fe:9d:2e:cc:43:f1:ae:da:
                    2f:46:ad:da:df:f3:53:39:7d:44:b7:53:eb:32:e8:
                    9a:78:4d:de:18:e9:37:96:7d:dd:8e:dd:ab:87:41:
                    a7:0a:04:0c:8a:02:05:27:5f:89:15:46:d8:0f:2d:
                    c9:42:8f:0b:56:6e:52:8f:55:ea:54:04:b5:e5:1d:
                    fd:b7:b9:f7:04:99:0b:ef:7c:84:9d:92:61:3a:d3:
                    92:52:c1:a9:13:74:f9:9f:7a:fb:44:d4:48:70:5d:
                    57:4e:e6:f4:29:5b:9e:90:b7:21:e4:f5:0a:fa:32:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:88:FF:1E:B8:C5:F2:BB:DE:37:7C:3D:30:2D:19:1B:1D:4F:4D:A1
            X509v3 Authority Key Identifier:
                keyid:62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:8b:e9:64:16:17:a1:ef:2b:fa:68:d2:96:72:8d:af:a5:c1:
         03:4e:6a:b3:2a:06:3f:74:a4:49:7c:70:e2:fa:82:6c:06:17:
         3d:f5:6d:31:82:2d:c8:22:54:b1:d5:04:2f:de:cf:20:00:5f:
         4c:22:28:35:dc:01:35:02:0e:61:2e:3b:b6:c1:fe:92:ca:4c:
         63:d9:ba:91:5a:b0:5c:c4:99:c7:cc:60:f1:e7:d6:30:92:fd:
         d6:1b:7c:df:38:9c:05:10:98:c6:2c:b6:d6:a7:9f:84:ad:b8:
         8d:db:63:49:c7:ed:f2:93:26:67:55:7f:29:5e:47:4d:15:5b:
         b9:f6:94:af:18:a3:8c:a1:2d:70:b7:6b:23:66:da:0e:32:f2:
         75:94:97:d8:f9:e4:fa:48:76:67:42:d8:7d:4d:02:c0:b8:f9:
         f6:e2:f0:de:da:8f:4f:49:a6:5c:c7:c9:06:a3:88:6e:dd:e3:
         ad:40:53:21:4b:ba:a3:1e:0e:49:19:e5:23:93:35:ec:06:9f:
         e6:c4:60:18:8d:39:98:5b:f6:4b:6f:56:35:15:cc:ed:b1:fd:
         4c:03:60:c5:5e:c6:8d:e5:27:cf:25:87:ed:e6:ba:d5:f0:a2:
         55:5b:cb:88:1d:6e:b0:e4:ee:04:3d:4f:f5:6c:bc:2f:33:3d:
         88:af:6f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:14 2026 by rpki-client