Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=
Subject key identifier:   F6:89:EB:8D:B4:BD:53:FA:B3:87:E1:16:0A:DD:E9:61:1E:F1:59:E9
Certificate issuer:       /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B
Certificate serial:       56F26273A25539C381311D172D23C397D04AC313
Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:54:19 +0000
ROA not before:           Sun 03 May 2026 02:49:19 +0000
ROA not after:            Sun 02 May 2027 02:54:19 +0000
asID:                     135478
IP address blocks:        103.121.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl
                          rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f2:62:73:a2:55:39:c3:81:31:1d:17:2d:23:c3:97:d0:4a:c3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B
        Validity
            Not Before: May  3 02:49:19 2026 GMT
            Not After : May  2 02:54:19 2027 GMT
        Subject: CN=F689EB8DB4BD53FAB387E1160ADDE9611EF159E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:bf:96:5c:bf:4d:22:3b:e3:f4:93:3c:72:
                    29:2a:a3:c3:53:6b:0f:84:42:ed:c7:d6:14:c6:44:
                    e4:57:45:30:6a:e8:2b:db:1c:a9:a4:de:64:48:48:
                    9d:88:71:bb:48:05:a5:58:18:84:df:df:da:f2:36:
                    0e:92:28:91:1e:fd:62:09:df:4d:96:06:98:d8:f3:
                    1a:6d:0d:d4:28:74:8f:a2:f9:ae:5d:37:1b:8b:4a:
                    b3:82:ad:e7:f5:94:8d:ae:e0:91:78:4a:8a:45:11:
                    90:37:42:28:99:56:b3:31:6c:6a:5c:bd:da:40:32:
                    04:ca:14:2e:ec:88:e7:11:33:4a:f5:80:96:05:d9:
                    40:c0:29:e5:36:e6:c6:c7:b1:0e:ba:62:01:e2:6f:
                    98:c9:38:fc:a5:07:36:4e:da:4c:1b:4e:00:46:0e:
                    ab:55:aa:36:87:ce:0a:10:37:a3:63:89:ff:48:8c:
                    eb:9f:ad:7a:7e:26:f2:2e:e2:7e:f0:9c:80:21:4a:
                    e5:2a:cc:61:65:3d:49:41:ab:fa:bc:a6:f3:0e:0f:
                    1a:b5:82:07:8e:b2:3a:23:2b:86:92:1d:21:31:42:
                    e8:54:71:e9:13:1a:7f:09:6e:b0:41:32:3b:a4:fa:
                    4e:14:41:5e:08:3b:8c:7a:b7:25:47:07:bc:e7:7c:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:89:EB:8D:B4:BD:53:FA:B3:87:E1:16:0A:DD:E9:61:1E:F1:59:E9
            X509v3 Authority Key Identifier:
                keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:cc:d9:10:ad:35:67:35:bc:e5:1d:3f:ac:ca:d8:b2:e2:2e:
         0c:18:2b:dd:70:a8:5e:13:0e:35:f1:a9:78:d7:44:22:7d:6e:
         b6:8b:61:63:8d:b4:09:a9:44:5c:86:cd:a8:28:f6:86:af:dc:
         95:9b:73:f3:2a:0f:43:da:63:68:1f:b8:cc:7c:46:c7:d8:05:
         7d:7b:a1:f9:b9:ef:b6:eb:94:88:dd:60:67:4e:b5:88:d0:a7:
         5d:12:85:51:4f:ea:a8:14:ce:f6:83:71:15:0e:af:85:d2:47:
         8a:4b:3e:86:9c:15:89:5a:15:38:e0:14:cb:73:78:d2:fd:a2:
         71:6d:10:0e:09:eb:a0:6a:dc:c1:bd:80:79:93:3e:50:9b:ad:
         c6:fb:e1:f7:fe:8d:c0:67:16:bd:e0:89:5c:c4:94:23:11:52:
         dd:10:dd:f2:8c:f2:b5:11:50:6d:37:bf:2a:b6:6c:b2:88:a8:
         3e:2f:68:82:d3:37:1d:84:8f:7c:a4:75:19:ff:3d:ce:cd:6a:
         bc:aa:6f:f5:aa:50:0e:80:8d:d8:d4:56:bd:b0:07:91:39:ad:
         d3:92:e0:95:95:57:74:43:a6:d2:60:83:8e:60:b3:4a:40:c2:
         43:95:69:b4:37:3b:18:5b:e7:c6:52:b8:cd:90:b1:68:ff:74:
         2d:cd:6f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:50 2026 by rpki-client