Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
File:                     3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (raw, json)
Hash identifier:          OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=
Subject key identifier:   F8:5C:7E:AD:15:A9:57:51:ED:D4:56:7D:95:3E:47:89:87:28:AA:E0
Certificate issuer:       /CN=68ECB00B63436E13214F12C7732F716D44E5E72D
Certificate serial:       37F236F5C693A892484B6ACAFECC83913E76AD67
Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
Signing time:             Sun 03 May 2026 02:56:22 +0000
ROA not before:           Sun 03 May 2026 02:51:22 +0000
ROA not after:            Sun 02 May 2027 02:56:22 +0000
asID:                     150249
IP address blocks:        103.87.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl
                          rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f2:36:f5:c6:93:a8:92:48:4b:6a:ca:fe:cc:83:91:3e:76:ad:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D
        Validity
            Not Before: May  3 02:51:22 2026 GMT
            Not After : May  2 02:56:22 2027 GMT
        Subject: CN=F85C7EAD15A95751EDD4567D953E47898728AAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:17:c8:32:d0:34:9b:a1:3d:fd:f1:38:42:
                    c8:5b:e1:ec:28:49:3a:e3:15:05:67:b8:fb:31:b2:
                    0b:29:18:52:5d:2c:ce:24:68:b6:ff:1b:dc:67:c3:
                    a9:c3:c6:35:ea:67:0f:09:6c:f2:d9:55:f8:87:be:
                    65:10:17:44:99:f9:53:71:9b:aa:f8:d9:c9:ea:f0:
                    95:c2:16:a8:df:a1:52:18:15:a8:bc:01:a5:a7:89:
                    a6:ec:9a:1e:fd:52:e9:f3:a9:46:42:4a:a9:33:bc:
                    b6:6f:a3:ad:ef:5c:af:58:d6:81:07:b2:99:3f:c8:
                    e4:f5:a4:8d:3b:b1:75:0b:b1:0c:ce:28:3f:41:50:
                    a8:73:a1:ef:ec:ed:17:32:e5:1e:72:63:08:7d:35:
                    57:29:f8:ff:22:ef:91:a9:51:a6:76:9c:bf:1b:3c:
                    71:0f:ca:f6:be:5c:61:62:86:53:c0:a1:0c:5d:c4:
                    62:eb:9d:20:5f:00:56:22:01:e5:95:bc:bb:03:43:
                    2e:e2:21:f6:18:d0:a3:b4:b5:fa:89:75:f2:c4:7e:
                    d8:bc:89:d3:c3:96:a0:29:11:2a:11:52:b8:13:c5:
                    96:ef:e8:67:12:03:cd:ef:ea:b3:dc:98:94:46:72:
                    45:98:b1:3e:36:d9:28:6d:2e:f3:f4:76:49:d3:3b:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5C:7E:AD:15:A9:57:51:ED:D4:56:7D:95:3E:47:89:87:28:AA:E0
            X509v3 Authority Key Identifier:
                keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:a3:78:ad:5b:dd:db:95:98:f3:42:c9:c7:45:eb:52:09:86:
         59:8e:15:66:eb:82:60:57:46:4f:fb:43:45:34:f4:f3:17:3c:
         26:29:bb:b1:9e:9b:05:33:e6:3d:b0:98:5b:c7:6b:4f:51:77:
         66:76:d1:7d:51:b9:20:94:b3:d6:c8:49:f5:be:dc:23:10:30:
         7d:18:5b:66:12:f7:8e:cf:79:5d:07:74:36:71:30:1e:b1:9b:
         11:7d:db:53:7a:05:2d:04:64:3f:21:9a:4e:2a:df:26:9f:95:
         04:8b:b8:bf:a5:db:f4:dd:ed:a1:79:1a:cf:cf:95:f5:4b:fd:
         43:9a:26:a9:ac:9d:3a:6b:48:0b:3a:1d:a2:3b:af:91:a8:35:
         49:ae:e9:ae:14:e8:e7:6e:1d:2e:52:08:0b:e1:15:c4:3c:29:
         b8:1b:ee:f1:c1:fa:bc:ed:10:29:ae:73:c3:c3:b2:06:a1:e1:
         83:2f:3f:67:53:87:b5:f6:c2:39:7e:1d:40:01:70:48:66:02:
         bf:92:bd:73:af:55:fb:f2:7e:a7:1c:4d:a3:fa:8b:62:35:79:
         15:f4:5e:03:8d:9a:f3:cb:c6:7e:1c:8c:b2:6f:8c:1d:8d:04:
         a4:f0:6d:bc:2e:1f:e2:81:a0:01:58:b6:2a:c5:71:d9:9f:28:
         7a:52:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:54 2026 by rpki-client