Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa
File:                     3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (raw, json)
Hash identifier:          xzNU/vlOf3TfA9hg5oEM5XxH528y493JULwxnNfsViI=
Subject key identifier:   4D:1F:67:2C:5C:94:49:4B:C6:60:B1:50:CD:73:66:DD:D3:76:19:21
Certificate issuer:       /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9
Certificate serial:       1337351D0A148D343DA30CB9CCF38DA9E1803FC6
Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa
Signing time:             Sun 03 May 2026 02:57:11 +0000
ROA not before:           Sun 03 May 2026 02:52:11 +0000
ROA not after:            Sun 02 May 2027 02:57:11 +0000
asID:                     138876
IP address blocks:        103.140.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl
                          rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:37:35:1d:0a:14:8d:34:3d:a3:0c:b9:cc:f3:8d:a9:e1:80:3f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9
        Validity
            Not Before: May  3 02:52:11 2026 GMT
            Not After : May  2 02:57:11 2027 GMT
        Subject: CN=4D1F672C5C94494BC660B150CD7366DDD3761921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:5c:87:19:93:c5:0e:a0:60:f1:bb:7c:08:
                    4b:92:fd:82:cb:9f:1a:de:06:ae:db:8b:c0:45:00:
                    d2:23:ce:c2:96:78:c2:78:74:70:68:2b:b8:66:ad:
                    80:4a:33:31:c3:f6:e5:0f:3b:0f:46:8d:d3:7f:84:
                    e9:c2:d6:70:8a:8e:f2:e2:a2:b7:49:8b:a9:34:b0:
                    69:e3:ec:88:77:e1:cf:ae:9f:94:a0:25:f3:93:40:
                    bf:54:8d:49:42:18:ab:4b:13:4d:ef:24:d7:03:4e:
                    7c:04:f9:64:06:51:d9:83:0c:86:57:64:3c:32:7e:
                    62:18:75:8e:af:ba:65:8f:81:76:ed:b6:c4:a0:12:
                    99:76:2e:6d:5c:77:b0:88:75:1c:68:34:3f:16:df:
                    e1:88:ea:f1:4e:10:90:92:9f:79:b4:64:da:a7:2d:
                    91:5e:4d:25:b0:03:53:8f:c5:66:d5:d2:0f:20:a0:
                    e1:29:3e:78:bb:7e:3c:9a:a4:c1:7d:42:f8:b0:86:
                    e4:19:a4:41:15:45:cf:ae:8b:c4:5d:2d:a7:03:ea:
                    01:41:ed:4f:36:d5:12:c8:b0:32:ee:7d:62:f9:9d:
                    29:65:05:82:25:34:ed:f3:84:df:fe:5f:70:2e:ff:
                    b9:e2:b8:73:e2:40:8d:68:a1:39:8d:fa:70:d8:f2:
                    b7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1F:67:2C:5C:94:49:4B:C6:60:B1:50:CD:73:66:DD:D3:76:19:21
            X509v3 Authority Key Identifier:
                keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:91:62:5a:8d:f5:0b:12:16:05:29:17:92:eb:b3:86:e6:04:
         5e:04:71:d1:73:39:c3:e4:93:0f:35:5a:d0:49:ef:a2:d4:f6:
         59:54:a6:6f:78:24:ff:f1:56:88:a6:23:02:0a:11:d6:06:a8:
         4c:b5:b4:de:73:25:ea:a7:08:fd:79:78:9d:1d:84:76:ba:33:
         34:45:87:ff:6f:a2:5b:a8:91:a1:4c:85:21:66:85:2e:b5:52:
         a8:e3:a3:20:b9:a1:45:ce:77:dc:c6:3f:f8:78:2d:a6:27:2c:
         e0:23:92:55:c4:02:ff:92:4d:8b:6a:5e:6f:7f:67:4b:ca:e3:
         8c:91:9a:ad:0f:db:ea:81:f8:81:f7:00:31:45:20:b1:91:f9:
         5a:53:1c:0d:ca:56:7f:e2:1d:84:1c:d2:60:69:a1:d1:7e:55:
         09:19:b7:7c:20:42:f2:08:18:5c:ea:ce:a0:dc:1b:ce:65:05:
         be:07:ad:a7:a2:a7:18:90:3f:d2:2f:53:42:44:d9:4e:52:80:
         ca:1d:ca:a4:f9:3d:40:e5:e6:37:c7:12:6b:3e:95:73:d6:25:
         0f:65:a3:b4:af:d3:17:6c:f7:6a:9f:b7:ff:8b:c9:fc:21:7c:
         12:0d:bb:e0:19:24:b9:ce:54:bc:b8:91:8e:a1:ca:32:44:02:
         f3:86:cb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:59 2026 by rpki-client