Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa
File:                     3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (raw, json)
Hash identifier:          fRp9hKSeiIMGeJ+MieNF5m7UkyEfR2UYlACEnVASLW0=
Subject key identifier:   20:7F:55:84:83:22:AC:3E:70:4C:A3:65:72:AD:6F:B7:2A:10:82:AE
Certificate issuer:       /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial:       76E89EAC4F010CA4D7B34CB157E8BAD42F11E118
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa
Signing time:             Sun 03 May 2026 02:59:33 +0000
ROA not before:           Sun 03 May 2026 02:54:33 +0000
ROA not after:            Sun 02 May 2027 02:59:33 +0000
asID:                     142360
IP address blocks:        103.247.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
                          rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e8:9e:ac:4f:01:0c:a4:d7:b3:4c:b1:57:e8:ba:d4:2f:11:e1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
        Validity
            Not Before: May  3 02:54:33 2026 GMT
            Not After : May  2 02:59:33 2027 GMT
        Subject: CN=207F55848322AC3E704CA36572AD6FB72A1082AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:ab:a0:6f:d0:93:ae:de:79:03:10:e1:e4:
                    29:3c:8a:3e:e0:2d:2a:fe:74:b9:47:bc:24:17:80:
                    a5:e4:a7:79:90:80:21:50:8d:f4:b2:2d:86:21:75:
                    89:3d:bb:6b:d2:9d:81:6b:0e:5c:e3:5b:60:9e:54:
                    f3:ed:24:cf:a4:b2:72:18:2d:55:ce:3f:a1:d2:d9:
                    84:e1:e9:1d:d2:77:66:0e:c7:b3:82:36:5d:89:eb:
                    5b:68:07:54:1b:0d:56:0f:e4:f2:a2:37:04:be:8a:
                    e7:b8:c2:f4:9d:cd:c8:93:a1:60:c8:74:e1:fc:cc:
                    06:4b:b9:dd:c9:d2:b7:7e:e0:ef:83:f3:32:4a:6c:
                    7e:7b:8d:fc:b1:93:3a:c5:f5:c5:74:49:f1:14:11:
                    2f:bd:85:69:93:b5:bb:6d:d4:7a:11:50:62:e5:24:
                    63:8a:8f:5b:e2:c4:93:f0:87:17:56:8b:65:5b:56:
                    c8:bd:d2:e7:cd:29:2e:34:91:1a:37:ae:6c:a6:91:
                    5e:35:bd:0b:de:e3:0f:73:da:03:22:e2:b2:9a:2c:
                    ed:c2:fc:5c:54:17:a0:a1:99:29:6f:68:ed:0c:da:
                    af:35:80:65:d7:cb:0a:43:11:1a:f5:0d:04:c0:77:
                    f6:fd:33:cd:37:c6:60:54:36:93:54:ba:51:80:df:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7F:55:84:83:22:AC:3E:70:4C:A3:65:72:AD:6F:B7:2A:10:82:AE
            X509v3 Authority Key Identifier:
                keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:f7:8c:df:c0:a8:4a:64:0e:90:a9:a8:f3:2d:7d:8f:30:
         fe:e0:69:74:64:b5:8e:98:e1:08:0f:5b:85:a0:86:73:54:53:
         6c:fe:07:6c:86:10:dd:7e:aa:e5:1b:ee:e2:fd:00:95:04:43:
         4c:04:56:a6:bb:eb:71:97:f3:83:f7:29:6d:29:ed:d0:e8:4d:
         02:66:53:99:71:89:67:98:5a:5a:64:0e:f2:f1:6f:5d:89:7e:
         ff:33:22:bf:5a:e7:c1:c0:13:e8:91:71:b5:15:37:ce:56:96:
         51:80:04:e0:a3:ee:ad:96:d4:93:79:7d:65:b5:f3:44:f3:24:
         2b:a3:b5:9e:49:c5:29:7e:aa:fd:28:3f:a3:f9:29:d0:0e:b0:
         aa:7d:7f:d2:b5:48:f0:b7:f9:38:e1:71:60:11:cb:2a:77:d9:
         b4:5c:cb:60:69:3d:b5:e1:91:c2:39:05:a1:56:e0:97:28:bd:
         82:f1:13:85:ec:3b:0c:d9:25:96:d1:e3:d1:11:4b:a2:54:5b:
         0e:bd:43:5d:01:e9:94:3a:55:13:13:08:6c:a0:01:82:07:cb:
         0f:3f:6d:8e:cf:78:97:27:6b:8e:db:40:52:5e:0d:f6:ce:1d:
         9f:aa:b3:7e:dd:44:1e:a9:b9:61:25:a8:3c:ce:6b:0b:2d:2f:
         9d:69:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:22:50 2026 by rpki-client