Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa
File:                     3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (raw, json)
Hash identifier:          djEgtSTkE/m5IayWnkoTKB0EhOrsppytUQzWTVEnG/A=
Subject key identifier:   F5:29:41:74:DF:A0:CB:87:F1:0B:6A:CC:FE:C1:E3:0E:C0:0B:AF:53
Certificate issuer:       /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Certificate serial:       496EB7C25C647B1FD53D66842859878E7AA94DC8
Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa
Signing time:             Sun 03 May 2026 03:00:26 +0000
ROA not before:           Sun 03 May 2026 02:55:26 +0000
ROA not after:            Sun 02 May 2027 03:00:26 +0000
asID:                     138884
IP address blocks:        103.138.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
                          rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6e:b7:c2:5c:64:7b:1f:d5:3d:66:84:28:59:87:8e:7a:a9:4d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
        Validity
            Not Before: May  3 02:55:26 2026 GMT
            Not After : May  2 03:00:26 2027 GMT
        Subject: CN=F5294174DFA0CB87F10B6ACCFEC1E30EC00BAF53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:93:58:0a:57:e4:c3:70:24:df:87:35:8e:
                    b3:3f:68:30:4c:6e:ee:46:cc:38:de:4c:13:04:75:
                    f2:76:7c:2a:52:26:d4:1f:bc:be:de:cd:17:69:3f:
                    f7:09:9d:42:5b:89:4d:e7:b1:3d:c7:b2:6d:92:9f:
                    eb:b0:75:5c:71:b8:b8:6a:1a:4a:e0:c9:82:7e:6f:
                    b4:9c:6e:01:18:75:56:df:40:c6:38:b5:a5:cf:b5:
                    02:54:e7:59:88:48:53:df:bf:15:fe:37:3c:f7:80:
                    d9:11:86:94:42:95:38:03:9a:f8:1c:88:41:7a:d8:
                    12:1a:a4:17:bb:f7:47:31:7d:4d:5e:8f:de:15:03:
                    f1:ca:33:38:a1:40:fc:76:ed:fd:18:1e:b2:42:18:
                    ac:1b:05:e1:ec:1c:f0:43:4b:5b:f8:f4:8f:3d:65:
                    a2:d0:8b:ab:be:70:47:fb:d0:3b:de:39:12:97:69:
                    5c:6b:16:9f:fb:53:70:56:c7:84:5e:3c:99:61:38:
                    4d:a4:0f:84:85:fa:b0:8b:fe:8d:b9:2b:33:45:de:
                    76:a3:5a:a4:1a:99:1d:66:57:b3:60:cf:5a:e2:fc:
                    dc:74:89:9c:e1:f0:4c:d1:f7:6b:72:9d:98:7a:2b:
                    b6:e5:88:d3:a1:5d:59:08:57:04:96:3b:c3:b5:ae:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:29:41:74:DF:A0:CB:87:F1:0B:6A:CC:FE:C1:E3:0E:C0:0B:AF:53
            X509v3 Authority Key Identifier:
                keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a3:28:4a:e5:94:74:44:2a:88:75:d7:db:9f:e1:d2:e0:aa:
         7d:66:8e:ac:81:6f:6a:51:4d:38:ae:0e:ab:2c:b1:5b:60:f4:
         66:a8:1c:af:10:4c:ba:a7:d8:28:c1:aa:67:61:f4:5c:8e:6f:
         41:31:92:fa:05:c9:10:65:c1:32:0a:1a:58:06:fb:1a:db:27:
         81:e0:7a:56:47:b2:73:56:23:1f:fa:26:03:46:51:33:30:e4:
         4c:bc:18:aa:eb:5f:4b:f2:d9:e3:a7:02:4a:12:88:55:2f:dd:
         8e:e2:2a:4c:99:f1:4e:67:7e:d2:d6:5e:c9:45:0c:99:ca:7e:
         f9:19:54:ee:e4:f3:26:49:da:78:22:01:e9:9b:bb:01:e1:54:
         bf:77:b0:63:dd:ae:4f:8e:35:54:b4:72:7e:1d:f4:7b:7e:58:
         15:a0:7a:58:29:b6:75:88:bb:22:cb:d8:c3:d8:32:a4:b2:b2:
         3d:92:cc:ba:f6:7a:ae:50:e5:ce:7a:c4:30:eb:cf:41:30:e2:
         aa:14:5f:a2:87:de:eb:e2:af:1d:8f:09:82:ea:7f:57:c7:b6:
         03:30:39:92:f9:10:33:cd:38:ab:24:a7:f0:61:0c:08:be:2b:
         75:2a:42:2e:0c:8f:06:9f:dc:b0:53:5b:83:e0:79:fc:f7:c0:
         4c:54:4d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:47 2026 by rpki-client