Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/3130332e3132322e322e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          Od8V+mQHuU8EzMntRRnJoN07uXL+m/YOXljtK8BGjHw=
Subject key identifier:   AC:DF:C7:D8:4A:7A:95:93:78:4E:36:79:D8:99:BC:3C:F9:1C:AE:55
Certificate issuer:       /CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3
Certificate serial:       0F501F4EB8029452A656FEB3A0B938A55EB86290
Authority key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/3130332e3132322e322e302f32342d3234203d3e20313430333839.roa
Signing time:             Sun 03 May 2026 03:00:30 +0000
ROA not before:           Sun 03 May 2026 02:55:30 +0000
ROA not after:            Sun 02 May 2027 03:00:30 +0000
asID:                     140389
IP address blocks:        103.122.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl
                          rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:50:1f:4e:b8:02:94:52:a6:56:fe:b3:a0:b9:38:a5:5e:b8:62:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3
        Validity
            Not Before: May  3 02:55:30 2026 GMT
            Not After : May  2 03:00:30 2027 GMT
        Subject: CN=ACDFC7D84A7A9593784E3679D899BC3CF91CAE55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:3c:2a:eb:6d:ce:d6:71:dc:39:20:2d:62:
                    7c:32:1d:ad:09:78:73:20:f1:4a:32:5c:3a:6f:f7:
                    a2:e4:56:5b:95:45:91:13:d5:16:97:52:a8:3e:ee:
                    3f:cd:71:ca:9f:16:0a:7f:8c:dd:3b:5a:45:52:b2:
                    d6:b7:4f:7c:fb:8c:ba:63:f6:8b:72:2d:3b:ce:78:
                    ad:f2:68:44:13:63:6f:86:cc:8f:b0:b8:0c:da:47:
                    0a:c2:8f:6c:2f:f3:c2:61:7f:29:8a:a2:a2:12:8d:
                    df:f8:e0:02:78:9d:29:8a:75:32:a8:ae:c7:fe:ae:
                    e4:d6:b6:b0:4b:92:d2:81:bb:d9:37:6d:91:1b:31:
                    19:69:35:7a:0b:a5:fc:39:dc:8a:e0:68:31:e2:cd:
                    7d:3c:8c:56:f8:07:6f:ff:7f:9e:25:e0:26:bf:3b:
                    fe:8d:70:16:fc:56:97:0f:c3:60:82:e7:3d:1c:e9:
                    bb:a7:54:0e:36:61:7e:e0:e4:ae:e1:63:51:fa:69:
                    1c:88:20:cf:c5:ce:ad:82:75:7f:b4:e5:59:0f:04:
                    37:8e:87:80:aa:49:79:b8:8d:73:91:15:1e:60:bc:
                    30:0b:10:d1:9d:37:2f:49:29:16:53:64:b2:aa:9b:
                    b4:e7:68:7f:dd:99:50:a9:e0:84:64:0b:b1:19:d6:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DF:C7:D8:4A:7A:95:93:78:4E:36:79:D8:99:BC:3C:F9:1C:AE:55
            X509v3 Authority Key Identifier:
                keyid:BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/3130332e3132322e322e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:42:61:53:94:51:7b:ff:d2:7d:4e:6a:ba:06:e1:b7:cf:85:
         ca:a6:7f:69:56:f3:61:6f:40:7f:b1:af:2d:c0:dd:73:c7:7b:
         45:59:05:4f:a6:47:6c:2c:e0:8a:0e:8c:61:8c:4f:4f:c6:f9:
         5c:ca:44:36:e8:fb:9b:0c:b1:ef:4b:3b:49:48:8e:ba:d2:98:
         d1:94:93:aa:f6:29:69:b1:7e:f4:65:0d:8f:c8:f1:83:b6:9c:
         58:62:0d:b3:be:4a:3e:e1:2f:11:2e:b9:83:78:74:7f:39:7d:
         60:4a:de:fc:e6:61:0f:7d:61:fc:4a:6e:f2:41:c7:c8:10:bd:
         e9:86:0d:2a:78:64:16:2f:bc:a4:2e:ae:25:53:85:e0:68:d7:
         7c:72:a1:3a:f4:87:2c:dc:43:00:6d:3e:f7:18:cb:20:4a:a8:
         88:21:cb:20:60:4f:f8:20:29:29:7d:c9:c1:13:80:a8:e0:aa:
         7f:5a:e1:43:e7:97:cc:80:06:bd:03:03:57:e2:bf:29:74:84:
         e7:04:0c:46:b1:da:32:59:ae:67:6d:a4:d0:a3:bc:35:1e:f5:
         8f:c8:c9:06:5e:37:ed:c1:f6:7f:8b:04:c1:09:0b:3e:bd:b1:
         7e:b6:dc:cc:c3:2b:c9:89:fe:b4:b4:a0:17:19:74:b5:23:d8:
         07:f4:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:02 2026 by rpki-client