Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa
File:                     3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (raw, json)
Hash identifier:          eZi9ISEjkgP+V5NS/n2oQzmQLoX5n67xR1RnUMkogyM=
Subject key identifier:   74:AA:9A:C6:52:10:E6:8F:81:A9:FE:DD:6A:A0:3D:C0:E4:75:72:06
Certificate issuer:       /CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
Certificate serial:       6344EABDB1F8F184E1E2C718E2D981E06653AF9E
Authority key identifier: EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa
Signing time:             Sun 03 May 2026 03:06:49 +0000
ROA not before:           Sun 03 May 2026 03:01:49 +0000
ROA not after:            Sun 02 May 2027 03:06:49 +0000
asID:                     139433
IP address blocks:        103.144.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl
                          rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:44:ea:bd:b1:f8:f1:84:e1:e2:c7:18:e2:d9:81:e0:66:53:af:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86
        Validity
            Not Before: May  3 03:01:49 2026 GMT
            Not After : May  2 03:06:49 2027 GMT
        Subject: CN=74AA9AC65210E68F81A9FEDD6AA03DC0E4757206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:8c:43:5d:e7:a9:18:1c:0e:19:ee:5a:4c:
                    90:95:9b:85:dd:95:80:fc:72:d6:64:1e:6d:ca:bc:
                    26:c0:41:74:a8:57:ed:d1:f8:0e:36:41:cd:49:0e:
                    0f:f6:62:c5:72:7c:3d:52:91:03:c5:17:b2:80:15:
                    04:33:a2:6a:fd:04:ca:b5:e4:aa:32:08:7e:48:03:
                    9f:83:b3:7b:54:e5:3d:2a:dc:4f:9d:27:dc:97:9d:
                    38:52:07:cf:4d:c2:c8:50:00:40:e0:f6:7c:fc:bb:
                    b1:8f:df:64:9e:62:d1:b5:62:af:c4:44:1c:37:ff:
                    bf:29:f3:0a:b0:45:50:4b:d1:b8:53:3b:d1:81:74:
                    47:73:6d:13:73:33:87:25:9d:c0:bf:21:76:67:19:
                    5d:4d:0c:2c:8b:e7:72:02:f8:21:a5:22:a8:6f:d0:
                    ef:3d:95:d7:bc:d8:a4:4c:0d:83:4f:4e:b8:ac:3d:
                    30:0e:2c:b2:9b:77:10:fc:f6:93:ee:9a:77:85:3e:
                    dc:10:1f:67:3f:3d:90:00:7f:1e:41:16:9e:85:3c:
                    25:11:ad:a5:04:35:dd:18:50:bd:f9:da:7a:2b:ac:
                    38:76:ea:a9:6c:ce:61:9f:2f:51:96:f0:04:ed:57:
                    cd:f2:67:55:d3:76:c1:df:27:b0:ca:8d:d6:d1:5a:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AA:9A:C6:52:10:E6:8F:81:A9:FE:DD:6A:A0:3D:C0:E4:75:72:06
            X509v3 Authority Key Identifier:
                keyid:EE:75:1C:DC:39:E4:73:04:C1:EE:51:ED:F5:BC:3F:DA:D0:F0:9B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE751CDC39E47304C1EE51EDF5BC3FDAD0F09B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c0:8e:20:eb:60:93:eb:6c:33:ba:dc:7f:9a:47:87:a9:6d:
         12:99:ac:4a:b3:ba:aa:9b:95:44:34:3b:d0:2a:d0:ed:e1:d9:
         ff:97:aa:f0:8c:a6:67:26:f5:eb:97:90:8d:50:09:d0:26:00:
         f4:d8:3d:b0:61:c4:68:af:7a:f8:8d:10:50:15:f6:75:d2:5e:
         a0:3b:85:c1:77:f2:04:d0:c1:ca:3a:eb:98:eb:0d:26:7d:85:
         92:47:e4:f7:da:67:7a:de:5f:fc:28:89:df:47:0b:b9:62:fa:
         15:1a:10:02:a1:67:6b:cc:f9:7b:be:f2:6a:c2:c7:aa:f2:66:
         ce:c1:2f:e4:16:0d:23:17:20:78:50:45:44:2c:8b:28:76:96:
         7b:ef:e6:a5:f0:c7:55:72:4d:59:aa:b5:44:5d:5e:95:11:2a:
         39:7d:15:2e:e8:08:98:37:e2:f9:6b:4d:6d:0b:06:63:11:1d:
         2c:44:cc:a3:12:f8:cf:2f:31:ed:60:cf:1b:3e:33:c2:93:0f:
         82:15:47:75:bb:29:29:07:80:41:68:30:0a:df:df:94:d6:87:
         6d:bd:2a:a4:8d:80:40:45:44:48:7a:16:35:43:6e:8b:c0:fb:
         79:0a:6d:5a:a5:61:95:9f:cb:40:7c:ee:22:df:aa:b3:87:89:
         1f:ab:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:04 2026 by rpki-client