Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa
File:                     3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (raw, json)
Hash identifier:          a6L02/ltQd6+ySj9pYMUEWkvYU4L6ZYKU3OEQlZp5vg=
Subject key identifier:   10:92:5F:C1:AD:9C:8F:30:01:B9:CA:C7:98:8E:B6:04:85:DC:58:AD
Certificate issuer:       /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial:       6C5E8FDBCFF3422EE0CE79721E1F5CBE0195BC40
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa
Signing time:             Sun 03 May 2026 03:07:27 +0000
ROA not before:           Sun 03 May 2026 03:02:27 +0000
ROA not after:            Sun 02 May 2027 03:07:27 +0000
asID:                     138134
IP address blocks:        103.133.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
                          rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5e:8f:db:cf:f3:42:2e:e0:ce:79:72:1e:1f:5c:be:01:95:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
        Validity
            Not Before: May  3 03:02:27 2026 GMT
            Not After : May  2 03:07:27 2027 GMT
        Subject: CN=10925FC1AD9C8F3001B9CAC7988EB60485DC58AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fe:79:58:c2:ae:0d:54:f3:58:df:cd:4b:a9:
                    fc:e0:5b:43:96:e0:4b:90:e2:71:63:29:ec:8e:be:
                    1b:1e:ea:3e:73:03:cc:51:1e:45:07:5e:e6:58:ab:
                    a5:f0:6f:92:2c:b1:a2:a8:e4:b0:c6:dc:4e:96:d2:
                    7f:4a:75:0e:66:21:ec:0f:f1:a1:2a:10:b2:87:bc:
                    17:12:5f:c9:a5:f7:94:46:6d:ae:64:1f:f9:c4:9f:
                    85:17:b6:e7:25:04:a9:9f:72:b9:35:1a:0e:20:a0:
                    f0:87:b3:f2:ef:dd:6c:f4:05:af:f2:5c:a2:8c:24:
                    c4:e0:f6:81:e9:7c:4c:23:f4:97:23:93:59:3a:2b:
                    77:66:ce:0c:2c:3e:31:c9:35:74:8e:71:8a:92:93:
                    be:90:28:7f:97:95:19:4e:bd:f3:22:b8:b1:e9:0b:
                    fd:89:98:e7:e0:95:fe:23:d8:53:83:97:bc:bc:82:
                    f0:a4:8c:47:3e:3a:c4:30:44:15:44:e1:ba:e3:58:
                    e0:76:c0:a2:b6:61:08:1f:ba:96:f6:84:98:1f:e7:
                    fd:0f:d8:70:65:a4:48:9b:bf:e7:74:ad:8e:48:fe:
                    b9:b1:ad:1f:ce:b1:8a:f6:7e:67:a1:d9:04:c3:48:
                    23:bd:28:3d:5a:d8:b9:0d:d4:1d:43:f4:5d:aa:05:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:92:5F:C1:AD:9C:8F:30:01:B9:CA:C7:98:8E:B6:04:85:DC:58:AD
            X509v3 Authority Key Identifier:
                keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:af:6a:fb:7c:80:33:80:a1:5c:d5:77:c4:ce:de:29:0b:04:
         a2:c5:89:05:c2:ac:e2:da:eb:0c:c0:78:18:00:4a:b6:e3:5d:
         80:5e:14:e3:72:f9:c7:0f:53:e2:8d:29:40:a0:6f:e7:0f:3c:
         65:04:24:85:bb:30:fc:b3:c3:6d:af:46:61:50:0b:e9:30:ea:
         9c:e5:6e:04:48:10:7c:4c:66:a5:6c:38:4d:75:37:33:f6:da:
         2e:45:69:c8:bd:4f:af:be:2f:1e:f7:b6:a8:40:07:0a:3a:9e:
         65:38:48:19:9f:1c:0b:ae:d9:ca:58:73:42:11:7d:a8:df:17:
         1a:de:dd:a5:b9:91:9b:5b:52:23:64:63:09:68:c4:92:f2:d4:
         dd:67:f6:53:79:ee:ea:47:b4:7a:c2:9d:e4:58:94:f7:7e:d5:
         05:7f:95:c3:36:a4:96:2b:10:d2:40:28:ea:91:e3:8d:1b:0a:
         42:0c:75:bc:29:ea:f5:03:d3:3c:03:e9:0d:70:ca:19:f6:6f:
         64:e0:f1:1a:ac:58:a3:31:35:40:41:c1:20:cc:e9:08:9f:df:
         c3:22:50:01:e4:b3:47:64:0c:d3:3d:c9:9b:60:21:fb:cc:55:
         34:20:e8:0d:8e:c8:d5:21:c4:29:8a:c4:65:b7:8f:10:d0:45:
         e2:ec:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:08 2026 by rpki-client