Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa
File:                     3130332e372e38362e302f32332d3234203d3e20313331363934.roa (raw, json)
Hash identifier:          9iOGSPVwdIzM06Nv1aCnsZni2w9fn0oDKaUrH+7kG4w=
Subject key identifier:   60:B4:0C:09:10:5F:2B:B1:99:F1:99:97:A3:2D:F1:E3:81:6C:E8:78
Certificate issuer:       /CN=17742FC0C74368833EBF6E2F4739E40851DF22B3
Certificate serial:       0CDB4FA69380C7F45CD92AE2A5361D96D9FE5295
Authority key identifier: 17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa
Signing time:             Sun 03 May 2026 03:07:56 +0000
ROA not before:           Sun 03 May 2026 03:02:56 +0000
ROA not after:            Sun 02 May 2027 03:07:56 +0000
asID:                     131694
IP address blocks:        103.7.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl
                          rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:db:4f:a6:93:80:c7:f4:5c:d9:2a:e2:a5:36:1d:96:d9:fe:52:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17742FC0C74368833EBF6E2F4739E40851DF22B3
        Validity
            Not Before: May  3 03:02:56 2026 GMT
            Not After : May  2 03:07:56 2027 GMT
        Subject: CN=60B40C09105F2BB199F19997A32DF1E3816CE878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:45:8b:35:e0:5c:73:5f:6d:b2:85:3e:91:
                    52:ee:b8:3a:0d:b1:14:ff:cb:07:de:0e:b8:ae:1d:
                    01:90:22:94:2d:2d:89:cc:a6:f3:2d:2e:9c:2f:91:
                    44:82:70:be:76:6e:95:f9:9e:1b:2e:c4:92:f3:e3:
                    e6:98:9d:9b:49:b7:99:11:18:fa:1e:62:99:e1:f8:
                    86:10:c6:91:90:da:4a:cf:7e:20:93:ec:35:94:06:
                    d8:39:4d:8f:da:15:8e:ac:ba:16:6c:f2:4b:79:dd:
                    36:40:b3:23:ad:83:0a:f1:f5:9a:eb:e7:6f:57:88:
                    df:dd:43:4e:8d:16:09:e9:12:ed:02:a0:ae:02:6b:
                    0f:ae:d2:01:d0:42:43:74:8a:4f:00:06:7c:66:e2:
                    ca:e6:2f:b7:38:aa:2e:6a:61:47:f7:5a:5d:72:12:
                    c1:5e:a0:1c:ce:fb:ac:bb:97:6a:48:e7:f5:27:b9:
                    6d:9d:33:0d:06:97:10:cf:e3:53:9a:de:a5:97:71:
                    99:db:97:5d:5b:ef:44:47:71:5d:e5:72:fd:3a:b0:
                    f6:79:30:f1:02:19:54:25:6d:54:6c:73:b1:b0:43:
                    c8:77:ad:9d:bf:84:f7:8a:ed:1d:22:c4:41:7a:61:
                    aa:3b:9d:a8:66:1e:32:df:ec:bc:b5:f2:c6:7c:31:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B4:0C:09:10:5F:2B:B1:99:F1:99:97:A3:2D:F1:E3:81:6C:E8:78
            X509v3 Authority Key Identifier:
                keyid:17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:e9:28:d2:53:ab:b5:57:57:b9:7d:93:32:1d:84:ca:f3:99:
         f6:25:d3:e7:90:dc:15:32:d1:f8:00:3e:67:3c:f2:4d:9c:a0:
         97:1c:8d:8f:d6:f0:91:0b:4a:14:ca:3c:89:91:17:77:20:d4:
         6f:be:36:87:32:e4:81:43:66:81:7e:ac:7c:62:dd:48:c2:ac:
         cb:52:37:97:ed:7d:32:0a:dd:e6:7a:68:3a:50:57:c0:a9:f2:
         6d:82:a8:e0:44:dd:33:ee:93:ab:84:dc:2e:5e:8f:06:5f:b3:
         d5:ce:65:0e:a2:8a:92:e3:6c:69:73:53:f6:fd:65:77:6c:c2:
         9a:0a:68:73:eb:19:07:b9:85:ce:9d:57:6b:16:52:f3:af:5b:
         37:dc:d6:d7:2c:23:ae:a5:3d:57:db:f3:77:5f:01:76:16:8c:
         79:13:b0:85:81:e4:30:bd:e5:9c:d6:07:1e:70:1f:00:b3:13:
         af:b7:9a:91:28:4d:e3:08:e6:00:38:4d:4f:c4:36:83:1e:ec:
         aa:02:ab:d6:4f:67:bd:73:d7:f8:78:ad:47:94:c1:f0:cf:48:
         77:2c:d6:53:91:15:f8:df:1a:9a:c4:ca:da:16:ff:c8:46:e3:
         03:a7:72:6c:56:cd:00:e0:1f:60:92:f1:99:a1:9b:92:c1:c8:
         f0:1f:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:07 2026 by rpki-client