Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa
File:                     3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (raw, json)
Hash identifier:          gMfUFYSPdVxpBBuGIFKR77copbFj1wN/NAnjtAfZ1Zo=
Subject key identifier:   27:05:D9:AC:5C:A2:20:F3:C1:53:64:11:16:F4:60:2B:3D:2E:5C:E8
Certificate issuer:       /CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225
Certificate serial:       569D03C23D94E49A585C45413D85AE373310607F
Authority key identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa
Signing time:             Sun 03 May 2026 03:09:22 +0000
ROA not before:           Sun 03 May 2026 03:04:22 +0000
ROA not after:            Sun 02 May 2027 03:09:22 +0000
asID:                     138891
IP address blocks:        103.140.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl
                          rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9d:03:c2:3d:94:e4:9a:58:5c:45:41:3d:85:ae:37:33:10:60:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225
        Validity
            Not Before: May  3 03:04:22 2026 GMT
            Not After : May  2 03:09:22 2027 GMT
        Subject: CN=2705D9AC5CA220F3C153641116F4602B3D2E5CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:89:35:28:5b:e9:e8:f8:48:00:11:88:1f:
                    d1:e7:d0:c9:33:68:f4:4f:f4:10:cb:4f:8f:95:4f:
                    69:a3:d3:34:57:d0:fd:12:d7:49:b6:1b:f3:69:6e:
                    06:78:d4:97:25:04:18:ba:9e:c7:a0:35:79:d0:9f:
                    a7:25:18:2b:f7:ea:ba:61:bb:28:c6:25:64:7f:8c:
                    62:52:82:15:33:94:45:99:3a:53:03:96:4e:f0:c6:
                    1e:ab:ec:5f:95:36:f4:47:41:20:fc:71:21:28:56:
                    c7:59:7f:5f:5b:72:e3:a6:58:2e:12:e8:da:ae:98:
                    16:d9:3e:64:f0:5e:d0:f1:a8:bc:3a:8b:78:45:34:
                    d5:95:6b:c5:e4:01:d5:ad:3b:11:55:d4:e0:9a:9d:
                    7f:3d:c3:f7:0b:6a:14:96:a9:44:2f:52:dc:b4:1a:
                    01:72:b9:25:0b:35:87:4e:9a:0e:44:f7:ef:9f:a1:
                    8c:b5:db:0e:1a:93:c9:bb:1d:47:8a:db:9c:5d:f8:
                    35:02:1e:79:de:f9:08:37:86:9d:c5:47:a9:85:e7:
                    dd:d2:6e:c6:d4:18:88:93:4f:d6:64:25:78:7d:a1:
                    21:0e:8e:fc:47:68:68:90:4c:60:00:e9:32:54:ab:
                    91:76:41:dc:ac:f7:9d:27:b3:ad:92:e9:72:79:8e:
                    00:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:D9:AC:5C:A2:20:F3:C1:53:64:11:16:F4:60:2B:3D:2E:5C:E8
            X509v3 Authority Key Identifier:
                keyid:8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:15:f9:3f:37:9a:7a:d9:8f:9b:aa:2c:98:02:65:76:c9:3d:
         59:62:af:57:0a:df:b4:11:cf:02:29:0b:b1:2d:c7:9b:01:d8:
         49:c8:9c:e8:72:2e:8f:97:04:38:06:61:3e:c2:e2:ca:82:ad:
         f9:04:4a:d9:75:d1:28:3b:15:bc:c5:9e:30:98:8d:32:49:49:
         be:c9:da:ed:fe:3c:ca:a0:14:b8:b2:d6:c5:e9:f3:4f:bb:3f:
         b7:f9:60:88:f7:87:73:fc:5e:21:18:4a:59:56:67:4d:9c:a2:
         90:1a:9e:45:6e:e2:92:bb:1c:7e:b5:0c:7f:ee:38:74:b0:37:
         93:00:1c:36:33:59:21:15:53:96:5d:0c:db:5f:cd:5e:5b:58:
         ef:a6:e5:c6:91:2f:61:3f:93:6d:58:28:5d:93:8c:35:29:47:
         52:de:20:ca:7c:3a:d6:42:17:ad:fe:92:d9:4f:d5:ff:16:23:
         08:c5:2c:fc:d8:96:b0:e4:83:c6:29:f0:41:3f:c8:9f:8c:2f:
         e4:56:22:c7:b8:b8:c3:76:56:65:39:21:b7:57:ba:53:93:14:
         4a:49:ab:7a:73:a5:4f:ca:16:7f:9c:4a:29:7b:4c:18:bf:d9:
         bd:f3:16:d0:a9:a7:74:f9:4a:2e:c1:cb:45:c7:16:00:25:d9:
         5a:0c:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:08 2026 by rpki-client