Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa
File:                     3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (raw, json)
Hash identifier:          C1r63J+tGfKPbhbl/dI9G1bDePtMsBvnKWbTmvbk0OA=
Subject key identifier:   54:F0:DE:87:E5:32:DE:F6:93:AC:B3:38:59:61:C4:DF:1F:41:01:D4
Certificate issuer:       /CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225
Certificate serial:       156E8CB31DFE6CD8875DBBD47850D47E2FE8636E
Authority key identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa
Signing time:             Sun 03 May 2026 03:09:23 +0000
ROA not before:           Sun 03 May 2026 03:04:23 +0000
ROA not after:            Sun 02 May 2027 03:09:23 +0000
asID:                     138891
IP address blocks:        103.140.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl
                          rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6e:8c:b3:1d:fe:6c:d8:87:5d:bb:d4:78:50:d4:7e:2f:e8:63:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225
        Validity
            Not Before: May  3 03:04:23 2026 GMT
            Not After : May  2 03:09:23 2027 GMT
        Subject: CN=54F0DE87E532DEF693ACB3385961C4DF1F4101D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:3b:0f:0a:89:02:69:91:e8:bd:45:fe:ce:
                    da:ce:14:75:a8:27:d3:b9:cb:f8:6e:71:38:a2:ab:
                    86:51:35:fe:90:8e:9b:1d:27:4e:3b:79:6f:9a:a8:
                    3f:e3:cf:66:a7:8c:7a:28:e5:f7:4b:33:7c:31:69:
                    cf:a9:eb:d7:da:83:b3:07:fc:46:a2:c3:94:27:00:
                    8c:09:a5:98:80:96:f3:e2:f7:fa:81:f1:cd:3a:23:
                    c1:d8:7c:b5:be:67:d2:b5:20:5c:b3:4b:c5:a8:5a:
                    27:da:2f:ff:2d:86:ad:3e:98:b7:e5:1d:05:a3:85:
                    38:d0:c4:ba:22:1c:f0:d7:c1:fd:88:a6:03:a0:da:
                    ca:b7:bf:20:59:4a:e9:90:af:39:38:0a:40:97:52:
                    93:b8:a0:91:15:09:4c:13:a6:c0:22:b0:13:38:de:
                    7e:db:7f:08:4a:9d:31:b6:47:16:92:22:4f:a9:56:
                    e1:cb:f8:c6:02:9a:46:f4:98:2a:9d:98:da:84:7a:
                    39:f0:13:f3:75:dc:52:4c:e9:0a:09:1f:bb:51:a0:
                    02:a0:ba:59:e4:ea:43:57:66:6d:a7:64:e9:70:47:
                    68:7d:46:bc:53:7a:e5:47:44:bc:a6:21:32:d3:9f:
                    bd:9d:ed:d0:0b:41:6c:11:6a:6d:93:7b:f0:f9:73:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F0:DE:87:E5:32:DE:F6:93:AC:B3:38:59:61:C4:DF:1F:41:01:D4
            X509v3 Authority Key Identifier:
                keyid:8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:1e:93:fa:29:1c:48:8b:ea:e0:94:fe:b4:e4:3b:73:09:
         3f:33:71:3b:81:43:d7:0d:aa:78:69:59:90:fc:79:9d:af:b1:
         4b:7a:a9:bd:cf:3f:e8:bb:25:90:42:e1:62:d6:b8:0a:7f:c7:
         f8:e0:33:44:be:00:41:0b:bd:88:84:e8:fa:fc:7f:2a:ff:53:
         be:2b:d3:f7:ec:07:75:6f:32:b6:7b:15:c3:5c:16:8e:f8:d4:
         73:57:6d:81:30:2a:fc:00:e1:3d:f4:1e:27:ac:c1:15:bd:cf:
         ad:45:55:58:cd:2d:d9:96:28:25:f4:72:01:df:46:9e:4f:1f:
         38:b7:69:9c:9b:ac:75:d8:70:d3:8c:7c:60:4e:ea:60:0e:ff:
         7d:29:83:a3:50:fd:5a:59:78:56:3b:87:28:97:65:f6:08:ae:
         3f:b9:51:ec:d6:13:ca:4d:35:78:0d:6d:f5:3c:a4:60:17:76:
         36:4e:4e:d0:a9:a7:90:11:a6:71:bd:dd:ce:88:e4:f5:49:ab:
         d8:fd:43:ee:da:b1:e5:14:78:91:d4:c3:39:ed:9e:4c:54:be:
         12:c0:cd:59:66:97:0a:09:af:8d:b9:57:6d:cf:a7:08:0c:47:
         1d:08:ed:9f:d9:a4:f9:bf:7c:98:c3:1a:22:e2:aa:24:73:98:
         dd:57:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:51 2026 by rpki-client