Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa
File:                     3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (raw, json)
Hash identifier:          yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=
Subject key identifier:   0B:8A:03:CF:2C:85:15:26:6E:D4:BF:EB:44:52:43:DD:87:B4:C1:61
Certificate issuer:       /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1
Certificate serial:       360AC694BD29A62C8B937DD7A3BD3D52DCF12E85
Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa
Signing time:             Sun 03 May 2026 03:10:21 +0000
ROA not before:           Sun 03 May 2026 03:05:21 +0000
ROA not after:            Sun 02 May 2027 03:10:21 +0000
asID:                     137311
IP address blocks:        103.109.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl
                          rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0a:c6:94:bd:29:a6:2c:8b:93:7d:d7:a3:bd:3d:52:dc:f1:2e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1
        Validity
            Not Before: May  3 03:05:21 2026 GMT
            Not After : May  2 03:10:21 2027 GMT
        Subject: CN=0B8A03CF2C8515266ED4BFEB445243DD87B4C161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:ab:de:16:8e:30:5d:a0:8d:71:d3:b1:42:
                    c2:63:b6:0e:f7:18:c3:11:ef:fe:dd:65:1d:04:e0:
                    fe:d0:b4:21:5e:04:85:78:4b:a2:c9:af:87:49:57:
                    90:89:82:08:e2:08:0c:46:27:18:f6:28:ff:63:96:
                    bd:23:c5:55:50:9e:f2:28:d8:f9:29:93:d9:d9:d4:
                    5e:34:24:de:96:81:c3:1e:53:6d:12:6c:cd:7d:eb:
                    59:e7:33:4c:de:1c:35:c1:bf:73:30:f6:39:0e:14:
                    4d:25:a8:e7:5d:61:31:bc:ba:08:d3:64:76:03:07:
                    ce:b9:3b:6f:b4:20:82:79:61:44:ba:54:3b:7f:64:
                    23:7b:c9:ac:16:93:ba:0e:90:87:2e:bb:a4:b2:61:
                    89:0e:b9:69:0d:67:32:39:64:98:c3:19:86:93:a4:
                    8f:d1:62:39:fa:07:51:66:16:6c:13:db:6e:26:c9:
                    a5:4a:97:c1:1d:52:de:ab:77:58:9f:62:dd:4e:d9:
                    71:3c:fe:d3:2f:29:19:10:9c:b5:79:08:46:c5:02:
                    df:d7:1d:e7:36:ef:50:cf:03:73:30:d3:91:43:4e:
                    b1:ca:1a:55:19:47:c1:d6:c5:71:94:bd:20:c9:32:
                    14:b6:35:c0:0a:5d:60:f3:6a:61:25:94:c6:8d:c2:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8A:03:CF:2C:85:15:26:6E:D4:BF:EB:44:52:43:DD:87:B4:C1:61
            X509v3 Authority Key Identifier:
                keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:9c:32:62:2a:c1:32:cc:0d:4e:50:49:5b:3f:67:3c:52:d9:
         e3:af:50:c8:aa:97:f3:b7:bc:f3:00:ac:6e:dd:ca:0c:69:53:
         5b:57:63:57:12:93:5d:88:6d:b6:40:58:db:8c:c7:88:4e:b9:
         bc:75:85:d2:d6:dd:5c:df:8f:1f:6c:9a:e2:32:0c:e7:ba:02:
         cf:7c:54:32:3a:80:39:0a:15:dc:7d:c1:09:27:92:b9:50:49:
         b7:9f:fd:f8:82:4c:8b:17:44:0d:0d:32:8d:ff:62:da:3e:9f:
         f6:e0:bb:a0:6b:22:1b:06:09:ef:57:34:90:35:b6:35:61:58:
         eb:39:a1:07:78:40:95:ea:bf:ff:50:b5:c1:15:2d:f8:35:20:
         a3:f5:b4:d9:ca:0c:68:3a:fa:fb:2e:af:48:85:37:32:48:df:
         1a:ec:66:ac:46:23:ae:02:d0:b7:bd:4d:f1:63:67:f5:fa:f3:
         e9:b1:fd:aa:16:d4:0c:7c:98:0f:f0:a0:07:30:59:4f:67:0b:
         fa:1f:4f:f9:5c:93:33:17:39:d0:0e:35:44:ff:54:25:4e:14:
         e5:bb:de:8f:9f:f0:b1:ee:c1:6f:e6:e3:72:9b:92:9e:b1:c6:
         0c:18:e9:64:81:f3:7c:8e:c4:f7:8d:61:0a:b8:7e:ec:bb:9a:
         1a:b5:e5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:31 2026 by rpki-client