Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa
File:                     3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (raw, json)
Hash identifier:          Doi0z4NEkGv6RXLNnraqWYaR8sRBho22P+RDGrr47z8=
Subject key identifier:   75:15:22:61:D8:65:90:C7:00:20:01:CD:8E:2C:4E:8F:47:7A:78:1D
Certificate issuer:       /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1
Certificate serial:       754ECF13D15F1DBE7FD27444282E9300C8EF2211
Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa
Signing time:             Sun 03 May 2026 03:10:20 +0000
ROA not before:           Sun 03 May 2026 03:05:20 +0000
ROA not after:            Sun 02 May 2027 03:10:20 +0000
asID:                     137311
IP address blocks:        103.109.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl
                          rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4e:cf:13:d1:5f:1d:be:7f:d2:74:44:28:2e:93:00:c8:ef:22:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1
        Validity
            Not Before: May  3 03:05:20 2026 GMT
            Not After : May  2 03:10:20 2027 GMT
        Subject: CN=75152261D86590C7002001CD8E2C4E8F477A781D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:09:a4:d1:32:92:bd:37:23:79:bf:c5:ad:
                    2b:28:fc:b6:05:93:f2:1c:26:e3:3c:8b:a5:87:ff:
                    c1:e3:b6:6c:37:71:c5:59:d0:6d:96:c2:09:b1:86:
                    af:89:80:bc:a4:5e:32:09:c5:92:7d:ad:65:c9:de:
                    8a:f5:26:58:2b:7a:49:de:5c:c8:58:13:58:16:0b:
                    c6:61:40:1b:70:95:a6:76:fa:73:f5:cb:6a:2a:d9:
                    2e:ac:70:5d:e4:98:d3:54:55:7b:a6:c6:98:7f:ed:
                    8d:f3:19:b6:7b:38:a2:af:44:12:82:a6:47:75:05:
                    71:0c:c8:d1:bb:a3:db:c8:cd:4c:46:2a:ec:a1:9f:
                    8d:8d:9b:82:d6:b4:a1:f5:9e:76:eb:5e:cf:60:be:
                    78:7a:c9:c2:f2:1d:6a:5e:bc:4f:89:b4:e1:4b:7f:
                    42:ed:8a:1c:5c:8e:83:d1:83:0a:2b:7d:36:ce:5c:
                    e1:3b:3d:e7:f9:49:6c:a1:b5:c2:10:05:da:f8:e2:
                    6d:9f:65:19:ff:dc:63:53:48:00:65:ec:70:c1:07:
                    94:8c:f4:00:ee:cc:87:c8:65:e1:f2:db:7a:c4:ea:
                    0d:0f:db:ec:48:97:ae:5e:46:c6:98:31:73:15:c5:
                    de:71:4e:aa:60:aa:b3:c4:7e:01:69:cd:9e:46:56:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:15:22:61:D8:65:90:C7:00:20:01:CD:8E:2C:4E:8F:47:7A:78:1D
            X509v3 Authority Key Identifier:
                keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:a7:fd:a4:28:de:6f:4c:8d:24:33:49:4f:67:cd:37:d7:
         0b:2f:aa:a2:ae:54:54:7f:98:56:44:42:d5:ae:15:fb:4c:dc:
         14:ec:b2:de:73:d5:05:f5:a4:34:dd:1b:b6:84:b7:54:22:f8:
         d9:cb:d3:03:68:67:35:ac:55:ac:90:a1:d7:3a:72:cd:d6:8d:
         ed:28:f5:72:a0:9c:85:71:0e:d7:79:f6:93:87:9d:39:ff:c4:
         bb:f3:34:f9:02:ac:b1:89:a7:05:72:6a:41:1b:64:45:38:b6:
         9b:f2:74:b4:de:ec:4e:ec:6a:dd:73:63:20:98:af:38:11:de:
         30:8a:b2:b0:44:a1:f5:e5:9a:55:80:db:55:d0:d2:53:0d:69:
         1b:09:36:88:dd:02:02:40:86:5d:60:49:21:51:73:87:c2:20:
         0c:7c:aa:5c:10:3d:02:12:7a:37:02:5b:82:61:ed:aa:b2:7b:
         8d:20:82:d1:2d:47:e5:a1:1f:70:92:69:ee:ef:6c:e9:d6:32:
         89:ef:78:2c:e6:29:26:a9:5b:ac:ac:ed:49:aa:01:f8:83:4c:
         38:64:5d:3e:1b:9f:0a:62:81:32:55:e6:b0:5b:6a:93:33:2e:
         90:e8:c4:27:3d:68:ab:b6:b8:6c:39:5d:5d:30:af:89:d8:68:
         63:1b:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:18 2026 by rpki-client