Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa
File:                     3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (raw, json)
Hash identifier:          yMpPQFyRnV2e6YSTMgcG1XsvzjweuetzgCss3TkjuJ0=
Subject key identifier:   57:FA:B2:C7:2B:88:22:13:A8:27:DC:C7:44:6B:3F:15:29:32:A0:78
Certificate issuer:       /CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
Certificate serial:       5727044285B331B243C3B78425A0470C0C015FC0
Authority key identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa
Signing time:             Sun 03 May 2026 03:10:45 +0000
ROA not before:           Sun 03 May 2026 03:05:45 +0000
ROA not after:            Sun 02 May 2027 03:10:45 +0000
asID:                     138842
IP address blocks:        103.138.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl
                          rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:27:04:42:85:b3:31:b2:43:c3:b7:84:25:a0:47:0c:0c:01:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
        Validity
            Not Before: May  3 03:05:45 2026 GMT
            Not After : May  2 03:10:45 2027 GMT
        Subject: CN=57FAB2C72B882213A827DCC7446B3F152932A078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:de:ef:4d:90:3c:f3:8c:8c:1e:3f:cb:b3:
                    b5:d3:9f:a2:3e:49:69:8a:ca:66:b9:25:04:f4:ae:
                    fa:0c:5e:41:a9:62:e2:78:8e:8d:86:36:c5:f7:9e:
                    ac:30:ff:bc:69:24:b9:65:7d:6a:6b:bb:84:8d:0a:
                    4e:4e:6a:76:5f:f5:99:eb:7b:9a:3d:b1:3d:b2:ea:
                    46:f5:72:ad:f6:66:47:64:42:f5:d6:24:af:78:a2:
                    6c:77:99:a8:38:a3:54:67:aa:7a:81:44:e7:f0:7f:
                    86:da:83:86:6e:57:25:09:4e:48:cb:fb:d7:c6:47:
                    bd:d0:99:b8:8d:bc:df:6e:cc:d3:8a:2f:4d:e5:a5:
                    52:5e:14:db:bd:ef:00:1b:87:d8:ba:0a:20:97:ca:
                    db:53:e2:85:ca:3a:54:c9:b5:93:13:39:5e:86:e4:
                    87:f0:92:08:8e:4c:c5:c6:e9:e1:dd:33:a8:cc:5b:
                    41:8b:5b:3d:d8:0b:28:ed:95:67:2f:6d:e5:00:79:
                    d3:75:af:16:24:dc:1c:21:81:83:90:b3:53:a7:c6:
                    a6:a8:c4:c9:8d:c0:c7:c0:01:80:d1:70:2f:c0:5b:
                    ba:6c:8c:7c:32:73:e5:dd:b0:22:83:90:a4:15:e5:
                    ec:b9:bc:9f:d0:47:1d:f0:f3:bd:01:af:de:c3:ba:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FA:B2:C7:2B:88:22:13:A8:27:DC:C7:44:6B:3F:15:29:32:A0:78
            X509v3 Authority Key Identifier:
                keyid:F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:02:b4:fc:35:11:8c:81:fa:e4:ea:3c:cd:8b:17:ce:51:3b:
         1a:d5:89:55:fb:05:58:d6:81:d0:d9:67:e0:95:dc:3e:8c:fd:
         ba:8b:24:61:ad:50:3f:b5:8e:c1:44:25:7a:5b:47:24:89:ac:
         14:7a:b3:c5:e1:54:40:ed:ae:2f:ad:87:a0:d1:6a:92:7f:6f:
         51:25:ff:9d:58:1e:b0:74:d2:fd:81:83:51:9b:e2:5d:46:5b:
         af:22:c4:9e:d4:3e:7d:73:51:3d:28:97:46:c9:39:f5:26:11:
         95:64:6d:01:d9:80:8d:9c:16:e0:2f:fd:70:6d:e6:b6:9f:cf:
         82:a6:0c:d5:c3:5d:16:ea:7e:27:d6:c8:a7:e6:a1:cd:e6:78:
         b8:c5:19:2c:86:38:38:7e:dd:26:21:d5:a5:72:2f:e7:bf:13:
         5b:ac:e3:4c:fa:9a:53:1e:fe:cd:e4:a7:90:8d:a0:50:65:7d:
         81:94:60:38:6a:34:59:55:bc:44:5c:43:31:2a:87:54:cb:70:
         72:af:72:f3:af:7b:3a:07:08:36:e1:aa:01:09:9d:b2:d4:d4:
         ec:21:3c:63:cf:3b:cd:a5:39:1f:69:77:c5:34:58:a7:aa:9a:
         aa:45:8b:ea:fb:7f:4c:4e:82:f5:fb:8f:e2:af:69:c2:3a:8d:
         84:09:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:36 2026 by rpki-client