Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa
File:                     3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (raw, json)
Hash identifier:          0VUfdAAfFEuToJwbRstnJ6dFxvse7EJ2ZUiWvgUCNNM=
Subject key identifier:   27:4D:EA:89:03:CA:57:9F:C3:1D:79:73:42:07:CE:2D:4A:71:8D:60
Certificate issuer:       /CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3
Certificate serial:       0D21AB0DC340BD5500812D6440BD9A7CF6A4D01B
Authority key identifier: C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa
Signing time:             Sun 03 May 2026 03:12:26 +0000
ROA not before:           Sun 03 May 2026 03:07:26 +0000
ROA not after:            Sun 02 May 2027 03:12:26 +0000
asID:                     141909
IP address blocks:        103.121.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl
                          rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:21:ab:0d:c3:40:bd:55:00:81:2d:64:40:bd:9a:7c:f6:a4:d0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3
        Validity
            Not Before: May  3 03:07:26 2026 GMT
            Not After : May  2 03:12:26 2027 GMT
        Subject: CN=274DEA8903CA579FC31D79734207CE2D4A718D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:b4:7e:9d:0d:76:1f:47:ad:3f:9f:de:8c:
                    21:26:2c:9e:b3:0f:63:d8:e8:67:0e:19:ab:a6:5d:
                    47:73:44:11:08:7b:0e:3d:90:4a:55:8a:a9:ec:ec:
                    8a:a1:21:a1:89:f9:4e:54:a1:23:5d:14:8d:bb:06:
                    55:dc:98:7f:de:e0:f2:04:5d:fc:b9:48:52:3f:6a:
                    49:c8:76:a3:f7:22:dc:0a:f9:39:5b:bf:21:13:73:
                    6e:95:75:79:7e:e2:ad:35:eb:ec:c3:26:28:13:e0:
                    90:0d:74:9c:ff:a3:bd:cc:ab:c2:3a:cb:f3:f3:1e:
                    86:ce:35:d2:a4:42:ae:a0:62:49:16:1c:09:5a:93:
                    03:ce:d8:a2:84:55:6d:d7:f5:41:02:41:01:30:38:
                    79:5d:3a:dc:a2:29:6b:0a:7d:75:95:2a:07:86:04:
                    89:6b:7b:34:aa:dc:d8:e2:8d:29:f5:bb:63:32:d9:
                    43:9d:e0:9f:30:b0:ad:42:0c:9c:07:ff:5f:36:c8:
                    0b:cd:0a:4c:ec:80:61:2e:7e:d7:a7:19:f1:3e:e9:
                    91:e0:c5:30:e1:22:0a:ce:cb:17:95:bf:f5:86:8e:
                    1d:18:fb:3e:29:5f:60:32:63:e8:b6:78:59:24:5b:
                    f9:17:42:45:0e:04:bd:69:63:28:55:5a:c9:ba:77:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:EA:89:03:CA:57:9F:C3:1D:79:73:42:07:CE:2D:4A:71:8D:60
            X509v3 Authority Key Identifier:
                keyid:C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:6a:bb:b4:62:ee:58:9f:9b:4f:b9:2a:7d:14:37:c2:62:d0:
         ca:99:d3:93:dc:9c:4c:2f:06:7a:1e:6b:d9:f7:61:49:be:44:
         80:08:60:bb:f3:4e:bf:c0:e2:dc:00:93:7f:9b:05:47:c1:9c:
         c8:81:2c:3d:96:9a:d5:84:49:4f:e0:da:ea:25:4b:46:af:84:
         39:14:d9:ec:b1:63:d3:b4:cf:61:29:80:5b:69:5d:20:db:17:
         01:9c:dc:98:16:ec:4e:2d:fa:93:dc:06:40:cf:b8:4c:1e:34:
         61:35:bc:47:b9:ba:02:48:c5:80:a4:ad:30:6e:a4:4e:88:8b:
         9f:4f:1c:b9:f8:d2:f3:96:d1:53:cb:2d:b4:63:66:b3:f2:aa:
         88:7f:80:1f:16:e2:79:f9:db:46:70:92:9b:c5:4a:e4:51:0b:
         80:69:94:67:3e:c8:2f:2f:19:81:ec:66:c2:33:ad:27:27:bf:
         45:60:27:23:5c:8a:ad:32:7a:9f:d1:cc:58:33:b1:d9:ac:4b:
         90:f5:b6:d4:df:80:3f:c4:bb:8a:bb:ca:76:72:73:6e:b2:09:
         b0:24:86:f1:8d:5d:db:7d:c9:2c:76:52:58:0c:e5:d1:0e:1b:
         19:cf:e1:e5:89:83:ca:86:fc:7a:66:0e:9b:b0:74:a6:80:60:
         8f:ac:f7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:09 2026 by rpki-client