Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          yO2cOBfHPv3C/4uaJ55DoJTVwS5Sx/sjk03JxEGguBI=
Subject key identifier:   22:E7:AF:31:91:34:B2:49:A2:5A:09:D1:1E:6C:92:5B:CE:7F:E5:65
Certificate issuer:       /CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3
Certificate serial:       4AE8FAE297C3E0BCE5CEF0798403A5922F688AD1
Authority key identifier: C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa
Signing time:             Sun 03 May 2026 03:12:26 +0000
ROA not before:           Sun 03 May 2026 03:07:26 +0000
ROA not after:            Sun 02 May 2027 03:12:26 +0000
asID:                     141909
IP address blocks:        103.121.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl
                          rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e8:fa:e2:97:c3:e0:bc:e5:ce:f0:79:84:03:a5:92:2f:68:8a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3
        Validity
            Not Before: May  3 03:07:26 2026 GMT
            Not After : May  2 03:12:26 2027 GMT
        Subject: CN=22E7AF319134B249A25A09D11E6C925BCE7FE565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:14:2e:5f:1a:38:71:f7:f2:f8:e2:88:ed:
                    df:29:25:21:66:e6:24:08:b1:85:e0:4e:a0:c6:00:
                    70:74:b7:bd:55:30:34:83:2d:42:56:9b:a9:a6:c2:
                    c7:59:5b:81:59:82:1b:ee:f2:40:c1:a5:0c:bf:67:
                    8c:8b:b4:e5:ff:1f:db:44:06:6b:86:55:32:57:2f:
                    dd:a8:c9:d7:7a:fa:ba:c4:dc:41:7e:68:7a:d0:1f:
                    d0:01:fc:dd:cb:9a:38:00:03:56:ff:71:3a:8e:b2:
                    95:dd:22:b0:2e:a8:46:b4:78:c9:92:2a:53:78:99:
                    4e:71:5f:a6:75:ee:38:27:19:d2:a3:23:a4:2e:63:
                    0a:69:19:c7:d9:3d:7b:af:fc:87:d7:3d:af:c6:e7:
                    f7:01:a8:ce:3f:be:df:c7:b2:90:7e:a1:48:e3:d2:
                    fb:87:51:27:f1:37:b1:7a:5e:d2:e1:b2:5f:fd:69:
                    9c:d0:54:96:3c:e1:55:a3:6c:f0:df:c9:e9:c8:bb:
                    bd:bb:31:f2:4c:40:13:37:b5:2b:a1:3b:3b:89:45:
                    c9:7d:30:9b:0a:76:94:1d:41:ab:ae:5b:0e:aa:73:
                    06:85:72:20:5f:b7:40:30:ce:31:cc:86:e2:88:a4:
                    86:1c:6d:0c:b0:bf:6d:48:2b:2c:0d:8f:14:44:6a:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E7:AF:31:91:34:B2:49:A2:5A:09:D1:1E:6C:92:5B:CE:7F:E5:65
            X509v3 Authority Key Identifier:
                keyid:C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:8c:9d:88:27:56:26:7a:9d:df:91:73:80:e3:1b:24:18:fc:
         15:76:eb:0a:c1:42:4b:72:56:1f:24:ca:18:60:86:8d:17:7c:
         7b:40:cd:b8:91:2e:53:3f:43:46:03:17:82:e5:e9:64:9e:e8:
         50:f4:a7:bb:f1:1f:a1:df:2b:c8:1c:55:7b:2e:d5:98:10:f9:
         ca:40:cd:7a:85:79:f0:54:88:ec:7d:9b:a7:c0:2a:79:ad:77:
         ed:5f:72:77:95:d9:a9:99:40:59:14:4d:5e:dc:77:4b:2d:aa:
         c9:fd:96:da:d6:06:51:38:82:56:55:90:3c:ee:f1:92:7d:7a:
         e8:8e:e6:f7:8b:2a:69:c0:2e:a5:a8:14:67:93:f7:47:c0:ea:
         bd:b2:f5:3b:79:0c:62:47:54:a2:00:89:05:01:9d:22:49:3d:
         58:30:bf:0a:b5:5e:a3:3c:60:a8:d5:8c:7a:52:95:65:fb:fd:
         1d:92:fe:ce:96:f8:dd:7c:9a:24:52:6c:28:bc:cc:c0:10:d2:
         bc:6c:09:57:f1:35:51:fc:c6:08:2c:10:53:2a:54:f2:b9:9f:
         80:a6:2e:98:61:9d:82:19:76:03:e9:45:a5:8e:de:c9:c0:f9:
         a6:5e:d6:66:b4:15:ef:93:46:37:37:3e:ec:a7:b0:db:41:32:
         13:c2:7a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:20 2026 by rpki-client