Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          hgg/QP+dSLFLOsjRg4tQEaQYc48Rb+WtJWuacTUuK2I=
Subject key identifier:   A9:23:E3:F6:C9:AF:76:68:18:6B:9B:81:0B:FE:B7:63:25:72:12:18
Certificate issuer:       /CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3
Certificate serial:       4C117BFBA12AF87522E221A2EBA2CC78600A48ED
Authority key identifier: C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa
Signing time:             Sun 03 May 2026 03:12:26 +0000
ROA not before:           Sun 03 May 2026 03:07:26 +0000
ROA not after:            Sun 02 May 2027 03:12:26 +0000
asID:                     141909
IP address blocks:        103.121.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl
                          rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:11:7b:fb:a1:2a:f8:75:22:e2:21:a2:eb:a2:cc:78:60:0a:48:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3
        Validity
            Not Before: May  3 03:07:26 2026 GMT
            Not After : May  2 03:12:26 2027 GMT
        Subject: CN=A923E3F6C9AF7668186B9B810BFEB76325721218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:39:2c:9d:e0:0f:c5:65:02:8e:05:f9:20:
                    9a:74:f3:e6:91:70:6e:08:3d:c4:c6:1c:7c:06:bb:
                    ec:b0:6d:f6:06:f6:06:75:40:ce:2c:db:5d:6d:e0:
                    2e:af:b3:e9:33:dc:a2:f6:c6:fd:b2:71:1c:ab:07:
                    fd:e0:e2:f8:fc:a9:03:a0:b1:11:91:db:26:ee:65:
                    c8:71:b7:d8:f7:f3:cd:35:55:05:04:73:99:8b:3a:
                    a7:91:46:6d:30:24:25:39:c3:34:85:86:14:cf:ee:
                    b2:8e:1b:b5:59:18:bc:2a:bb:85:1b:19:44:8f:99:
                    db:42:7a:cf:fc:be:14:07:fb:ea:21:c1:e1:3f:6e:
                    e5:51:96:09:92:14:36:15:b2:8a:1c:02:c2:58:de:
                    39:2d:c4:ad:23:ef:c6:a4:75:8b:37:7a:55:2b:4f:
                    20:d7:9d:57:c3:2c:06:28:a2:23:22:9b:c8:75:2b:
                    00:13:2a:a9:8d:d0:e4:90:3c:79:ae:e0:a7:50:25:
                    7b:6a:f8:d4:58:46:7a:6c:e0:80:c2:a3:a5:6f:34:
                    19:26:63:7c:66:d4:3a:f6:68:14:ae:32:a3:80:1c:
                    89:20:79:fd:10:4d:a1:2a:a7:e7:d2:4b:ca:94:5a:
                    fc:84:c3:27:95:b3:8c:b6:f4:fa:bf:04:2d:61:c6:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:23:E3:F6:C9:AF:76:68:18:6B:9B:81:0B:FE:B7:63:25:72:12:18
            X509v3 Authority Key Identifier:
                keyid:C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:0b:98:38:4b:c7:fd:2f:c9:40:30:50:f1:ed:65:15:be:
         39:85:88:17:16:39:cf:be:01:6d:aa:0a:05:19:c6:bc:d7:5c:
         ad:25:5d:93:01:32:24:f8:9a:2d:37:d6:37:4f:ba:21:ab:d1:
         d9:1e:a3:65:32:68:34:55:fe:d1:c8:3d:92:58:a0:52:7d:ca:
         02:9a:fc:8d:04:f2:c9:4a:a6:12:e9:9d:e2:ca:5b:2f:0a:6c:
         a0:09:dd:12:61:d3:10:ec:b3:22:99:85:71:b6:78:11:2b:f1:
         cc:93:30:ad:85:92:29:f7:52:c2:7a:f3:24:6e:da:9f:8b:1d:
         54:2d:9a:38:b9:5f:79:f9:98:5a:92:13:26:b4:6b:96:a6:73:
         08:35:73:0a:a5:a5:1a:54:b6:c4:7d:26:bb:6b:61:47:4e:59:
         82:b1:d8:7a:b9:1e:c4:ad:d0:96:e8:11:e0:97:da:cb:81:87:
         12:a0:9c:c5:4d:d4:83:32:af:cb:c1:79:23:76:f1:b2:3b:66:
         d2:66:2f:89:83:40:fa:d5:2d:dc:5d:af:ed:2e:01:54:7e:f6:
         b2:10:f0:8e:89:27:e3:28:cb:db:ce:6f:f5:ae:92:f8:11:14:
         60:3d:7e:8f:5a:3b:4f:1a:0b:d5:8a:20:50:57:b2:1a:8a:13:
         1e:14:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:05 2026 by rpki-client