Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa
File:                     3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (raw, json)
Hash identifier:          mWQGvGpntA9+RoZ+2d/mg2UesRUFeODRtMWjWLsshoc=
Subject key identifier:   55:2D:AF:42:00:45:84:80:BD:FF:02:80:F6:06:95:36:EA:85:1D:5A
Certificate issuer:       /CN=EAB7F888E6D8656A93A8E50773CF5352039E7B93
Certificate serial:       658A0F8541D3BCF4A9F29EFCE7E083B75B4090C2
Authority key identifier: EA:B7:F8:88:E6:D8:65:6A:93:A8:E5:07:73:CF:53:52:03:9E:7B:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa
Signing time:             Sun 03 May 2026 03:12:34 +0000
ROA not before:           Sun 03 May 2026 03:07:34 +0000
ROA not after:            Sun 02 May 2027 03:12:34 +0000
asID:                     138064
IP address blocks:        103.122.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.crl
                          rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8a:0f:85:41:d3:bc:f4:a9:f2:9e:fc:e7:e0:83:b7:5b:40:90:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB7F888E6D8656A93A8E50773CF5352039E7B93
        Validity
            Not Before: May  3 03:07:34 2026 GMT
            Not After : May  2 03:12:34 2027 GMT
        Subject: CN=552DAF4200458480BDFF0280F6069536EA851D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:82:95:9c:0b:53:e3:0b:51:33:22:e2:39:
                    15:90:ab:19:25:58:d2:9d:d2:77:97:ba:00:38:02:
                    10:13:a0:e9:5b:b4:e6:77:8a:0a:e7:f0:f7:6d:ed:
                    0e:f7:e8:de:10:3c:fe:0d:01:15:2b:a2:aa:a5:2e:
                    2c:28:75:85:5b:a2:47:ff:cd:bc:0e:fa:e8:72:1c:
                    10:47:fa:54:c5:d8:07:21:03:08:18:f6:cd:19:d8:
                    37:c0:27:68:d7:16:a4:15:a0:2c:1d:1a:c7:65:e1:
                    14:53:bc:d9:1a:1c:b3:d5:bf:d7:c4:99:0f:59:2c:
                    2b:bb:0d:b1:77:1b:45:70:75:67:fb:86:a9:8c:de:
                    cf:0b:62:1f:0d:cb:29:f1:0e:6c:85:e1:d7:50:6f:
                    1d:fa:d1:78:3d:cb:c2:7b:ed:3a:f6:7d:0e:8e:10:
                    3b:c3:45:1f:1b:58:95:c6:1d:72:1e:a6:98:3d:40:
                    a8:b7:3a:bf:01:ae:e5:0a:c1:47:fe:1b:3f:a9:d9:
                    be:8e:5b:ee:df:f0:d3:a7:14:ba:97:94:f3:01:92:
                    84:1c:b6:5e:76:91:28:38:da:bc:c5:6a:b7:a0:e7:
                    de:16:8a:90:04:a3:e6:a5:27:bd:3f:4b:e1:ca:13:
                    91:d1:41:26:57:23:6e:05:78:cc:e0:2d:4b:63:da:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2D:AF:42:00:45:84:80:BD:FF:02:80:F6:06:95:36:EA:85:1D:5A
            X509v3 Authority Key Identifier:
                keyid:EA:B7:F8:88:E6:D8:65:6A:93:A8:E5:07:73:CF:53:52:03:9E:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/EAB7F888E6D8656A93A8E50773CF5352039E7B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAB7F888E6D8656A93A8E50773CF5352039E7B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:76:f2:d8:31:e8:e1:aa:1e:0b:fa:8a:63:76:9c:35:f9:c3:
         1d:77:c3:fb:89:c9:5a:04:57:ce:c7:4c:a9:76:73:e1:2e:d5:
         8e:98:86:e9:be:5c:e9:ff:1c:a7:35:ed:22:62:24:7d:94:32:
         f1:50:2e:19:af:cd:04:83:f2:96:e3:d8:f1:62:97:d4:6b:5c:
         57:89:fb:83:61:27:f4:1e:b5:02:e6:b9:9e:f3:74:27:19:28:
         a4:ec:d2:ae:fd:72:a0:83:1d:2b:43:04:1c:2b:20:aa:8a:86:
         1a:9e:c4:e5:e7:1f:03:a4:d2:97:e1:07:3a:11:b6:80:da:dd:
         0b:0f:c9:20:1c:ca:83:b8:66:40:4a:bd:5d:d8:7b:2a:24:f7:
         3a:41:8e:ef:90:fb:45:e6:2e:71:af:30:bd:6f:28:60:30:bf:
         1e:5e:11:3a:9a:7f:8e:15:6d:33:c1:1c:77:18:cc:b3:d0:7e:
         a1:68:88:80:c5:64:a0:99:25:9d:14:39:14:6f:69:ec:98:5a:
         b8:06:6e:42:6c:2c:76:15:3f:13:c2:e9:5f:bf:fb:29:78:8b:
         82:1e:fb:c4:88:4e:7d:5f:5a:22:bc:0f:8a:ac:22:28:f0:dc:
         57:1d:e9:45:89:24:9e:bd:8c:bd:80:4b:2c:55:9a:aa:a7:f7:
         e9:64:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:30 2026 by rpki-client