Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e32342e31322e302f32332d3233203d3e20313332363434.roa
File:                     3130332e32342e31322e302f32332d3233203d3e20313332363434.roa (raw, json)
Hash identifier:          XA49llIDJReIFYpde7BLF2WOb/sWo1hTC8oVNheJ18c=
Subject key identifier:   6B:D4:AF:FB:1E:14:8B:DB:0B:C3:C3:5C:6F:A3:CD:69:D1:77:26:2D
Certificate issuer:       /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial:       514FB391994FBDEB976B366312C7DE86373988F7
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e32342e31322e302f32332d3233203d3e20313332363434.roa
Signing time:             Sun 03 May 2026 03:12:40 +0000
ROA not before:           Sun 03 May 2026 03:07:40 +0000
ROA not after:            Sun 02 May 2027 03:12:40 +0000
asID:                     132644
IP address blocks:        103.24.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
                          rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4f:b3:91:99:4f:bd:eb:97:6b:36:63:12:c7:de:86:37:39:88:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
        Validity
            Not Before: May  3 03:07:40 2026 GMT
            Not After : May  2 03:12:40 2027 GMT
        Subject: CN=6BD4AFFB1E148BDB0BC3C35C6FA3CD69D177262D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:3d:1b:0d:e1:66:15:51:c1:51:4f:91:67:
                    24:7c:3b:3b:db:d1:b7:61:44:de:9c:63:ca:ab:f5:
                    55:58:01:45:cf:30:7d:be:9a:c4:d3:39:ad:53:37:
                    3c:d2:73:ca:62:50:83:14:5f:64:ea:1b:a3:69:22:
                    61:8e:a6:d6:8a:95:4f:c2:53:af:f7:3d:2e:b4:cb:
                    db:56:fa:c9:de:a7:7b:4c:71:73:35:6a:e0:d2:73:
                    63:89:77:6f:11:83:28:dc:38:88:e4:14:f7:b1:73:
                    71:1d:a8:c9:fe:27:80:e9:dc:d2:9e:19:b6:aa:14:
                    01:c5:33:e9:c4:e0:fd:05:ab:02:a6:79:2d:c0:25:
                    31:51:74:3c:41:16:a3:00:4b:d6:d8:9e:21:69:12:
                    e4:7e:a3:bd:97:a1:ea:2d:e8:f0:c7:57:cf:91:3b:
                    ea:58:1d:97:52:17:71:8b:eb:59:e9:3d:47:2e:cd:
                    cf:d1:c0:6a:1d:98:4f:4f:a6:61:b0:7d:6f:c5:b0:
                    ce:1f:82:26:11:2b:56:dc:0b:96:b1:08:c0:8b:42:
                    cd:92:e7:68:38:96:b3:b7:e7:d1:fe:77:a2:56:8e:
                    d4:d2:95:06:f9:fb:06:37:ef:83:90:c0:9e:18:1c:
                    5a:67:5e:aa:23:b0:bd:6f:62:de:f6:5e:e3:c0:11:
                    42:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D4:AF:FB:1E:14:8B:DB:0B:C3:C3:5C:6F:A3:CD:69:D1:77:26:2D
            X509v3 Authority Key Identifier:
                keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e32342e31322e302f32332d3233203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:b5:d2:70:97:fa:b4:86:34:a2:e2:92:55:46:a2:2b:f5:96:
         5a:19:a2:30:1b:5b:2f:79:c3:d0:61:87:b8:db:02:3f:bd:64:
         c5:1b:9c:6e:7d:c3:41:8b:c0:b3:d6:98:76:38:ef:86:2b:ac:
         e9:06:dd:2c:b0:33:fc:b9:2a:c4:d0:9a:4d:32:b3:3e:82:c5:
         96:99:3f:d9:95:a1:7a:bc:e8:8b:e7:67:d4:cf:62:9f:01:ca:
         12:08:ee:e2:2c:06:b8:a7:00:7a:b4:9c:95:7c:95:28:26:cc:
         1e:40:d3:bb:3f:89:c0:5c:e0:82:14:c7:5e:6b:ad:a2:b1:66:
         a5:f6:be:04:32:2c:97:01:39:c2:68:b6:48:93:88:01:3d:34:
         50:be:2c:bb:c1:16:3a:1a:4f:39:cb:69:7c:c5:ec:77:63:f5:
         21:6f:39:09:b0:4d:9f:6a:1a:da:9c:6e:7c:37:63:50:a8:83:
         e6:ac:69:90:29:eb:71:b0:97:64:96:5c:85:ae:7d:d3:75:c4:
         3b:e9:f1:71:96:16:10:b5:59:11:f7:2f:7f:40:55:fd:3e:47:
         6a:a0:11:ad:89:f5:92:d8:7e:f1:1b:ac:de:13:9f:9d:51:56:
         c5:b9:8a:44:5b:29:9e:da:15:36:a6:9c:f1:b0:5d:a0:96:b1:
         16:96:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:43 2026 by rpki-client