Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa
File:                     3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (raw, json)
Hash identifier:          BNXHk+iadWdGSY6Cub+pk9Ujl+UX+bB9yK5bvzbN7zM=
Subject key identifier:   3D:9F:FD:E2:92:16:FC:56:EF:31:88:59:6B:B2:67:98:93:85:D6:08
Certificate issuer:       /CN=EDACCEFD0A794CA978E0CA24ABC96FFBFDAC4846
Certificate serial:       0E168366488C2867464034D8049FDE4F87EA5E10
Authority key identifier: ED:AC:CE:FD:0A:79:4C:A9:78:E0:CA:24:AB:C9:6F:FB:FD:AC:48:46
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDACCEFD0A794CA978E0CA24ABC96FFBFDAC4846.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa
Signing time:             Sun 03 May 2026 03:13:06 +0000
ROA not before:           Sun 03 May 2026 03:08:06 +0000
ROA not after:            Sun 02 May 2027 03:13:06 +0000
asID:                     150203
IP address blocks:        103.118.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/EDACCEFD0A794CA978E0CA24ABC96FFBFDAC4846.crl
                          rsync://rpki-rsync.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/EDACCEFD0A794CA978E0CA24ABC96FFBFDAC4846.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDACCEFD0A794CA978E0CA24ABC96FFBFDAC4846.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:16:83:66:48:8c:28:67:46:40:34:d8:04:9f:de:4f:87:ea:5e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDACCEFD0A794CA978E0CA24ABC96FFBFDAC4846
        Validity
            Not Before: May  3 03:08:06 2026 GMT
            Not After : May  2 03:13:06 2027 GMT
        Subject: CN=3D9FFDE29216FC56EF3188596BB267989385D608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a1:17:2f:ba:d0:d4:7b:28:89:d5:56:82:7a:
                    bf:bb:d4:0a:e7:2e:b2:5e:78:3e:4e:48:ce:70:c3:
                    0e:57:a0:0f:55:c0:8a:5b:01:52:1b:54:49:df:0f:
                    a5:be:aa:87:9d:43:25:23:0c:a0:d6:50:59:38:15:
                    6f:55:4f:40:b4:93:59:a4:69:e8:98:c7:66:cf:bf:
                    94:76:16:0d:62:5e:8c:81:e3:bf:16:79:99:80:a4:
                    2c:48:5e:cc:a1:6a:0b:3b:d4:65:8e:16:91:7b:c6:
                    a0:1b:27:46:c8:85:33:70:80:48:ef:8f:24:24:08:
                    25:4b:c2:a3:70:cd:a8:3a:cd:b7:ef:50:6f:f8:3a:
                    cc:56:2f:71:d5:36:b8:99:c1:ae:f4:ae:a8:bc:e5:
                    35:fb:1a:4a:a7:a5:10:66:12:ca:5d:15:67:69:e3:
                    08:a2:b3:95:13:68:c0:14:62:06:04:ef:04:7d:23:
                    62:1d:4e:f4:88:48:7f:3c:40:7f:a3:93:15:08:e2:
                    3b:68:8a:29:4b:23:fa:6e:a9:bd:82:71:12:7c:74:
                    86:18:0c:3a:36:28:b9:66:9d:91:15:2a:f0:24:62:
                    9d:ab:23:6a:00:9d:f6:8d:61:bd:4c:03:b4:58:3a:
                    32:ef:b8:eb:a4:43:e4:13:93:93:89:5c:5b:0e:12:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9F:FD:E2:92:16:FC:56:EF:31:88:59:6B:B2:67:98:93:85:D6:08
            X509v3 Authority Key Identifier:
                keyid:ED:AC:CE:FD:0A:79:4C:A9:78:E0:CA:24:AB:C9:6F:FB:FD:AC:48:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/EDACCEFD0A794CA978E0CA24ABC96FFBFDAC4846.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDACCEFD0A794CA978E0CA24ABC96FFBFDAC4846.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:c8:56:31:88:87:50:03:8b:56:2f:1c:78:8e:74:4e:56:
         53:b9:03:c6:ed:04:f9:47:3e:53:3e:1c:4c:e8:66:c6:47:bb:
         9f:fd:23:90:48:f3:a2:ca:18:69:a2:d1:22:aa:fc:d5:1c:12:
         d1:6b:fd:cc:5e:fc:82:3a:4c:82:4e:d8:8b:ed:43:0e:5f:21:
         87:62:f7:39:90:63:6b:35:51:1c:9d:fc:81:d7:ec:5e:15:1e:
         43:52:65:35:7c:05:e7:9a:d8:3d:b6:56:11:19:9d:29:ae:d8:
         ff:fb:94:d2:4e:98:7a:6b:33:1c:df:59:c0:72:49:89:06:8c:
         71:49:b2:5f:4c:ac:82:f8:09:f2:47:49:cb:14:eb:58:b4:68:
         19:8a:c7:f6:db:b9:13:7e:86:18:63:e9:96:52:0c:f4:b4:7c:
         51:7a:e9:54:fb:f4:7e:89:5f:2d:f7:21:d3:7a:b1:a2:a4:64:
         ec:50:75:41:b2:01:bf:3d:cb:40:61:20:f0:91:6e:e4:1f:87:
         16:1b:5f:9f:6a:28:63:fd:d2:1e:d3:fa:f8:4d:ce:fa:8a:52:
         de:88:c9:6e:d2:0a:9f:ec:e7:03:8d:22:19:1b:02:d8:70:50:
         b5:e6:b3:4b:10:be:28:f6:06:01:e1:16:94:27:5f:29:39:c5:
         86:f4:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:41 2026 by rpki-client