Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa
File:                     3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (raw, json)
Hash identifier:          CodcG2RlcElofIyHkhWkjp7iwOM0brF/BMzNO8nhSZI=
Subject key identifier:   39:04:6D:4A:F6:C6:FA:E4:63:94:CF:DD:83:89:39:E8:1F:A2:57:78
Certificate issuer:       /CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5
Certificate serial:       1E4C14E3B4D073427FCE56646F2DF3E472EEB313
Authority key identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa
Signing time:             Sun 03 May 2026 03:13:21 +0000
ROA not before:           Sun 03 May 2026 03:08:21 +0000
ROA not after:            Sun 02 May 2027 03:13:21 +0000
asID:                     139977
IP address blocks:        103.130.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl
                          rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4c:14:e3:b4:d0:73:42:7f:ce:56:64:6f:2d:f3:e4:72:ee:b3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5
        Validity
            Not Before: May  3 03:08:21 2026 GMT
            Not After : May  2 03:13:21 2027 GMT
        Subject: CN=39046D4AF6C6FAE46394CFDD838939E81FA25778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:89:51:ee:72:84:f9:7a:78:92:86:34:0f:
                    fe:af:6c:7c:41:d7:2b:5b:e9:38:d4:eb:3f:63:3e:
                    2b:07:1b:8b:ef:b7:54:6f:a6:70:a4:22:bd:79:aa:
                    47:fc:f5:67:78:70:9b:e6:50:b2:d7:fb:b8:ca:0b:
                    cb:28:89:59:e5:e9:fe:a1:50:5e:2e:6e:63:ad:92:
                    f9:3d:03:59:5f:d1:42:97:d0:d8:a4:61:f2:ab:ee:
                    4c:2f:7b:2f:57:8a:ab:26:2e:ed:13:f1:c5:7e:40:
                    e7:d3:99:eb:bc:b3:f3:cb:23:99:32:34:e4:40:f3:
                    87:6a:e4:68:85:b7:b2:c8:69:f9:c4:af:62:87:25:
                    4c:da:89:1c:a2:aa:ce:20:02:7a:70:09:d2:c8:c7:
                    97:85:0f:c0:7f:8f:70:91:e0:cc:1b:2e:f7:79:ab:
                    9a:09:b5:1e:25:cf:b8:16:9a:4d:d6:55:bb:fc:60:
                    06:07:f1:97:4a:11:ef:12:04:25:52:06:2e:ab:43:
                    df:87:d3:62:eb:c9:21:d0:83:23:88:c7:be:af:12:
                    1b:2c:8f:9c:a9:25:eb:80:fc:7d:66:6e:9d:c6:4d:
                    90:63:39:ad:8c:e0:d0:3e:4c:ec:20:73:c8:26:f5:
                    97:a3:3b:01:49:73:7c:9a:99:71:99:e2:98:e6:7b:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:04:6D:4A:F6:C6:FA:E4:63:94:CF:DD:83:89:39:E8:1F:A2:57:78
            X509v3 Authority Key Identifier:
                keyid:98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:e4:37:4a:41:f6:27:8e:74:d5:5d:57:17:67:ed:c3:33:4f:
         8a:c3:79:28:c0:2f:da:b9:90:a7:b2:6c:d4:8f:b6:92:04:a7:
         14:59:77:74:45:e2:1e:91:0c:cb:d5:30:25:1d:d3:e3:58:f3:
         f2:96:32:55:e8:8a:49:eb:46:2e:6c:ce:36:9d:05:14:02:4c:
         ab:ca:1a:e0:40:71:d5:2b:74:e6:e7:95:88:43:9b:f4:5d:a4:
         43:d0:0b:a7:92:52:96:50:89:e6:06:74:f9:85:83:b4:58:46:
         a5:37:57:06:49:c9:a2:1d:18:e8:20:8f:7f:54:a5:bc:b1:a2:
         ca:08:da:94:6e:e4:29:bd:4c:bf:a1:c1:f2:ce:f3:28:50:cd:
         88:de:e5:74:b7:7d:a8:94:af:30:da:ff:da:4f:6a:84:ad:83:
         f1:cd:5e:a6:22:06:24:d5:fe:2f:c2:a0:26:dd:8c:b2:73:01:
         9b:b1:04:a4:f7:6a:78:98:c2:84:1b:12:f8:3d:8d:2f:12:c7:
         2f:c3:6a:f7:9b:85:81:11:5e:5a:11:15:44:17:8f:13:14:f8:
         ed:bd:8b:ae:26:48:a5:09:e6:be:e1:fa:99:ec:0a:f9:b7:f7:
         52:54:66:54:22:e2:e2:de:98:ed:6b:42:cc:a3:72:8c:d1:74:
         dc:e9:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:03 2026 by rpki-client