Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa
File:                     3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa (raw, json)
Hash identifier:          /gdHhjPiw5O01TXyxFcczygwB5WOqGGW1+T8kM1MLjk=
Subject key identifier:   09:61:1F:F3:94:AB:0C:0F:97:3A:3A:0B:CB:7B:1F:0D:64:11:65:EA
Certificate issuer:       /CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
Certificate serial:       1CEB636076B3FAAC81A7E6DBDE64B0CF13B68E78
Authority key identifier: E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa
Signing time:             Sun 03 May 2026 03:13:34 +0000
ROA not before:           Sun 03 May 2026 03:08:34 +0000
ROA not after:            Sun 02 May 2027 03:13:34 +0000
asID:                     139417
IP address blocks:        103.138.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:eb:63:60:76:b3:fa:ac:81:a7:e6:db:de:64:b0:cf:13:b6:8e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E
        Validity
            Not Before: May  3 03:08:34 2026 GMT
            Not After : May  2 03:13:34 2027 GMT
        Subject: CN=09611FF394AB0C0F973A3A0BCB7B1F0D641165EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:b6:cb:fe:b9:53:cd:2d:fb:1e:d9:34:56:
                    e6:96:e0:8f:b6:ab:04:b9:9b:13:1a:e7:18:80:26:
                    d7:12:de:01:56:39:b8:89:52:77:c8:bd:7e:20:e3:
                    80:41:38:a9:db:f2:f5:c9:97:ed:15:06:b1:cf:aa:
                    ec:f4:7c:13:82:8f:a0:12:93:d0:64:2f:63:25:83:
                    ad:e7:ad:f3:a3:45:d3:d4:03:bc:a2:07:69:4d:4f:
                    63:14:fa:dd:e6:7f:0a:6a:ba:48:d8:cc:49:87:16:
                    c4:d4:c1:41:e2:27:f5:17:57:ab:1a:96:80:72:68:
                    e3:6d:e3:02:42:59:28:b3:b5:9e:5e:88:bf:c1:ad:
                    05:ef:43:a0:b2:89:88:91:c6:6d:ef:ca:37:72:c7:
                    0d:2a:30:f1:f0:8a:a2:04:8e:89:4e:50:18:0c:a4:
                    d3:50:b2:3a:fa:1a:83:09:61:53:5f:ee:0a:45:96:
                    15:d3:9e:85:21:d9:53:87:46:c0:89:0b:b3:16:e4:
                    fb:e2:f5:11:27:82:4b:d7:e6:2e:e8:66:b7:ff:27:
                    cc:83:46:e2:02:9d:73:33:27:f7:fb:8f:aa:5d:61:
                    2f:a6:83:5d:83:86:cd:c3:dd:98:f8:c3:5f:8d:c3:
                    1a:0f:e0:fc:d0:e2:60:c9:b5:8f:82:d3:57:d4:0b:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:61:1F:F3:94:AB:0C:0F:97:3A:3A:0B:CB:7B:1F:0D:64:11:65:EA
            X509v3 Authority Key Identifier:
                keyid:E6:60:3C:08:B5:CF:1A:CE:E1:C7:3D:33:C6:00:D4:F4:FD:F5:DC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6603C08B5CF1ACEE1C73D33C600D4F4FDF5DC2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:59:ac:3d:61:fc:15:ad:7e:f5:00:eb:1d:a8:6d:c5:10:94:
         35:bb:51:35:d3:ec:00:19:ec:7c:56:7d:f4:21:58:35:c2:0b:
         70:ee:e1:64:25:b2:20:0f:37:13:5b:3b:f3:c6:88:cb:f7:50:
         44:ff:0e:50:7f:df:c8:6e:c4:b4:9e:da:e7:8b:e6:d6:8a:b5:
         8e:3c:ae:52:0b:e8:29:ae:85:a8:b2:67:a5:4b:bf:43:53:7a:
         c0:a6:37:bc:b8:cf:31:2b:80:ad:dd:11:04:bd:2f:c7:37:86:
         7e:b0:db:e2:c5:4e:dd:1f:64:18:d5:41:77:1b:7a:44:34:07:
         73:16:9c:6d:da:6a:68:e3:6f:df:b8:ed:c8:0d:2d:cd:55:72:
         cb:25:62:d9:3a:93:35:3a:28:82:47:8f:7f:63:31:25:37:b4:
         2c:68:28:a9:3e:11:6a:18:5c:b3:4a:4c:c8:d5:d5:17:26:33:
         72:ae:34:ef:87:43:1d:88:f9:3a:f0:6e:0f:91:46:8e:6a:cb:
         1e:7f:60:19:05:37:66:51:e8:bb:27:0f:df:21:0e:f6:4d:a0:
         86:36:66:92:b3:7a:3c:06:fc:40:4c:65:a5:fe:24:14:d4:c4:
         5d:9f:7a:69:63:a1:9b:fc:ac:fa:24:fe:0e:e9:d3:d2:aa:c7:
         b0:6a:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:25 2026 by rpki-client