Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa
File:                     3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (raw, json)
Hash identifier:          tpKpZ6LssVkLx3IYdUKkyDS0W8NfoVDk5SRsQs5iXeQ=
Subject key identifier:   DA:93:C1:E6:E0:EC:BE:8E:2B:AA:DD:1D:F9:59:F6:2E:C9:94:63:EE
Certificate issuer:       /CN=FC2134DAE4378B90D9026728D4F693714082E391
Certificate serial:       745BAE1EC28E4EF54B18FC80DB487FC4F4C5799D
Authority key identifier: FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa
Signing time:             Sun 03 May 2026 03:14:36 +0000
ROA not before:           Sun 03 May 2026 03:09:36 +0000
ROA not after:            Sun 02 May 2027 03:14:36 +0000
asID:                     137373
IP address blocks:        103.120.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
                          rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5b:ae:1e:c2:8e:4e:f5:4b:18:fc:80:db:48:7f:c4:f4:c5:79:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2134DAE4378B90D9026728D4F693714082E391
        Validity
            Not Before: May  3 03:09:36 2026 GMT
            Not After : May  2 03:14:36 2027 GMT
        Subject: CN=DA93C1E6E0ECBE8E2BAADD1DF959F62EC99463EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:f1:99:ae:e7:4f:f8:79:de:54:a7:0f:bc:
                    7d:aa:4e:e2:41:69:9c:90:11:e6:e9:91:23:95:63:
                    a3:fa:39:19:fa:43:70:25:e3:75:7f:c6:24:ac:e0:
                    c5:ba:c0:3f:80:c3:89:d3:13:ab:d9:ae:8d:8b:de:
                    76:37:28:0a:77:7d:a9:a0:ec:f9:6a:6f:b5:41:29:
                    54:e2:ce:bd:bf:26:5a:74:db:c0:7e:46:d8:9e:0f:
                    81:5d:3c:60:44:11:d7:23:06:ac:d3:72:1b:8b:97:
                    0a:bb:b4:2a:d5:67:6e:69:f5:36:9c:da:e9:8f:60:
                    5a:35:0e:c7:2a:22:28:65:12:e0:b4:fa:e9:b4:b7:
                    db:ae:d4:49:94:c7:e8:e2:fe:dc:e6:f5:c2:9c:1d:
                    8e:ff:a5:93:d0:18:1a:2c:fa:ab:37:0b:de:57:68:
                    7f:4f:70:01:23:ed:7b:ed:c4:be:54:da:c2:51:0a:
                    61:0f:d5:2c:18:e9:76:7a:19:b0:5d:e3:a1:18:16:
                    c6:18:36:7a:89:90:9e:23:e3:a3:a4:cd:64:53:9c:
                    9b:7a:46:7d:af:3e:88:54:8b:84:a7:c8:e5:d8:fb:
                    a6:49:96:e9:84:f8:85:f1:5c:4c:24:71:c5:db:59:
                    1e:44:d1:3c:39:59:db:93:dc:5c:1d:aa:06:4e:86:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:93:C1:E6:E0:EC:BE:8E:2B:AA:DD:1D:F9:59:F6:2E:C9:94:63:EE
            X509v3 Authority Key Identifier:
                keyid:FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:2c:76:c5:a4:c5:6b:42:1f:89:44:92:6c:6c:62:df:b5:
         82:e3:29:91:31:27:17:31:3a:04:4e:3c:7e:56:97:15:a1:fc:
         21:ab:9b:8d:8a:a3:3b:06:72:7d:e9:f7:7f:cc:4b:71:1e:d7:
         10:c2:1d:4d:5d:25:1a:05:16:a3:66:0b:a8:6b:be:8d:cd:9f:
         75:6c:3e:6d:71:06:46:93:30:bb:df:bb:48:76:06:85:64:b9:
         1b:64:99:c9:3b:9d:79:0b:66:42:1b:15:ae:95:b6:89:f9:5b:
         bd:3f:0d:0f:0d:a6:1a:06:5c:3a:6c:31:f4:f8:fb:af:ac:58:
         28:24:5f:9d:fa:e1:ae:d2:27:fb:7f:ea:3d:bb:d9:a5:a8:49:
         92:3a:67:c0:ac:67:de:25:ee:ec:75:f9:9a:76:8b:1b:6b:b9:
         60:3d:9c:40:7c:fe:68:8c:03:04:f8:72:45:d6:7e:33:9b:c6:
         bf:f7:9a:98:4c:bb:57:c9:dc:a6:6f:32:c4:0a:eb:b5:7d:92:
         62:f0:e9:0a:0b:55:41:46:fc:8f:5b:cf:36:94:ed:c6:d4:be:
         ae:73:44:75:51:77:7c:c9:dc:69:88:3a:ae:9a:86:3a:ad:9d:
         3b:fc:14:43:9f:dc:2b:7a:31:10:99:d2:fb:2b:0f:db:51:b3:
         3f:d6:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:24 2026 by rpki-client