Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa
File:                     3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (raw, json)
Hash identifier:          lQI4CztcEE79zTOOfPW2h41crEOkC4qTHc3EICinkHg=
Subject key identifier:   CF:D1:21:E7:7A:2B:B7:35:00:14:19:C7:15:E8:66:94:26:C1:D6:B3
Certificate issuer:       /CN=FC2134DAE4378B90D9026728D4F693714082E391
Certificate serial:       2ECCAC12EB24E4CE717D83C8C462669510441598
Authority key identifier: FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa
Signing time:             Sun 03 May 2026 03:14:36 +0000
ROA not before:           Sun 03 May 2026 03:09:36 +0000
ROA not after:            Sun 02 May 2027 03:14:36 +0000
asID:                     137373
IP address blocks:        103.120.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
                          rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cc:ac:12:eb:24:e4:ce:71:7d:83:c8:c4:62:66:95:10:44:15:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2134DAE4378B90D9026728D4F693714082E391
        Validity
            Not Before: May  3 03:09:36 2026 GMT
            Not After : May  2 03:14:36 2027 GMT
        Subject: CN=CFD121E77A2BB735001419C715E8669426C1D6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:47:b4:e9:d3:0b:bd:2e:05:55:b4:66:4e:
                    32:e7:9b:27:91:6e:e6:68:86:7c:08:d8:01:b5:e9:
                    52:2a:f2:4c:96:e6:5b:85:8f:67:15:1c:cd:69:34:
                    c4:43:88:b9:64:d2:9c:25:c5:8a:53:0e:42:70:c3:
                    95:a5:9b:92:18:31:f6:cc:b9:19:02:e0:18:3f:f7:
                    d6:03:94:0f:ed:b8:df:c1:67:83:2b:ef:8e:05:b3:
                    c9:04:01:9d:c5:07:19:58:2f:43:a2:90:0a:2b:7f:
                    12:92:3f:e0:4d:18:4d:8a:58:e0:ef:88:32:b0:2b:
                    5a:7a:76:77:c0:44:ec:f8:d3:8a:f4:6e:1d:1d:9a:
                    0e:c7:44:d3:1e:29:88:45:0e:c1:71:95:4c:f9:1e:
                    65:6a:db:42:74:ef:0a:c7:69:55:80:f4:9b:82:eb:
                    46:3b:cd:dc:2b:c6:a9:d7:3a:33:85:b8:4c:9d:e6:
                    57:8a:2f:6a:9a:27:7b:5a:b3:89:6d:ae:ab:a9:77:
                    8d:af:9c:1a:fd:b3:9e:e7:af:3f:21:10:8b:75:f6:
                    e0:af:0b:3d:fb:aa:03:e6:e0:54:b2:9d:ab:a1:8d:
                    39:2e:d0:16:f1:c0:15:14:56:98:dd:1c:88:d8:fb:
                    cf:5c:50:89:d6:85:4c:80:e6:23:31:1b:0f:a6:1d:
                    1a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D1:21:E7:7A:2B:B7:35:00:14:19:C7:15:E8:66:94:26:C1:D6:B3
            X509v3 Authority Key Identifier:
                keyid:FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c4:1f:71:0f:fb:24:f2:d9:24:36:c8:56:ce:10:82:62:f4:
         3c:61:7f:7d:88:7c:16:82:dd:e2:61:5e:7e:f1:77:2f:f6:6c:
         ba:57:bd:7b:e6:c2:a7:ec:97:8e:2e:c9:10:1a:ba:9d:ba:a1:
         2d:4a:df:d0:15:cf:ed:26:a7:5e:12:9a:09:51:6a:68:9f:43:
         8f:8d:07:d8:60:64:35:5f:e0:50:b0:c8:01:e2:77:74:58:f9:
         a0:55:c3:9b:8d:dd:ed:82:38:05:18:ec:63:df:0c:20:e2:3d:
         78:c5:45:29:58:45:85:fd:ce:95:34:30:fa:61:2a:8c:16:27:
         81:c1:b2:03:7e:2b:0e:2b:2b:b3:67:e3:e6:3f:a6:ca:74:a3:
         95:47:ec:af:99:66:5d:02:b1:14:73:de:da:f3:57:b0:ad:30:
         26:6c:11:fa:a1:8c:50:db:02:ea:33:54:b4:0b:6f:19:c2:5a:
         d1:d4:2e:c5:e8:4e:43:90:61:3d:e2:69:77:3f:f3:5f:dd:2e:
         cb:89:78:d3:87:33:35:84:b2:62:c0:50:ec:c9:95:25:8a:5c:
         21:e0:a8:0d:04:2f:4e:54:71:e4:22:9d:80:27:b3:e4:d1:4c:
         8b:3b:95:c3:fb:41:c7:35:b6:c3:a6:49:8c:e8:84:a7:ef:31:
         00:89:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:28 2026 by rpki-client