Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa
File:                     3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (raw, json)
Hash identifier:          UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=
Subject key identifier:   53:B2:F5:B0:6D:48:2F:3E:BE:C2:27:60:C2:CD:B6:6D:10:A0:DD:49
Certificate issuer:       /CN=60E799376F38EB181976A659060E6D998B4DB2D3
Certificate serial:       1DFB61023D0C0A5224AC42FD65760FE9D6AF3A97
Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa
Signing time:             Sun 03 May 2026 03:14:54 +0000
ROA not before:           Sun 03 May 2026 03:09:54 +0000
ROA not after:            Sun 02 May 2027 03:14:54 +0000
asID:                     139433
IP address blocks:        103.144.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
                          rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fb:61:02:3d:0c:0a:52:24:ac:42:fd:65:76:0f:e9:d6:af:3a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3
        Validity
            Not Before: May  3 03:09:54 2026 GMT
            Not After : May  2 03:14:54 2027 GMT
        Subject: CN=53B2F5B06D482F3EBEC22760C2CDB66D10A0DD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:9e:80:14:d8:df:03:63:7e:41:81:36:fe:
                    90:de:55:df:0b:ce:95:72:c9:ba:43:25:b8:d5:28:
                    8d:1a:de:d6:33:f7:83:a7:93:51:36:37:f0:db:19:
                    17:8b:74:1a:ea:47:93:e4:b6:f1:df:58:10:9e:43:
                    87:b4:44:62:67:50:28:75:26:47:b6:f9:9e:85:6d:
                    93:6a:54:28:f0:d6:af:4e:68:70:51:3a:9c:ac:c4:
                    31:35:1b:0c:9b:7f:7f:b3:b7:b0:9f:5e:94:9f:ac:
                    d4:0f:22:c7:81:4f:22:5e:6f:8c:a8:a3:81:7d:5b:
                    ee:86:a8:c0:56:6f:18:a4:de:45:41:b8:1f:ce:02:
                    b8:c0:23:87:e0:e0:c0:6f:8e:57:dc:4c:aa:d6:41:
                    37:31:37:45:c9:ff:fd:a8:46:43:5e:05:51:fe:b9:
                    29:7a:e5:6a:40:7e:19:f6:cd:61:81:c7:fa:06:75:
                    8a:c1:b5:72:64:73:42:e6:96:0c:10:4d:19:ec:cc:
                    59:44:e3:1e:4e:1e:50:42:09:84:1b:ae:b8:ec:34:
                    62:1b:47:a3:01:07:ad:a6:69:dd:59:d3:b5:a6:8b:
                    39:cc:64:95:80:2f:d0:54:c0:5d:25:1f:dc:2e:92:
                    56:07:40:8e:11:8f:2d:4c:22:32:3c:4c:a0:45:be:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B2:F5:B0:6D:48:2F:3E:BE:C2:27:60:C2:CD:B6:6D:10:A0:DD:49
            X509v3 Authority Key Identifier:
                keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:57:c4:56:c1:3f:6d:d7:21:eb:5a:5b:af:aa:08:4a:f5:a3:
         3f:9e:71:69:37:51:9a:38:3f:ba:7f:a7:9f:6f:6e:fc:e3:d4:
         db:6a:3b:dd:bf:9e:03:d0:ae:96:a5:65:1b:da:73:88:93:02:
         ab:7c:13:61:73:c5:2e:d7:f0:6b:b8:3d:76:71:22:1b:4a:24:
         1c:2c:8c:76:31:52:5d:d9:50:67:c7:00:32:23:eb:af:a7:e0:
         bd:41:69:12:55:10:2b:36:5d:81:94:3a:45:45:b5:65:ce:aa:
         a5:8c:43:f7:8f:70:dd:b3:c4:31:78:76:04:a7:0f:6f:a6:02:
         9f:88:a2:9e:14:20:fc:a7:35:c7:3c:35:01:7e:f5:f3:8c:61:
         c7:7d:25:d6:d0:85:e3:b3:7c:3b:66:93:e7:5e:e1:34:da:fd:
         1a:ca:6f:c2:25:4a:a0:6d:d6:ed:2f:98:19:12:5a:ec:e6:26:
         86:f1:11:4c:1d:f4:05:e8:74:52:c3:bf:f0:0e:ea:5b:3f:99:
         29:b0:7d:0b:dc:7c:af:0a:e8:8a:d3:a1:10:4a:b3:46:64:30:
         80:13:52:7c:9e:32:b3:c6:fd:fd:b3:67:76:1c:70:39:ba:45:
         db:9f:26:a7:24:19:62:3a:f4:4c:e4:73:15:4b:7f:75:da:e4:
         c9:98:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:01 2026 by rpki-client