Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa
File:                     3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (raw, json)
Hash identifier:          l0X0+poFCOAwI1du4qGF+veeFoCLhTMTvuXxlX7wlYc=
Subject key identifier:   78:9D:2F:AB:BA:47:13:4F:E8:9E:6C:36:6E:59:05:91:69:B5:78:68
Certificate issuer:       /CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46
Certificate serial:       7FB965C08D18408681714E0514F988D90381DD5F
Authority key identifier: E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa
Signing time:             Sun 03 May 2026 03:15:24 +0000
ROA not before:           Sun 03 May 2026 03:10:24 +0000
ROA not after:            Sun 02 May 2027 03:15:24 +0000
asID:                     138901
IP address blocks:        103.139.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl
                          rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b9:65:c0:8d:18:40:86:81:71:4e:05:14:f9:88:d9:03:81:dd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46
        Validity
            Not Before: May  3 03:10:24 2026 GMT
            Not After : May  2 03:15:24 2027 GMT
        Subject: CN=789D2FABBA47134FE89E6C366E59059169B57868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:a7:d0:0a:61:62:25:4b:32:42:7a:f9:0f:
                    c5:4b:37:a3:20:14:a8:ca:86:28:0b:82:66:7a:96:
                    74:4e:88:0d:2e:ec:8e:a8:53:10:77:2a:44:35:33:
                    10:b1:f2:55:58:06:7b:60:c0:29:91:67:75:ab:cf:
                    6a:43:73:0e:db:61:d9:d6:a0:de:02:cb:ba:e4:3b:
                    a4:a0:17:8f:39:4e:2e:41:37:3f:c5:9b:82:f3:7a:
                    0c:4b:d8:31:e5:ba:6c:d7:37:1f:1b:9d:95:84:9b:
                    c8:a2:2c:e4:92:34:a3:1b:9d:71:be:7b:44:77:21:
                    0e:be:59:88:46:d8:2a:0d:b5:f1:d4:98:2f:4e:bd:
                    27:a4:58:f8:8e:53:3d:5f:6e:96:83:20:88:8a:41:
                    f5:5e:73:63:dc:f9:b7:b6:3a:c5:41:dd:61:66:f9:
                    55:17:c6:f2:1c:ca:26:b9:cf:3c:9e:58:0e:85:37:
                    90:12:aa:68:f8:62:7e:34:ef:63:e7:da:13:8e:21:
                    0b:c2:0b:f0:e9:f2:3a:76:fa:66:bf:99:fe:7d:90:
                    63:1c:9d:f8:1b:7a:34:4c:01:4f:74:ac:c5:9e:37:
                    10:bc:c9:74:37:48:58:84:0b:03:be:c7:82:d7:de:
                    53:62:dd:21:89:2e:69:de:ac:0d:19:3b:00:3d:38:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9D:2F:AB:BA:47:13:4F:E8:9E:6C:36:6E:59:05:91:69:B5:78:68
            X509v3 Authority Key Identifier:
                keyid:E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:8d:29:be:99:5b:bf:5b:8c:ff:52:29:7e:2d:bc:1f:bb:b8:
         28:59:74:65:2b:94:46:5b:95:56:d6:f4:85:b4:f4:12:b7:9d:
         0f:dc:17:a7:37:a3:65:51:1c:b5:16:1a:82:f5:a7:e1:b8:5d:
         3c:5c:26:e6:c2:6f:55:5d:51:2f:98:8f:1a:7b:e9:58:75:db:
         7c:3d:d9:63:84:bb:f5:65:47:bd:9c:da:59:cc:3d:3f:ae:51:
         08:14:25:0c:16:fd:7c:aa:f2:4b:45:e2:76:0b:61:40:6b:89:
         8e:44:f4:56:3e:db:c0:a6:9c:d7:24:49:83:9e:74:d5:4d:5a:
         1a:7a:cf:e3:b6:3a:31:5a:94:a9:46:52:94:38:68:25:72:1f:
         db:de:3b:4a:96:11:e3:41:d8:80:11:68:25:9e:57:7c:7e:39:
         ad:c5:e6:bf:0d:eb:c4:4c:99:b9:91:85:d2:56:84:1f:4c:ad:
         f4:54:27:37:71:fc:ac:8e:8e:19:c1:49:26:96:64:97:f3:cd:
         ca:1a:9c:73:f0:ae:d3:0a:eb:e4:f9:92:6f:e3:90:41:14:db:
         5e:9e:12:1c:ef:bf:6f:99:f2:d0:52:73:82:c8:61:34:b7:32:
         75:30:b9:b9:62:c6:e6:f3:39:7e:e1:d8:e5:31:72:b0:6c:85:
         ac:20:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:57 2026 by rpki-client