Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39342e302f32342d3234203d3e20313331373338.roa
File:                     3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (raw, json)
Hash identifier:          boDuLeGcrulC4Uynp3CHSUapz3xB3GO6CYNItPeHTs4=
Subject key identifier:   A6:8D:D7:C5:92:4E:5D:11:87:2F:49:BA:B4:FF:9F:AC:B3:63:C3:01
Certificate issuer:       /CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
Certificate serial:       713879A8F83356B225F4ABA46B909756AAF11650
Authority key identifier: ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39342e302f32342d3234203d3e20313331373338.roa
Signing time:             Sun 03 May 2026 03:16:05 +0000
ROA not before:           Sun 03 May 2026 03:11:05 +0000
ROA not after:            Sun 02 May 2027 03:16:05 +0000
asID:                     131738
IP address blocks:        103.21.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl
                          rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:38:79:a8:f8:33:56:b2:25:f4:ab:a4:6b:90:97:56:aa:f1:16:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
        Validity
            Not Before: May  3 03:11:05 2026 GMT
            Not After : May  2 03:16:05 2027 GMT
        Subject: CN=A68DD7C5924E5D11872F49BAB4FF9FACB363C301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:c4:bd:fc:6c:15:9d:fa:75:77:7e:18:8b:
                    ff:0e:fb:d5:fa:f6:07:56:ab:ca:98:4d:5b:e6:54:
                    f1:66:ac:bc:61:db:e8:66:c0:e1:bb:fd:9f:cd:c5:
                    52:e2:eb:e6:67:2d:3f:35:68:69:34:a8:22:2f:2d:
                    77:52:1c:a2:c0:7c:fd:f4:ca:2f:6f:a7:d3:83:2c:
                    b9:94:48:31:7c:44:e8:f3:f1:4d:f8:eb:ce:08:1d:
                    81:9c:ed:3a:ac:02:3b:8c:08:f6:b5:90:09:00:6c:
                    40:56:3c:b6:25:cd:8e:ef:c1:10:1b:9f:c0:04:50:
                    ed:0b:06:73:97:8e:91:91:b6:da:b7:18:38:6e:a8:
                    8e:a0:c9:f6:74:3c:9c:17:5b:af:59:e5:88:f5:b1:
                    4c:bc:dc:d1:e2:3f:4e:c4:a3:11:1a:81:55:3e:2e:
                    3b:6d:b5:76:86:1c:4f:f2:da:0b:90:6c:18:8a:ca:
                    d7:3c:36:8c:00:3f:30:4a:a7:bd:5c:f6:af:ea:56:
                    86:f8:19:f2:dd:e8:9d:1d:a3:33:51:ee:13:e5:de:
                    f8:c1:6f:42:fd:18:7d:2e:8a:2c:4f:f9:f2:90:61:
                    f3:14:4c:8d:e9:77:1c:80:5f:89:7b:fe:18:fa:b2:
                    b0:76:6a:ee:9d:ec:36:e6:b7:39:fa:e7:73:37:35:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8D:D7:C5:92:4E:5D:11:87:2F:49:BA:B4:FF:9F:AC:B3:63:C3:01
            X509v3 Authority Key Identifier:
                keyid:ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39342e302f32342d3234203d3e20313331373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e8:92:e8:18:18:44:8d:bb:f2:10:8a:a2:be:3c:5c:3c:49:6c:
         71:7f:4e:46:74:e0:71:4f:5d:12:60:25:d0:69:26:52:df:28:
         8f:6b:37:62:bd:15:f5:f4:35:52:90:6e:4c:9e:f5:d4:9e:e9:
         93:f8:79:94:1b:43:98:00:ec:5d:76:59:9f:93:2c:ec:64:0d:
         be:07:b4:eb:68:8d:fc:34:17:8f:a1:2c:6f:fc:fe:c4:fa:be:
         2e:85:8c:fe:de:3a:bc:c1:30:f7:b8:44:3d:4f:96:42:e2:9e:
         cd:2e:61:fe:50:1a:1d:fc:c2:b8:9f:e6:78:d7:de:e7:85:c2:
         aa:5f:f5:ab:9d:62:15:cd:d6:f5:05:87:f3:28:cf:0a:47:4e:
         70:7b:c7:15:2e:0d:63:d3:16:d0:fb:2b:fe:a1:e3:6f:db:fb:
         b4:a4:91:2d:21:56:d1:27:6f:3f:b9:1b:3b:68:89:0f:a6:7b:
         43:87:08:5c:e5:cd:ef:d6:6c:72:e3:28:31:66:ff:7b:49:24:
         c2:d1:6f:45:ee:55:eb:5a:fc:9e:f8:f6:9c:d3:5e:8f:cd:14:
         6a:57:34:8e:7f:29:05:a1:1c:0e:07:a9:8a:06:50:10:f8:66:
         08:b2:7f:a2:fc:d5:33:f6:42:7c:06:7e:a4:a8:f0:ac:ba:8e:
         4b:eb:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:33 2026 by rpki-client