Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa
File:                     3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (raw, json)
Hash identifier:          9NL2C7FOxcvOHwTRTmo9h9A795ncThfKAUagyOzQnW8=
Subject key identifier:   A1:26:69:34:7B:A0:1F:0D:77:98:8B:1C:10:AC:3E:26:93:E2:55:47
Certificate issuer:       /CN=092239A9C28840E7E025454A2EA108ED5A8BF369
Certificate serial:       09C2E08FE0264B76FD336EF4294BEF959297526C
Authority key identifier: 09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa
Signing time:             Sun 03 May 2026 03:17:31 +0000
ROA not before:           Sun 03 May 2026 03:12:31 +0000
ROA not after:            Sun 02 May 2027 03:17:31 +0000
asID:                     135465
IP address blocks:        103.219.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl
                          rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c2:e0:8f:e0:26:4b:76:fd:33:6e:f4:29:4b:ef:95:92:97:52:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092239A9C28840E7E025454A2EA108ED5A8BF369
        Validity
            Not Before: May  3 03:12:31 2026 GMT
            Not After : May  2 03:17:31 2027 GMT
        Subject: CN=A12669347BA01F0D77988B1C10AC3E2693E25547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:6e:5e:a1:18:4d:b5:0a:bc:27:41:4f:6b:
                    bd:70:f7:ef:d0:1e:58:78:f6:22:e0:1d:f3:49:9f:
                    91:b2:6f:bb:01:86:3b:5d:5a:fc:c5:f7:86:db:f8:
                    9b:cb:10:c4:6f:eb:62:03:d5:2e:57:c0:83:bf:4b:
                    02:cf:d9:8e:cd:08:bf:d3:78:55:33:31:61:8f:86:
                    5f:d3:7b:9c:e8:6c:6c:65:b1:a6:7c:34:90:1f:54:
                    4e:ef:5e:88:9d:1e:51:a6:55:a0:fa:83:ae:4d:c8:
                    a2:0d:a4:2f:e9:ff:14:c7:5a:44:3e:b1:61:e2:c6:
                    d7:15:54:6c:cd:dc:67:95:20:a2:1e:f1:c4:cb:eb:
                    ff:a9:7b:0f:fc:1a:f6:11:af:f2:a0:6a:69:53:1c:
                    7c:e2:ab:3c:3d:42:18:b4:02:2d:15:ac:97:91:05:
                    15:34:79:26:db:6f:5b:f0:e6:f1:97:03:6b:da:cf:
                    c6:58:fc:4d:63:cf:cc:93:96:b8:14:6d:a7:8a:fc:
                    28:2c:ad:1a:3e:ec:77:49:95:c8:a5:a9:02:f2:ac:
                    13:d1:0e:72:6c:7b:0a:35:7a:86:b4:ce:ae:3e:e5:
                    e3:71:2d:44:22:2d:8a:e8:34:2d:d7:f9:3f:8e:e3:
                    e9:17:5d:cc:43:2a:95:84:1c:8b:57:00:5a:23:3a:
                    c9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:69:34:7B:A0:1F:0D:77:98:8B:1C:10:AC:3E:26:93:E2:55:47
            X509v3 Authority Key Identifier:
                keyid:09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:df:94:53:4a:1e:93:45:2d:3d:d1:d3:5a:2d:5e:33:56:
         2e:ea:d6:e0:e6:63:4e:81:16:4b:1f:a6:67:e7:9c:7a:b4:7c:
         81:6c:7c:2a:10:90:e7:e5:bb:dd:e5:94:f1:b7:94:83:3d:6e:
         b0:62:16:79:08:59:df:bd:22:95:6f:0d:bb:76:3a:d6:6b:59:
         77:e8:74:cd:35:ed:2f:5c:29:e8:7e:f9:ab:4e:fa:7b:96:0b:
         23:96:b0:45:df:83:6b:05:a3:4a:26:62:c3:92:69:bc:84:1b:
         68:5e:e8:df:f4:48:f1:d1:73:49:3d:f1:81:8b:7c:d2:17:ce:
         06:74:21:ab:b7:ee:fa:0b:fc:3d:4b:17:11:2d:58:64:11:67:
         d3:5f:f2:07:e2:a8:7d:59:64:72:f0:82:51:50:75:cf:fa:52:
         ff:73:cc:39:7a:df:9a:20:f9:3f:b4:f7:85:d9:3b:bf:69:7c:
         a0:3d:a1:02:76:35:17:2a:da:d5:13:89:75:42:c4:8c:15:6e:
         23:b4:b6:e8:ee:c4:ba:cc:47:5d:a4:d0:15:8f:14:8c:f2:36:
         a4:4c:21:a2:e8:21:3f:1b:f6:a8:e5:1b:ee:66:7e:43:f7:a1:
         4e:3c:46:7a:4d:09:84:a1:e6:8e:87:da:ff:68:76:83:9b:09:
         52:c0:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:09 2026 by rpki-client