Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa
File:                     3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (raw, json)
Hash identifier:          a+oamNLoBLA9eXtliwNmRKAm0bPZaIn2IEdVk6cOO3c=
Subject key identifier:   C4:B1:05:5B:7C:17:E8:7E:AB:52:AC:11:B5:A1:E9:A5:AC:C6:D5:12
Certificate issuer:       /CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF
Certificate serial:       44051F60222ED67CF1648BD393E81FF2D59AB854
Authority key identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa
Signing time:             Sun 03 May 2026 03:19:26 +0000
ROA not before:           Sun 03 May 2026 03:14:26 +0000
ROA not after:            Sun 02 May 2027 03:19:26 +0000
asID:                     150499
IP address blocks:        103.123.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl
                          rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:05:1f:60:22:2e:d6:7c:f1:64:8b:d3:93:e8:1f:f2:d5:9a:b8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF
        Validity
            Not Before: May  3 03:14:26 2026 GMT
            Not After : May  2 03:19:26 2027 GMT
        Subject: CN=C4B1055B7C17E87EAB52AC11B5A1E9A5ACC6D512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:74:5e:77:f8:bd:1f:5c:17:88:83:e5:4c:
                    23:83:6c:de:b9:7b:89:7d:ea:27:2f:d4:d5:a0:cf:
                    b3:aa:79:0c:d7:aa:99:fa:80:4b:1c:47:93:2b:a4:
                    03:d0:a5:27:33:fb:e3:b9:e6:c4:45:4a:6b:0b:f1:
                    95:4b:c3:3f:02:4c:0d:54:0d:ca:10:cb:ca:c6:c8:
                    38:ce:f2:25:42:49:7d:e1:1e:61:8c:d3:79:8c:9c:
                    91:86:47:36:13:d7:ca:f6:78:f2:c0:fe:ba:12:db:
                    0d:2c:7c:41:7d:9c:46:78:55:b7:72:94:5c:b5:1c:
                    35:b4:1d:29:87:59:09:50:c5:53:1c:74:a8:12:9f:
                    29:68:82:3c:bb:2d:c1:09:73:75:54:0a:f4:05:7e:
                    59:16:92:86:2c:98:5b:c0:b7:d4:e6:4e:1e:d2:ba:
                    cd:d3:f3:55:61:e3:d9:e6:3f:a3:a0:92:2b:26:fc:
                    36:c1:64:a6:1b:7c:0a:2c:88:da:d2:7c:da:d9:a1:
                    84:09:85:b1:28:bd:0d:6c:85:8c:0b:ef:4c:d7:e6:
                    fa:ec:b7:ae:53:1b:14:42:d8:06:f6:0e:7c:f5:ec:
                    36:14:22:a8:dd:2b:2a:a9:7d:f5:d3:51:dc:6e:37:
                    56:10:c9:70:b9:cd:02:33:3d:47:8b:3e:31:54:13:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B1:05:5B:7C:17:E8:7E:AB:52:AC:11:B5:A1:E9:A5:AC:C6:D5:12
            X509v3 Authority Key Identifier:
                keyid:7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:15:fb:0f:e9:af:e8:bb:06:28:01:60:33:47:66:8a:a2:33:
         36:86:23:95:2a:b8:03:fd:e5:14:b9:6b:b4:39:cf:44:95:21:
         ca:a8:0e:2b:2b:ba:39:ca:e7:eb:47:d9:d4:69:a7:f0:ac:dc:
         ca:ab:00:9e:ac:a9:05:a9:17:01:d4:d4:c2:2f:fc:77:18:c0:
         37:35:34:e6:76:81:ae:c7:ee:15:d8:31:7a:2c:ab:d4:92:03:
         81:24:be:fe:82:db:9e:71:c6:a9:2d:1f:38:9c:2e:76:f5:78:
         c2:55:03:ea:ad:b0:8d:b8:71:9d:2a:a3:4a:83:f3:9f:0e:4a:
         8e:af:53:70:f8:05:f3:e3:89:78:cb:14:bf:d5:dc:72:9d:94:
         9c:fe:18:cb:5c:78:e0:84:12:de:cb:56:7c:15:cc:9f:08:2e:
         1e:cc:26:a0:a8:5e:2e:d3:10:25:0b:8f:94:d3:4f:b0:11:70:
         de:94:d1:ec:b1:81:53:bc:81:8a:39:b4:bd:6d:bb:81:38:7f:
         e0:0f:0f:a4:b3:56:70:87:bc:25:b9:1f:63:11:f3:d8:0d:a7:
         7b:d3:c3:53:16:ed:c3:f7:d7:ed:29:12:d6:e8:90:04:ef:a4:
         0e:08:dc:06:61:1c:d7:4b:e2:52:5f:46:2b:4e:58:09:c8:5e:
         7f:92:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:35 2026 by rpki-client