Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa
File:                     3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (raw, json)
Hash identifier:          c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=
Subject key identifier:   E5:02:94:8F:D9:6D:DD:B1:A0:93:49:D4:39:12:FB:45:44:46:63:D4
Certificate issuer:       /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877
Certificate serial:       0958F0D9AF69DFF498333ABEEF4E9953151C3B3A
Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa
Signing time:             Sun 03 May 2026 02:14:39 +0000
ROA not before:           Sun 03 May 2026 02:09:39 +0000
ROA not after:            Sun 02 May 2027 02:14:39 +0000
asID:                     63930
IP address blocks:        103.120.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl
                          rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 21:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:58:f0:d9:af:69:df:f4:98:33:3a:be:ef:4e:99:53:15:1c:3b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877
        Validity
            Not Before: May  3 02:09:39 2026 GMT
            Not After : May  2 02:14:39 2027 GMT
        Subject: CN=E502948FD96DDDB1A09349D43912FB45444663D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:c5:b2:48:2f:bf:a0:f7:7e:86:7c:3b:14:
                    a4:af:8b:2a:13:34:31:e7:02:bf:03:a2:ed:ea:ae:
                    2c:7c:1d:64:3c:72:af:62:c5:c4:51:10:7e:e7:14:
                    99:5e:df:83:5e:22:83:7f:5d:01:e6:8f:3e:88:a6:
                    7b:58:45:98:ac:13:a2:5d:bd:e4:bf:2b:78:40:53:
                    16:b6:97:8d:78:5d:47:ee:ff:57:cf:55:1c:07:97:
                    f8:b4:3c:bf:47:b1:4a:f1:00:7f:1e:a8:94:44:3b:
                    2b:e5:84:d9:63:34:8c:b6:12:41:e8:14:87:c1:bf:
                    23:e9:b7:87:83:77:fb:1d:55:64:41:e2:45:89:83:
                    33:57:fa:ad:06:5c:28:8b:25:f0:a9:d7:1d:63:24:
                    b3:18:c7:b6:33:6c:a2:48:78:f1:8a:d0:f3:6f:72:
                    16:ef:a8:95:6a:15:a9:26:0f:16:37:d6:ef:84:ce:
                    cd:63:51:84:2b:6b:ac:b1:9f:d6:4a:05:06:92:39:
                    0c:4a:b8:7d:17:1d:2a:d5:15:eb:6d:4f:17:e6:11:
                    95:e0:df:df:c8:16:4a:40:e7:41:ef:c4:27:95:fe:
                    e5:1f:08:c6:75:9c:f8:de:83:90:36:86:fc:8b:83:
                    3e:ea:1e:3b:22:89:1a:04:b5:d2:29:34:7a:d7:fd:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:02:94:8F:D9:6D:DD:B1:A0:93:49:D4:39:12:FB:45:44:46:63:D4
            X509v3 Authority Key Identifier:
                keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:82:b6:ee:a7:79:c1:ca:99:21:51:e5:90:8b:c0:9f:f5:
         dc:b0:6e:fd:2f:c7:6f:17:60:38:2d:83:a8:23:41:51:d5:c7:
         07:8e:cf:17:eb:62:4c:6d:6c:f4:7d:00:99:07:9a:ed:74:40:
         8c:5c:ec:af:f6:4a:ad:e9:de:3a:9e:68:76:bc:b2:13:ef:60:
         09:e7:70:e2:bd:27:e4:b9:2f:dd:96:62:41:44:86:05:08:6a:
         a6:a5:96:35:87:72:ba:25:1a:7b:5e:f0:de:20:14:20:1e:56:
         4d:83:98:6a:15:b9:e4:43:f1:d1:81:9c:eb:18:e9:34:e8:65:
         68:36:4d:91:40:78:b9:7c:d6:d0:8c:c6:d7:85:e8:3a:9d:e2:
         eb:c9:12:d6:d5:a6:f4:c6:62:0b:60:29:04:22:44:2a:bf:2e:
         15:77:7a:bf:3e:e1:5b:f3:95:22:54:43:90:e4:fe:8a:06:21:
         81:40:72:43:10:d8:43:49:6f:a2:3a:f7:bb:03:e0:d4:6b:12:
         1c:9c:5f:fc:b0:d5:4b:16:1a:b9:0c:33:37:d6:47:3f:19:ce:
         ab:7d:2a:1a:a2:86:bc:87:75:2d:55:bf:d9:fe:5a:2a:74:ec:
         96:e7:04:c6:13:91:f9:6d:df:e8:7f:be:dd:a1:ee:c3:11:d6:
         46:eb:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:06 2026 by rpki-client