Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32322e302f32342d3234203d3e203539313337.roa
File:                     3130332e3235322e32322e302f32342d3234203d3e203539313337.roa (raw, json)
Hash identifier:          1+scwTfe6FoFSzCOMQMP/l1HCgRWBgorKjqDF9t7ojE=
Subject key identifier:   9D:30:20:CF:20:4D:4F:57:D9:99:72:E4:C0:7C:9B:B7:3D:BC:56:84
Certificate issuer:       /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Certificate serial:       7FF0E8A23140FD3F423AD018574418690849145A
Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32322e302f32342d3234203d3e203539313337.roa
Signing time:             Fri 16 Oct 2026 09:31:49 +0000
ROA not before:           Fri 16 Oct 2026 09:26:49 +0000
ROA not after:            Fri 15 Oct 2027 09:31:49 +0000
asID:                     59137
IP address blocks:        103.252.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
                          rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f0:e8:a2:31:40:fd:3f:42:3a:d0:18:57:44:18:69:08:49:14:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
        Validity
            Not Before: Oct 16 09:26:49 2026 GMT
            Not After : Oct 15 09:31:49 2027 GMT
        Subject: CN=9D3020CF204D4F57D99972E4C07C9BB73DBC5684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:82:ea:1a:eb:c9:be:57:29:e4:e7:80:a1:
                    35:9e:dc:5d:f0:31:db:53:b7:b1:b4:65:ec:c5:50:
                    46:d9:b6:75:8f:62:10:84:61:ba:1c:0c:35:6e:c2:
                    66:36:97:c9:d5:83:37:1d:93:0e:4f:94:db:7d:30:
                    6f:7c:ef:27:0b:03:06:ec:92:3c:1d:6c:dd:a8:bf:
                    61:57:e8:48:25:c6:90:00:28:d2:07:f6:16:07:08:
                    34:95:82:ef:28:b9:aa:b2:87:28:a7:8d:ce:10:1f:
                    c8:a0:9f:3e:5d:0f:a5:e0:13:85:dd:70:6f:25:c8:
                    23:6b:e4:80:1b:44:5e:bc:c3:30:7c:0a:4b:03:eb:
                    f1:44:83:49:39:de:0f:c5:62:4d:29:7e:9a:09:52:
                    42:bc:26:02:b6:5d:64:9d:ad:8c:f7:9a:20:08:b7:
                    0d:0a:f9:ee:96:a9:da:fc:82:c4:a4:15:84:c3:db:
                    8a:db:b3:6f:9f:15:2b:77:a9:7e:3b:b7:bc:b5:ba:
                    b7:a1:b6:ab:41:82:91:8c:62:e4:94:44:0d:39:72:
                    c3:bc:51:94:86:31:20:b0:43:26:80:76:6d:e8:92:
                    e1:27:f7:16:3e:03:72:66:62:51:bb:5b:89:49:8e:
                    db:0e:82:c2:69:f9:50:37:4f:e9:41:c6:40:a4:7d:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:30:20:CF:20:4D:4F:57:D9:99:72:E4:C0:7C:9B:B7:3D:BC:56:84
            X509v3 Authority Key Identifier:
                keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32322e302f32342d3234203d3e203539313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:5a:8f:a8:16:f4:1c:aa:80:7f:21:dc:d9:47:9c:cd:66:
         30:22:50:72:e9:8f:43:59:0b:1b:4d:2c:ad:99:78:39:84:c7:
         a3:6e:0c:8a:b3:31:58:40:4f:29:56:16:36:3a:bf:b1:bf:3c:
         42:17:14:25:81:93:78:57:93:4e:d8:9c:2e:0f:58:2b:35:64:
         62:13:69:ea:fd:7a:28:a9:0d:31:8b:c4:69:29:4b:b9:a0:81:
         e5:f0:3d:f8:6e:c8:45:3e:c1:0b:e4:1f:ba:f3:a4:c0:9d:06:
         36:4e:ba:70:4c:52:53:86:4f:99:94:84:26:60:7f:40:f3:3c:
         a6:de:0c:0e:90:40:c6:f5:cc:60:3c:e7:ce:5d:5e:32:f8:b5:
         79:e0:7e:0f:87:a9:a6:5a:e2:af:bc:9d:90:55:4a:3b:51:b1:
         72:99:06:8c:7f:c0:5c:cc:e4:74:75:c8:41:9d:12:d7:27:34:
         39:2b:a4:39:49:d8:32:a4:ba:bb:2c:35:65:db:c0:57:bb:9d:
         8c:98:57:65:ee:26:fe:d5:33:c2:c0:71:71:d2:06:d7:dd:f0:
         e6:e4:78:d6:3f:53:13:98:ba:cb:85:47:40:48:6a:ab:b9:67:
         fa:1a:2d:59:c1:30:82:f4:c0:22:90:94:20:0b:4b:12:e5:4c:
         95:f2:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:04 2026 by rpki-client