Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa
File:                     3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (raw, json)
Hash identifier:          fjuzJS9VCKizjfIN5unaQZhEiXot8Mm25qklVdFMhbs=
Subject key identifier:   94:2B:1C:26:CB:22:ED:3B:DB:F9:E9:64:06:F3:2F:F4:DA:70:57:46
Certificate issuer:       /CN=1351A2C01F31DE3BE0AE00B957282481FA877D80
Certificate serial:       39806D49ACD8261B0ECD6DA1E2DF84D2C40A675A
Authority key identifier: 13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa
Signing time:             Sun 03 May 2026 02:11:24 +0000
ROA not before:           Sun 03 May 2026 02:06:24 +0000
ROA not after:            Sun 02 May 2027 02:11:24 +0000
asID:                     147078
IP address blocks:        103.173.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl
                          rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:80:6d:49:ac:d8:26:1b:0e:cd:6d:a1:e2:df:84:d2:c4:0a:67:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1351A2C01F31DE3BE0AE00B957282481FA877D80
        Validity
            Not Before: May  3 02:06:24 2026 GMT
            Not After : May  2 02:11:24 2027 GMT
        Subject: CN=942B1C26CB22ED3BDBF9E96406F32FF4DA705746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:86:23:cd:8a:29:c1:b4:71:4c:26:2c:32:71:
                    9b:fd:8b:89:af:12:8c:4e:0b:7e:32:32:2b:e2:41:
                    54:32:cb:bd:ef:4e:01:6e:92:1e:20:7e:d3:32:e7:
                    1b:8d:9d:53:bd:1b:d4:2a:27:6c:12:ae:e0:72:bf:
                    f2:3a:f1:1e:8b:51:46:ab:f6:97:31:9d:13:ce:48:
                    bf:4f:6a:13:fa:77:e6:f0:a6:54:76:fd:3e:b2:a7:
                    20:56:5e:69:f6:71:4f:ec:1a:ad:4a:ee:fe:48:6f:
                    89:b9:b5:6c:d9:cf:2d:5c:cd:a8:ac:48:3d:ad:12:
                    dd:7f:e0:3f:6b:64:41:03:10:e2:1f:04:e7:01:5a:
                    fd:b7:33:84:74:c0:14:ca:83:38:51:84:f9:52:1c:
                    24:19:30:a4:a6:db:69:f3:bf:2f:90:38:b2:4f:d8:
                    77:c1:5a:a1:50:02:60:26:00:a4:a2:8b:21:78:1a:
                    f3:01:01:42:26:1a:53:cf:9b:ce:5f:c6:30:00:3d:
                    e2:b7:98:a7:c3:9b:d1:54:a6:78:b9:21:ae:e0:41:
                    57:09:0e:c1:a6:3f:ea:92:48:20:e6:f3:ce:6e:be:
                    74:f3:21:e4:8a:df:5f:ea:d6:d2:76:2c:ee:a9:48:
                    92:0a:e0:eb:55:47:3a:64:d5:e0:bb:ec:3f:ff:a8:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2B:1C:26:CB:22:ED:3B:DB:F9:E9:64:06:F3:2F:F4:DA:70:57:46
            X509v3 Authority Key Identifier:
                keyid:13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:08:4a:47:65:a7:dc:b2:f5:de:56:3b:30:1e:6e:e2:79:
         b8:97:81:7b:c2:a4:b5:36:30:f7:de:79:81:37:ff:14:d3:41:
         bf:28:75:9e:94:3b:53:8d:ec:ac:7e:75:80:27:88:1f:50:2a:
         71:47:5d:ba:92:ca:5a:60:90:46:25:59:ae:49:d6:71:38:d6:
         2c:f2:24:1b:8b:54:5d:1f:39:fd:cc:2d:b8:47:ce:ae:b4:68:
         75:c6:cb:ee:83:1f:2a:6c:88:4b:c2:75:cf:1a:67:d4:3c:fc:
         33:f8:3f:dc:85:bd:8a:49:54:cc:4e:04:03:ca:39:75:53:25:
         4a:4f:b7:d3:88:66:45:50:7f:56:fa:09:d1:7a:47:7a:53:31:
         51:cc:10:5a:af:95:65:96:c7:12:e8:12:72:43:cf:31:9e:fe:
         b7:2b:d6:38:c5:f2:75:d6:10:0c:fe:0a:26:0e:2d:c8:69:9b:
         cc:32:3b:7f:5a:c8:45:16:7d:5c:1d:a0:9e:45:c6:e5:02:af:
         7d:9e:5e:f9:06:2c:f4:be:e0:60:ff:f8:bd:ff:e4:d7:47:5e:
         97:41:bc:6b:d0:0b:3e:ba:c5:91:6f:38:05:ee:9d:3d:ec:1d:
         42:c9:20:da:0d:74:0a:d2:75:06:5d:03:16:5f:c6:09:be:ed:
         f5:f7:50:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:57:41 2026 by rpki-client