Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/3130332e3133362e3136332e302f32342d3234203d3e20313533303837.roa
File:                     3130332e3133362e3136332e302f32342d3234203d3e20313533303837.roa (raw, json)
Hash identifier:          CFruJxQ8MuHheDh6JK+NFFi5zCnJspnYlHEXIeAZWII=
Subject key identifier:   A6:A6:F3:2E:FE:73:12:FB:C1:C4:69:D0:FB:C1:D1:FD:BD:0C:66:DF
Certificate issuer:       /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Certificate serial:       054069EDFB4830B5C3309293B30FB5BD557098D0
Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/3130332e3133362e3136332e302f32342d3234203d3e20313533303837.roa
Signing time:             Sun 03 May 2026 02:11:46 +0000
ROA not before:           Sun 03 May 2026 02:06:46 +0000
ROA not after:            Sun 02 May 2027 02:11:46 +0000
asID:                     153087
IP address blocks:        103.136.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
                          rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:40:69:ed:fb:48:30:b5:c3:30:92:93:b3:0f:b5:bd:55:70:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
        Validity
            Not Before: May  3 02:06:46 2026 GMT
            Not After : May  2 02:11:46 2027 GMT
        Subject: CN=A6A6F32EFE7312FBC1C469D0FBC1D1FDBD0C66DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:d8:00:9a:35:9b:3e:07:6b:c9:d3:f9:37:
                    36:97:3f:89:78:7a:97:ae:8f:ec:46:29:86:c4:cd:
                    c7:3f:67:84:29:87:e5:91:0f:65:9f:f4:09:29:3e:
                    bd:17:c7:55:bc:37:ba:c2:fb:4b:9e:75:0d:8e:be:
                    58:6b:e2:0b:7e:f1:1e:bc:09:59:12:ea:5f:0a:ac:
                    ba:11:02:4a:df:ad:89:6c:8c:2e:45:dc:3d:61:13:
                    5c:ac:56:e1:4e:ba:64:d9:9f:e7:89:19:24:19:59:
                    28:3a:08:51:b6:85:5e:37:f8:f8:8c:ac:80:dd:74:
                    98:76:87:d6:dd:65:76:fa:56:4b:04:8e:36:d8:16:
                    18:16:11:32:63:37:78:11:02:42:3c:9e:55:98:68:
                    87:a4:05:ff:71:6b:82:d7:9c:8c:89:5b:9e:1b:2c:
                    b7:d0:f0:29:60:a6:61:f4:0b:14:4a:5f:07:a5:8c:
                    03:7d:21:b7:90:af:96:63:27:fb:b2:bd:14:1d:21:
                    b5:74:5a:8c:f6:fa:6f:bd:47:fc:de:e3:0a:3f:b2:
                    af:0e:93:05:29:14:4c:bc:e6:e7:b5:89:7a:3f:93:
                    c9:53:9f:33:58:f9:92:48:7d:1c:1f:cd:f5:75:5e:
                    2f:da:9a:63:01:0a:78:77:91:9a:89:7b:72:27:c2:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A6:F3:2E:FE:73:12:FB:C1:C4:69:D0:FB:C1:D1:FD:BD:0C:66:DF
            X509v3 Authority Key Identifier:
                keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/3130332e3133362e3136332e302f32342d3234203d3e20313533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:93:45:02:98:ea:61:11:5b:3d:e1:2c:ca:29:b3:e1:e8:46:
         64:05:72:35:70:5c:c9:bc:bc:e3:d1:ef:8d:37:df:29:d7:b7:
         a2:20:b6:72:0f:31:e0:b4:aa:47:65:01:0b:58:a3:11:80:bd:
         e7:68:29:ff:ac:96:e8:53:be:a8:2e:d6:25:38:20:71:6a:ae:
         0b:9d:eb:0a:9d:49:1d:3a:54:69:f7:8c:d1:d9:61:59:c6:b4:
         9b:48:1b:f2:f7:83:02:5a:41:66:5e:8b:12:57:7b:3a:eb:bd:
         22:95:08:36:0d:34:90:a2:ee:5d:a4:47:35:47:57:18:35:f9:
         eb:34:c3:13:db:cd:79:78:65:16:b0:6a:06:ec:98:74:bc:cc:
         e3:ae:9b:d6:9e:45:43:ad:6a:d5:ce:d1:f2:97:fa:bd:8b:59:
         70:42:8d:07:df:bb:72:18:86:71:f4:b5:1a:0c:22:d3:fc:a2:
         ec:df:dd:4b:91:9e:aa:8f:aa:9e:be:54:77:8e:e4:d5:e7:17:
         55:fd:d8:7d:c5:34:a6:65:55:12:fc:25:19:74:b2:77:9b:bf:
         69:70:ca:d2:4d:5d:4f:ee:d1:3a:81:be:7c:18:98:a1:1a:4a:
         77:90:83:b6:fd:44:da:e5:2c:ff:44:0b:90:05:46:b1:fc:67:
         4f:0d:00:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:19 2026 by rpki-client