Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa
File:                     3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (raw, json)
Hash identifier:          z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=
Subject key identifier:   F6:85:2E:2C:EE:32:09:91:65:F9:60:4E:58:C5:48:AA:A3:10:BF:A3
Certificate issuer:       /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244
Certificate serial:       4FD04537A18D43E1D1CA2967969FBA0484B6DAAE
Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa
Signing time:             Sun 03 May 2026 02:12:05 +0000
ROA not before:           Sun 03 May 2026 02:07:05 +0000
ROA not after:            Sun 02 May 2027 02:12:05 +0000
asID:                     136841
IP address blocks:        103.100.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl
                          rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d0:45:37:a1:8d:43:e1:d1:ca:29:67:96:9f:ba:04:84:b6:da:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244
        Validity
            Not Before: May  3 02:07:05 2026 GMT
            Not After : May  2 02:12:05 2027 GMT
        Subject: CN=F6852E2CEE32099165F9604E58C548AAA310BFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ad:0b:b9:d0:22:11:3e:88:a6:ba:c8:a7:c1:
                    cb:bd:b3:9c:6b:01:03:33:d8:d0:a1:1b:6e:4f:66:
                    c4:e9:79:8c:a6:f4:5c:f3:ec:86:5d:a6:b8:0a:dc:
                    3d:eb:01:05:9a:17:f3:65:0f:a0:fb:62:81:66:f0:
                    6f:19:78:35:f5:a2:8a:4c:99:23:91:0b:1f:72:63:
                    87:58:1b:a3:fd:5d:05:bd:15:7f:dc:2b:94:63:9e:
                    8a:51:a1:12:5c:15:03:d9:91:c4:db:ae:6f:b8:36:
                    6a:0f:7a:41:47:94:90:ab:b7:7d:10:5d:a3:ec:b1:
                    83:72:e1:34:25:5d:6c:f9:c4:58:21:41:6f:2c:dd:
                    5f:31:ec:b5:77:53:ea:64:61:4a:21:dd:22:06:28:
                    fe:a8:1e:6f:df:f7:af:65:41:6b:a6:f1:5d:34:28:
                    39:5d:cc:08:b1:6d:c9:61:17:63:3a:6b:e9:1c:56:
                    27:aa:83:be:56:98:6d:99:16:ac:cf:48:0b:5d:e2:
                    05:1e:18:36:21:69:d2:66:b1:3c:39:79:a5:d2:f2:
                    5e:a3:ff:4c:28:8d:6c:d0:54:06:ce:94:70:34:d0:
                    ef:c9:d3:6a:b2:1c:5d:eb:57:41:bf:fb:f2:38:18:
                    36:b5:b4:01:f4:7a:4f:61:da:37:dd:8b:4a:40:17:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:85:2E:2C:EE:32:09:91:65:F9:60:4E:58:C5:48:AA:A3:10:BF:A3
            X509v3 Authority Key Identifier:
                keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:6f:2c:e3:90:20:f9:df:fb:bf:7e:fb:da:d9:53:e6:a5:
         c5:a2:7e:f1:5e:b5:14:cb:8a:fc:a0:ad:d3:ee:49:33:d0:0e:
         03:02:5b:2c:b7:e8:75:62:ee:2d:30:d5:43:ff:95:bf:20:6a:
         01:79:27:d2:91:bd:91:0c:e7:a2:af:11:5e:c1:23:b1:1d:95:
         21:46:bc:83:12:3e:fd:f6:c4:d1:36:40:2a:2d:10:96:59:b1:
         61:64:e2:61:62:e2:fb:21:dd:59:47:ec:f7:3d:ed:0d:73:15:
         3b:d7:b1:db:ed:3c:4e:3a:06:62:74:eb:90:90:0e:5d:ba:b2:
         24:b2:4f:19:aa:4c:fd:97:85:1f:e6:65:f4:77:cc:3a:73:ce:
         c4:31:87:41:e2:96:1e:d7:16:5f:5c:0b:52:bf:61:22:e0:f5:
         07:06:59:01:f2:0b:78:1b:d0:ef:27:db:56:23:0d:0b:7e:2e:
         58:5b:77:54:3d:8f:99:9c:f5:20:3f:b6:b4:84:e7:fc:7f:c3:
         ba:da:eb:0b:d1:83:53:ec:0d:0f:53:89:1f:31:61:53:6d:5b:
         59:df:32:93:f4:f5:f6:81:3f:b2:00:17:76:41:1e:fd:20:6e:
         30:10:b2:df:62:6f:95:29:11:21:78:c7:10:b8:a8:ad:7e:1f:
         6c:c7:38:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:18 2026 by rpki-client