Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa
File:                     3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier:          qUv8iwGfDUNsSHoYpr8OtHbSrHxY05J4t5ZSAS55J1w=
Subject key identifier:   41:20:2D:EF:89:E2:7B:5A:28:72:6C:0F:29:71:D1:B3:31:D5:81:14
Certificate issuer:       /CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8
Certificate serial:       361275DCAE0D1CECB4F3CC28B68048CFE77747A7
Authority key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa
Signing time:             Sun 03 May 2026 02:13:40 +0000
ROA not before:           Sun 03 May 2026 02:08:40 +0000
ROA not after:            Sun 02 May 2027 02:13:40 +0000
asID:                     132634
IP address blocks:        103.134.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl
                          rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:12:75:dc:ae:0d:1c:ec:b4:f3:cc:28:b6:80:48:cf:e7:77:47:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8
        Validity
            Not Before: May  3 02:08:40 2026 GMT
            Not After : May  2 02:13:40 2027 GMT
        Subject: CN=41202DEF89E27B5A28726C0F2971D1B331D58114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:d0:cf:b3:7d:6d:11:58:6c:46:44:ac:da:
                    e1:a0:96:e7:13:5e:22:42:16:92:13:37:24:ed:f5:
                    a5:10:df:4b:dd:6a:7b:6e:78:60:3a:c5:97:76:d0:
                    0e:13:2e:f1:7a:1a:10:5c:25:c2:32:68:97:3b:30:
                    94:6b:f0:aa:9a:4b:68:bf:b6:46:df:af:61:98:13:
                    e6:64:62:e4:49:ab:df:68:91:d0:9d:15:34:7b:b6:
                    3a:7a:4f:bd:f8:dd:f0:1a:9e:62:9f:3f:d3:56:4d:
                    3f:f5:2a:73:49:eb:f8:07:1f:78:b2:df:79:07:14:
                    64:7d:30:c5:0e:d1:18:0a:d5:16:33:99:b5:73:0b:
                    36:95:d7:07:21:a9:c5:a6:0c:2e:78:aa:e0:5a:36:
                    10:56:17:3b:ee:43:f1:ed:96:80:4f:b3:ae:22:0c:
                    11:b6:ad:8d:31:a2:1f:6a:b4:8f:7d:41:39:6e:a3:
                    1a:bd:6d:44:18:cc:9a:1f:d2:dd:04:2e:c8:c3:b0:
                    04:fa:cc:eb:4c:89:ab:78:b2:8f:9c:4d:5c:df:b4:
                    fb:02:db:de:37:d8:7a:32:63:2b:9a:92:21:4e:01:
                    ca:7b:5d:9d:d9:e7:f8:06:50:65:80:c4:58:73:1d:
                    72:66:40:09:21:87:bd:e7:89:bc:04:8f:49:1d:2a:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:20:2D:EF:89:E2:7B:5A:28:72:6C:0F:29:71:D1:B3:31:D5:81:14
            X509v3 Authority Key Identifier:
                keyid:1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:dd:f6:b1:84:cf:ad:08:96:b1:77:7e:2c:74:90:81:98:a1:
         72:b8:e4:22:90:3f:7a:d5:d2:fd:e3:03:8c:11:b3:85:da:f5:
         0b:2f:c2:b9:c3:74:6a:ff:f2:bf:97:70:2d:c3:6a:99:92:68:
         65:b4:eb:b6:bd:16:ea:31:a4:f3:93:6e:63:26:e7:e8:af:bd:
         5c:91:23:26:b9:8e:12:cc:26:d3:42:22:8e:8b:99:7c:62:94:
         95:a1:36:71:e8:51:2b:b4:66:ac:9e:f7:b6:2d:53:40:6d:7f:
         b9:13:de:e5:1c:26:ad:cc:87:6b:c1:75:fc:50:1e:64:24:6f:
         8f:68:42:9d:b2:ea:e1:bf:28:30:e9:b7:c7:bb:bb:2e:8b:54:
         f4:93:8c:d3:b2:dd:ac:80:6f:d4:36:00:09:46:32:6a:52:0b:
         a3:0a:72:7b:4d:17:e9:4b:f7:cc:14:35:13:11:b7:62:04:f5:
         bc:57:4a:7e:c3:71:98:02:ad:91:77:0f:5b:3b:9a:5d:63:b6:
         25:79:c1:8a:07:9e:02:fd:ea:e5:76:73:c7:27:e2:fd:96:8e:
         a4:c7:d7:65:30:fa:b3:c3:f7:af:18:43:2b:f7:d0:ec:b9:82:
         f6:10:a9:ec:d8:92:00:ae:41:91:89:79:d0:13:8f:29:ec:28:
         8e:2c:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:31 2026 by rpki-client