Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/3130332e31342e37342e302f32342d3234203d3e20313334363332.roa
File:                     3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (raw, json)
Hash identifier:          ut81wNpcxfZaRtfYOIEu10o1O6sE5PD51eUSrS4eL90=
Subject key identifier:   71:3E:25:BA:DE:A0:39:D9:9E:D4:1D:FB:5C:97:00:7F:BC:30:43:59
Certificate issuer:       /CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2
Certificate serial:       639075AB561B1A7A5769479663C8F83CDCEC08BB
Authority key identifier: D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/3130332e31342e37342e302f32342d3234203d3e20313334363332.roa
Signing time:             Sun 03 May 2026 02:13:53 +0000
ROA not before:           Sun 03 May 2026 02:08:53 +0000
ROA not after:            Sun 02 May 2027 02:13:53 +0000
asID:                     134632
IP address blocks:        103.14.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl
                          rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:90:75:ab:56:1b:1a:7a:57:69:47:96:63:c8:f8:3c:dc:ec:08:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2
        Validity
            Not Before: May  3 02:08:53 2026 GMT
            Not After : May  2 02:13:53 2027 GMT
        Subject: CN=713E25BADEA039D99ED41DFB5C97007FBC304359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:55:71:4b:f1:25:e7:ad:29:cc:62:f5:c2:
                    14:5c:b3:5b:cb:3a:14:3a:e5:50:07:10:58:5d:0b:
                    e8:d0:6b:65:70:9e:74:11:74:28:b9:9a:ba:5b:1b:
                    ee:30:4d:d9:86:84:d0:0a:07:92:f8:3e:d9:75:6e:
                    09:38:d4:0e:51:30:a1:8c:25:9b:57:61:42:21:54:
                    e1:df:83:5e:ca:e6:c0:a0:4e:d4:33:fc:c4:9c:ec:
                    10:62:67:9b:95:c6:01:0a:f2:03:46:20:9e:27:2e:
                    69:4e:2e:de:ab:fb:af:ef:28:81:a2:b6:73:08:e0:
                    f9:29:dc:f5:5e:e3:27:2f:c5:b2:8e:68:89:71:f2:
                    e6:27:a3:fa:d4:6b:84:27:92:e8:ad:fc:31:88:bb:
                    c7:b5:da:e9:29:e1:fb:2f:ca:86:71:5d:de:7e:8c:
                    fc:e0:82:5e:17:22:2a:ec:ff:ba:8f:a0:e1:16:18:
                    08:2c:fe:97:b7:f3:aa:8a:e0:df:5b:43:f5:cd:20:
                    7b:0b:8b:28:1e:84:17:ef:2f:0a:d9:f9:fa:c6:eb:
                    4b:b3:61:a2:6c:95:a0:32:af:42:b1:67:6b:92:d7:
                    be:17:c9:07:01:b3:f5:01:76:3f:6a:7d:1d:36:61:
                    83:0b:93:56:d0:7b:4c:41:a3:1f:94:59:eb:d5:b8:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:25:BA:DE:A0:39:D9:9E:D4:1D:FB:5C:97:00:7F:BC:30:43:59
            X509v3 Authority Key Identifier:
                keyid:D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/3130332e31342e37342e302f32342d3234203d3e20313334363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:60:69:64:3c:e2:22:a8:51:ce:de:13:d6:f6:99:d7:70:3d:
         d5:4f:f7:12:76:5d:7c:9f:13:e7:87:c2:5e:3c:9d:51:49:c6:
         45:95:c5:30:b2:a2:83:02:d3:d1:16:82:46:29:2e:06:88:3f:
         76:60:de:78:67:8c:73:9c:40:fb:57:ab:81:3b:2b:30:58:3b:
         96:88:91:af:be:a0:01:bb:d0:51:ad:1e:5b:53:2d:c8:88:9f:
         d7:8f:e0:58:c0:78:79:8a:62:37:d1:f8:40:1c:6f:44:65:42:
         62:87:b2:f5:3d:40:ae:47:42:ad:14:54:98:bf:26:ed:fa:95:
         82:ca:45:12:d2:93:f7:33:1e:e1:1e:b7:b7:40:88:a3:e0:58:
         54:34:7e:b7:5e:82:e7:11:34:b9:0d:06:c5:b2:94:ff:aa:5b:
         ca:5c:8c:bf:b9:86:f1:d9:7b:77:e6:81:a3:96:fb:f7:1c:14:
         17:74:e5:72:5a:d0:d3:58:e2:9a:4c:6f:d5:07:4b:60:78:db:
         7e:0a:58:42:13:17:32:d9:c0:ea:78:4d:97:ab:f7:49:c5:b1:
         05:ed:47:04:1e:18:c8:95:b3:6b:23:5a:f6:dd:1a:a5:88:1a:
         2f:07:57:16:52:fd:b4:2d:f5:16:09:c5:2f:fe:24:bc:78:6f:
         44:9b:e5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:30 2026 by rpki-client