Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa
File:                     3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          I+MpxcufYeam5pksOgKwBNTewvekIqJYxt3l7XuR42Q=
Subject key identifier:   6E:6B:06:E3:7A:0C:C4:B1:A5:16:AE:33:71:30:7F:3D:75:BB:0D:15
Certificate issuer:       /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
Certificate serial:       34C86EB7F2A899764CF3DA9348387A15085AC9E5
Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa
Signing time:             Sun 03 May 2026 02:14:33 +0000
ROA not before:           Sun 03 May 2026 02:09:33 +0000
ROA not after:            Sun 02 May 2027 02:14:33 +0000
asID:                     136838
IP address blocks:        103.100.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl
                          rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c8:6e:b7:f2:a8:99:76:4c:f3:da:93:48:38:7a:15:08:5a:c9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
        Validity
            Not Before: May  3 02:09:33 2026 GMT
            Not After : May  2 02:14:33 2027 GMT
        Subject: CN=6E6B06E37A0CC4B1A516AE3371307F3D75BB0D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:32:d7:58:74:ec:1c:8b:a4:c8:b6:69:31:
                    d7:d8:49:e9:31:da:ad:7c:de:3a:b0:cf:bd:3b:4f:
                    45:d5:d9:de:d4:49:bc:de:ee:b3:96:19:78:c1:76:
                    a7:0d:7b:56:a1:f0:60:d2:da:e0:90:67:c5:b7:88:
                    31:b2:bf:30:a1:db:43:85:05:70:ed:c5:1f:6f:5f:
                    68:bf:f3:62:31:81:42:7e:9b:ab:fc:88:0f:86:ab:
                    37:e6:90:56:96:8a:e8:cd:7d:14:e8:f4:82:6b:a9:
                    3d:5e:7f:d6:c0:e8:ab:e0:8d:02:94:2e:bf:18:eb:
                    35:59:ba:5c:78:03:b5:b2:31:12:52:16:77:8c:6e:
                    d5:54:05:65:81:48:ac:ca:08:8a:22:a1:06:94:c3:
                    bd:98:7b:ec:56:df:cd:0a:e4:8e:3a:a9:d4:be:c5:
                    56:17:49:f8:67:f7:d3:9b:be:80:2c:ce:c0:d4:62:
                    0f:e7:38:4c:26:64:9b:52:ba:e8:e4:aa:d1:fd:5b:
                    c4:b7:f1:9c:44:25:9e:26:ca:5b:f7:87:8d:09:45:
                    c8:1c:4c:e1:0b:9d:1f:3d:fc:a1:03:40:c6:1d:56:
                    f7:05:1c:e2:27:31:45:b8:65:22:89:b5:f2:66:6e:
                    c9:90:72:cb:20:d4:bd:2b:6d:91:24:6e:44:29:2b:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6B:06:E3:7A:0C:C4:B1:A5:16:AE:33:71:30:7F:3D:75:BB:0D:15
            X509v3 Authority Key Identifier:
                keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:e9:68:f1:31:48:97:46:8b:ec:b9:40:5d:8d:ad:fa:da:4d:
         86:fb:d0:75:0c:5a:85:28:8b:2a:67:00:ad:86:da:93:93:63:
         d3:57:3a:e5:31:8f:fc:7d:3f:52:32:b1:f4:99:b6:ce:3d:9b:
         24:fc:62:ab:de:22:9f:37:18:e5:3a:6b:80:81:35:2c:d8:42:
         77:e7:de:0e:f9:b6:ff:cb:df:d4:85:1e:48:eb:4b:52:22:25:
         3c:f4:4a:0c:51:15:c6:23:92:37:ce:0c:6a:a4:65:ee:5a:f6:
         9b:c3:e5:44:3c:6c:68:4a:60:c9:85:7b:38:17:5b:d7:74:21:
         d5:6d:86:65:d6:da:e5:68:2d:33:78:9a:39:2b:d8:1c:91:03:
         2d:cc:28:6c:76:bd:31:a4:76:2e:42:44:eb:1c:b5:a8:76:2d:
         63:3b:23:2a:31:d4:f9:c7:25:98:cf:24:b1:cb:cd:e5:b1:ea:
         30:10:9e:a7:13:e8:bb:f8:60:c2:f8:3c:b1:6c:22:da:bb:1f:
         d9:3e:a2:ec:b9:c6:fe:f0:f2:7f:5e:2d:63:24:48:64:c0:f8:
         a9:85:cd:0c:84:df:e1:17:db:71:bc:a2:ba:8d:18:5c:51:9b:
         cf:72:44:89:d3:ba:b9:69:76:5f:3b:ba:e4:ce:a2:b7:32:e9:
         8c:fd:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:16 2026 by rpki-client