Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa
File:                     3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (raw, json)
Hash identifier:          SSJvSdL4NA21o/quBBkRYHXaBZlnNisf6npebpyix0w=
Subject key identifier:   98:A0:95:39:A7:37:4A:16:D2:FD:D2:21:4B:AF:08:7D:C7:18:F7:8C
Certificate issuer:       /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
Certificate serial:       138B5798685B204133378B7EB34C38913F55AC4D
Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa
Signing time:             Sun 03 May 2026 02:14:33 +0000
ROA not before:           Sun 03 May 2026 02:09:33 +0000
ROA not after:            Sun 02 May 2027 02:14:33 +0000
asID:                     136838
IP address blocks:        103.100.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl
                          rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8b:57:98:68:5b:20:41:33:37:8b:7e:b3:4c:38:91:3f:55:ac:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
        Validity
            Not Before: May  3 02:09:33 2026 GMT
            Not After : May  2 02:14:33 2027 GMT
        Subject: CN=98A09539A7374A16D2FDD2214BAF087DC718F78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:9f:74:54:1a:25:81:f9:05:12:95:28:d2:
                    1b:2e:c3:c1:9f:82:2e:89:15:8b:2c:27:ba:50:9f:
                    a1:d3:f7:31:34:8d:b9:4a:ae:d9:23:95:37:db:a4:
                    88:9a:4d:9c:5d:41:d4:e6:99:33:2f:c7:39:60:2e:
                    55:bd:e5:4a:4b:00:d4:b7:c1:c1:f1:84:e9:b1:ec:
                    0f:87:ee:ab:89:e2:27:54:3a:23:e5:3e:d3:ae:14:
                    28:cd:04:bc:a1:ba:f1:6d:0b:dc:e8:50:9d:25:43:
                    92:f3:45:65:70:80:8c:fa:4b:88:44:10:e1:e2:ef:
                    65:3c:d9:a5:c5:e0:b3:4e:be:3a:e8:66:fe:68:44:
                    f8:92:8f:68:e4:93:04:e4:83:e4:64:d6:f8:d7:00:
                    11:9a:57:5f:64:c2:60:92:3d:58:f8:03:8b:89:af:
                    2e:24:fc:59:9a:ce:46:c7:43:49:6b:c6:7b:57:a3:
                    57:f7:3e:f0:8d:0d:fe:86:ee:74:04:58:5d:c2:ff:
                    4c:23:94:03:af:fe:d4:8f:d2:80:8b:a9:4f:bb:35:
                    b8:c9:8e:c1:71:cc:d8:a3:3b:22:fb:37:39:41:7d:
                    02:ad:92:83:0f:71:15:d0:e4:e8:09:53:59:88:99:
                    15:db:83:62:42:6f:9d:99:a5:0e:76:f4:31:c7:17:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:95:39:A7:37:4A:16:D2:FD:D2:21:4B:AF:08:7D:C7:18:F7:8C
            X509v3 Authority Key Identifier:
                keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:9a:56:f7:15:b1:9f:c1:1f:ae:f4:4b:55:2a:a6:06:b8:
         54:50:7d:7c:ce:41:a1:8b:04:28:26:c1:cf:fe:12:37:8f:9e:
         1f:43:85:a6:31:dd:39:5c:79:13:48:3b:aa:5e:d4:eb:a8:0a:
         cc:cb:3b:8c:75:33:1f:23:6d:bf:6c:05:4f:30:0c:b2:69:9c:
         b4:29:40:a5:88:e7:25:28:b0:9f:a4:59:04:e1:bf:46:c9:cf:
         f1:af:9b:cd:8e:3c:1a:14:3c:3e:c9:cf:80:81:cd:8d:49:af:
         61:94:98:12:be:94:d2:14:36:1e:cf:19:09:1a:f3:47:04:e5:
         69:71:ef:23:04:a9:66:90:44:56:b6:47:7a:6d:de:5a:0e:aa:
         8a:a6:04:b1:97:a0:4f:3b:c2:ee:e2:8c:78:e6:c0:52:f4:a3:
         6c:d6:70:e6:2b:5d:86:42:c9:b9:90:2c:e5:a0:60:25:17:1c:
         cb:04:02:13:f4:cf:5d:10:e2:86:4b:8c:c3:b9:45:9b:40:f9:
         9c:b5:2e:dd:83:26:23:88:81:ea:8b:4d:05:be:b2:dc:db:e7:
         fc:6e:87:93:61:fd:39:c0:92:70:ea:d8:47:28:45:a9:d1:14:
         17:fa:47:63:2a:da:3d:2f:7e:e8:fb:75:15:7c:a0:0c:19:07:
         5b:d9:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:25 2026 by rpki-client