Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/3130332e36372e38342e302f32332d3234203d3e20313532303034.roa
File:                     3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (raw, json)
Hash identifier:          Iyu6UGXh6K6YUKWK1Cw0yY2+2dIgfvoG18aCPpAU41Y=
Subject key identifier:   8D:BC:83:58:BC:05:44:46:FA:2C:E0:A8:21:AD:26:62:45:3E:64:D7
Certificate issuer:       /CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD
Certificate serial:       15556BA51B1107D7DF78587612035E9C17B1AA1A
Authority key identifier: 1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/3130332e36372e38342e302f32332d3234203d3e20313532303034.roa
Signing time:             Sun 03 May 2026 02:16:57 +0000
ROA not before:           Sun 03 May 2026 02:11:57 +0000
ROA not after:            Sun 02 May 2027 02:16:57 +0000
asID:                     152004
IP address blocks:        103.67.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl
                          rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:55:6b:a5:1b:11:07:d7:df:78:58:76:12:03:5e:9c:17:b1:aa:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD
        Validity
            Not Before: May  3 02:11:57 2026 GMT
            Not After : May  2 02:16:57 2027 GMT
        Subject: CN=8DBC8358BC054446FA2CE0A821AD2662453E64D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:5b:43:2e:69:cd:90:57:95:70:df:3c:1e:
                    24:0b:8c:21:c9:d9:26:61:80:22:c8:11:85:4f:b0:
                    85:04:70:91:a3:39:74:e2:48:80:1a:a7:31:1f:2b:
                    5a:7c:d3:2e:c1:c2:39:07:de:af:24:b8:5b:fd:78:
                    c4:dd:51:44:aa:dc:f8:5d:1d:d6:43:85:53:91:cf:
                    5a:45:23:5f:08:95:88:2b:08:e1:96:c3:05:e3:64:
                    ce:d7:a0:40:0a:66:71:1d:dd:46:22:c7:a1:bf:76:
                    77:fb:ba:0c:b0:c1:08:69:4c:73:a7:49:21:0a:7c:
                    84:92:00:aa:6b:f5:39:d2:50:c3:2c:6f:c9:c6:c7:
                    66:7e:30:86:4a:9f:fb:8c:a3:e5:59:b6:15:61:87:
                    b0:f7:6b:6f:24:48:5d:27:5a:49:56:0d:fe:bd:d4:
                    84:f3:60:ae:71:81:00:56:36:32:87:30:4f:f3:0f:
                    ae:08:91:4c:47:1c:e1:ee:53:4e:01:03:b9:2e:a6:
                    80:a7:16:79:d2:b3:ea:4e:b2:76:ab:25:6e:76:5a:
                    e2:2c:83:c2:8e:80:99:f4:1c:40:c7:9d:be:e0:a2:
                    72:8c:a1:c4:d3:77:21:03:85:66:9c:43:d5:15:7c:
                    15:a5:7f:7e:2e:ca:79:4a:27:77:50:e7:71:bf:3e:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BC:83:58:BC:05:44:46:FA:2C:E0:A8:21:AD:26:62:45:3E:64:D7
            X509v3 Authority Key Identifier:
                keyid:1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/3130332e36372e38342e302f32332d3234203d3e20313532303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:eb:17:80:2f:99:57:0d:5e:a1:6b:34:4d:45:b6:20:27:41:
         e1:81:d3:ef:27:d4:08:08:94:96:86:b8:28:b7:34:78:5f:ed:
         3d:e2:68:7d:25:aa:56:b8:43:a7:4c:7d:86:65:b0:51:71:20:
         6c:03:b3:ee:19:b2:70:e7:7a:4c:74:72:0d:3e:b9:ff:d6:9c:
         e6:16:42:6f:77:84:57:99:0c:ac:5e:77:d8:f9:e6:17:5c:5e:
         e9:e1:7f:1a:53:c4:ef:1b:e7:e7:ae:77:ee:3a:f9:c7:25:1e:
         e5:9d:b5:69:d9:8e:8e:dd:b7:bf:3c:29:b3:bb:69:4c:ea:7d:
         ba:a8:99:c7:df:87:25:89:d9:b2:c6:02:4b:36:72:e2:d6:8f:
         f7:d0:b9:0e:ec:90:a4:e5:0d:ee:eb:9a:9e:84:3e:21:7f:25:
         91:0b:13:96:ce:37:6d:56:b8:be:15:49:43:db:e7:4a:76:63:
         e4:6d:07:5e:01:55:07:fb:cc:a7:e8:b1:ce:77:e2:45:89:6f:
         af:3d:e7:70:7a:50:3d:01:03:50:a0:90:2f:41:22:8d:71:5a:
         82:b8:f9:07:86:04:0e:85:54:f6:32:76:be:53:00:0c:7b:79:
         50:44:0f:60:97:66:96:1f:e2:33:54:7e:e2:0a:74:99:d6:b8:
         cf:c4:9a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:29 2026 by rpki-client