Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32322d3234203d3e203436303236.roa
File:                     3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (raw, json)
Hash identifier:          qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=
Subject key identifier:   FE:5D:0A:DA:82:B3:2D:06:98:49:73:E5:BA:84:BD:E2:18:27:8E:0E
Certificate issuer:       /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial:       5D65BDDB9EFA7556121F81FF06DBE6B665483B99
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32322d3234203d3e203436303236.roa
Signing time:             Sun 03 May 2026 02:18:33 +0000
ROA not before:           Sun 03 May 2026 02:13:33 +0000
ROA not after:            Sun 02 May 2027 02:18:33 +0000
asID:                     46026
IP address blocks:        103.135.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
                          rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:65:bd:db:9e:fa:75:56:12:1f:81:ff:06:db:e6:b6:65:48:3b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
        Validity
            Not Before: May  3 02:13:33 2026 GMT
            Not After : May  2 02:18:33 2027 GMT
        Subject: CN=FE5D0ADA82B32D06984973E5BA84BDE218278E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:55:cd:f1:9b:6d:71:18:85:8d:90:f1:6c:
                    31:55:aa:71:80:75:db:95:0c:e7:55:4c:68:81:f5:
                    8f:39:e2:cd:c8:0e:bb:e5:65:1a:d8:bb:03:47:ee:
                    df:8c:ee:4e:0a:a9:c1:99:74:93:9b:68:14:5c:54:
                    55:67:28:f2:07:98:41:b5:9e:83:af:fc:78:0a:ed:
                    d0:a1:d6:f4:fc:cc:68:29:3c:c5:bc:f7:b2:70:60:
                    3c:f2:c9:d3:98:e3:ee:77:cb:8a:dc:67:a7:ed:27:
                    49:ed:7b:3f:86:3f:29:fe:9a:1a:7c:f4:6e:54:3f:
                    da:f2:ab:30:39:d2:3d:39:c2:ec:9c:22:47:d2:88:
                    91:f1:42:ec:2d:67:e2:67:f8:a0:7b:cc:3a:58:fc:
                    6b:34:83:c0:e3:38:b9:4f:f5:6e:80:20:90:79:0e:
                    6e:20:de:aa:c3:b1:a6:9c:ea:c6:81:17:03:94:d0:
                    cf:56:38:f4:9d:0e:76:c5:58:4e:a2:01:b1:16:07:
                    9f:0d:9f:75:bf:31:e0:8d:ed:ae:21:f0:39:39:51:
                    f2:77:fa:f2:5a:86:47:9e:98:b8:cc:37:91:b6:bb:
                    ba:cc:60:0b:34:64:1d:99:08:2d:9b:be:3d:6c:f1:
                    cd:8c:3e:a0:fa:60:49:80:98:ab:77:40:86:dc:df:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5D:0A:DA:82:B3:2D:06:98:49:73:E5:BA:84:BD:E2:18:27:8E:0E
            X509v3 Authority Key Identifier:
                keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32322d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:7c:4c:d9:93:f6:10:fc:7d:75:11:62:d3:57:52:8e:02:d9:
         ba:43:61:04:8a:de:f6:da:63:da:33:da:ab:65:f4:92:05:f3:
         bd:46:3a:7b:29:3f:de:c0:da:00:3d:6d:e7:b0:0b:00:c4:7d:
         38:ce:c3:ad:57:9e:6a:8b:b2:27:e3:8b:61:45:4d:66:54:2c:
         94:e4:f7:88:05:d6:f3:6b:fa:1c:52:7e:15:3c:35:43:88:e8:
         62:c3:48:82:af:fb:24:ea:87:dc:4b:3a:2a:8e:1e:9c:29:ea:
         90:87:39:23:91:49:a2:d6:2b:5f:95:17:5e:f7:41:48:5b:c9:
         09:36:99:aa:3e:e4:16:fe:5e:be:2e:54:dd:86:b4:85:39:56:
         b9:9c:cf:fc:a3:56:da:29:84:1b:90:af:ca:d9:1e:8a:08:0f:
         ea:97:d9:95:e9:d4:aa:48:35:05:02:88:1f:0b:3a:2e:cc:b5:
         45:6b:67:57:85:45:b6:83:00:0b:23:84:ed:6e:f4:9c:3c:b2:
         58:8c:76:87:12:da:ac:c7:bb:0a:87:8a:d6:97:1e:29:af:9a:
         79:b1:8d:6a:55:08:29:49:8c:d2:b8:9f:53:ce:5b:0f:f5:d7:
         60:04:6d:e1:17:2d:fc:be:25:e4:42:91:cb:e5:3f:43:a2:01:
         e1:8f:14:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:16 2026 by rpki-client