Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa
File:                     3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=
Subject key identifier:   71:73:CD:D7:07:D7:D5:2B:2E:A1:18:D9:4A:12:A3:C9:90:D3:84:AE
Certificate issuer:       /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial:       1CB133CCB2A0D2B7DE711D6E03B904E1F7947441
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa
Signing time:             Sun 03 May 2026 02:18:31 +0000
ROA not before:           Sun 03 May 2026 02:13:31 +0000
ROA not after:            Sun 02 May 2027 02:18:31 +0000
asID:                     46026
IP address blocks:        103.135.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
                          rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b1:33:cc:b2:a0:d2:b7:de:71:1d:6e:03:b9:04:e1:f7:94:74:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
        Validity
            Not Before: May  3 02:13:31 2026 GMT
            Not After : May  2 02:18:31 2027 GMT
        Subject: CN=7173CDD707D7D52B2EA118D94A12A3C990D384AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:f6:09:c2:9a:b2:ef:0b:8e:7c:b9:0f:01:
                    d0:c1:9e:1c:72:0b:c1:bc:a6:22:72:f9:61:ed:01:
                    ab:23:9f:cf:88:e6:2e:7f:0d:04:c5:82:76:4b:6f:
                    9d:41:49:22:57:63:1a:03:f2:e2:f1:11:7b:f6:a3:
                    ff:7b:e8:58:bf:a4:cd:9f:18:d2:57:f3:bc:20:94:
                    e7:58:85:c9:37:79:d8:fa:72:c0:8c:53:42:48:24:
                    66:0f:2f:9c:5d:54:cc:7f:72:00:7b:83:5e:72:0b:
                    05:3f:5f:4e:27:7f:2b:04:a9:f5:41:48:d8:d4:04:
                    9f:bc:b0:27:b6:e3:5d:76:e3:fd:71:36:12:97:1c:
                    13:c9:34:43:0c:ee:e8:61:10:29:87:ce:2e:7c:89:
                    bf:f3:e4:c0:70:20:3f:81:08:d4:0d:ed:3b:5a:f8:
                    f7:55:d3:8b:cf:7d:29:3f:69:05:a4:dd:1a:67:2b:
                    59:f3:91:66:07:d7:a4:7c:1e:40:5f:ce:2e:dc:4e:
                    05:0e:77:56:0a:d1:d0:d4:8d:28:06:55:d9:19:38:
                    86:6c:fc:e9:d0:9e:f1:59:fb:a4:04:6b:ee:f8:3d:
                    90:f0:c1:a4:03:21:5d:c7:0a:66:86:64:b9:57:d8:
                    dc:a2:f2:f5:40:dc:49:1e:24:8e:aa:6c:3b:80:62:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:73:CD:D7:07:D7:D5:2B:2E:A1:18:D9:4A:12:A3:C9:90:D3:84:AE
            X509v3 Authority Key Identifier:
                keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:0f:b0:bf:6a:30:21:55:27:04:5d:fb:01:b0:61:34:d8:c4:
         62:a8:08:56:a1:78:d6:c1:58:37:dd:fd:79:07:e1:05:72:3f:
         25:9a:cb:ab:13:64:0e:95:8e:f1:f3:9c:6f:07:02:3e:ee:52:
         4b:8b:79:ad:a3:e2:81:2c:36:fb:b9:54:5b:58:a5:80:c7:ff:
         dd:d2:99:73:2c:4d:4d:d7:16:33:49:2c:0b:31:cd:c7:1f:63:
         6b:19:d6:17:af:73:cf:15:c8:48:15:a3:f0:9e:94:ee:08:ed:
         b6:3e:2a:c3:3c:a5:45:62:00:d7:97:09:9d:4a:e9:a8:86:ee:
         70:e1:54:09:d7:d0:f3:ce:b1:83:f4:af:f8:34:e3:97:60:5b:
         d5:ec:46:9c:54:e5:ee:c4:5f:47:71:e1:8e:aa:6b:57:d4:ca:
         a1:ab:d6:0a:00:8b:c6:5e:c1:69:cc:a2:90:67:ab:5b:93:ac:
         04:7f:ec:fd:d1:af:f3:00:e3:54:dd:60:78:e3:f7:fc:bc:5b:
         dc:18:72:cb:0b:4e:fe:79:c8:fe:44:59:0a:4e:b2:79:b6:e3:
         9f:c4:1e:b4:5b:b6:7f:1f:12:95:a8:34:08:79:a6:d6:6e:e3:
         6b:2f:a4:16:5a:59:12:b3:16:12:58:d3:a4:42:c6:8d:52:44:
         e8:88:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:55 2026 by rpki-client