Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa
File:                     3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (raw, json)
Hash identifier:          c6pFiJSk1UQhVnz9HO0WDm1mZbg2xnGEy69Z/hHQfrI=
Subject key identifier:   D7:82:A1:D1:35:FB:AD:F7:78:4A:47:FF:5C:F1:12:99:BD:70:9C:3F
Certificate issuer:       /CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC
Certificate serial:       7CFB3AACB796D000D09E8E6E5A173EDF1C896FB4
Authority key identifier: B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa
Signing time:             Sun 03 May 2026 02:20:32 +0000
ROA not before:           Sun 03 May 2026 02:15:32 +0000
ROA not after:            Sun 02 May 2027 02:20:32 +0000
asID:                     136095
IP address blocks:        103.84.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl
                          rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fb:3a:ac:b7:96:d0:00:d0:9e:8e:6e:5a:17:3e:df:1c:89:6f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC
        Validity
            Not Before: May  3 02:15:32 2026 GMT
            Not After : May  2 02:20:32 2027 GMT
        Subject: CN=D782A1D135FBADF7784A47FF5CF11299BD709C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:b9:ab:5a:cc:4d:5f:29:63:9b:95:28:0c:
                    29:a9:b0:29:08:b6:e8:4d:5b:75:99:11:56:ca:ab:
                    9f:07:33:46:52:56:b6:e1:32:2c:06:e2:8f:8f:41:
                    7e:a5:cd:d9:8f:2e:9e:c4:e1:3d:59:73:96:93:61:
                    00:ef:35:ca:da:95:9b:7a:1f:90:87:a3:c5:37:2d:
                    01:5d:26:0e:13:a0:c1:df:86:c7:93:94:41:9b:39:
                    89:76:d0:8b:99:e1:64:55:21:14:61:a3:e7:ec:38:
                    ea:08:af:e0:f2:32:86:a8:7c:af:2c:e3:b0:1f:da:
                    0b:a1:ac:e6:83:53:09:28:9f:85:1f:4c:92:3e:88:
                    2a:9e:d3:71:dc:41:88:a6:e2:41:55:2b:59:66:56:
                    41:79:91:8a:2d:d7:a5:99:8f:26:49:4e:bd:18:e9:
                    9c:05:4d:a7:0f:22:a8:09:ab:b7:ef:ca:cc:a9:6b:
                    10:fe:3b:fd:69:62:fc:44:cd:71:2a:03:82:4f:87:
                    db:4f:50:a6:f8:18:fc:19:bb:3e:5b:f5:cf:f2:bb:
                    a1:66:7c:ba:94:ea:4c:cd:3b:fe:15:82:c8:34:66:
                    7c:37:0d:c9:c3:19:e5:64:e0:b9:1b:20:62:d5:03:
                    af:9d:b6:41:71:00:2f:28:1e:c5:fd:de:17:bd:f8:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:A1:D1:35:FB:AD:F7:78:4A:47:FF:5C:F1:12:99:BD:70:9C:3F
            X509v3 Authority Key Identifier:
                keyid:B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:77:f8:7d:4d:34:30:d6:f7:76:f2:44:c5:59:b9:79:fd:ff:
         b5:9b:b2:bf:49:57:c5:b0:d2:83:2b:78:8e:5e:ba:91:3f:c4:
         f2:47:10:3c:ff:39:64:85:57:28:c3:ee:84:73:97:dc:9b:54:
         09:bc:83:07:b5:44:4d:1b:4d:00:46:b1:01:d2:32:f6:a0:39:
         93:45:02:c3:3f:2e:b7:8c:4b:8c:1d:ce:68:ab:f4:b2:35:c2:
         21:20:4e:f2:de:36:8a:00:98:1d:3f:a9:05:2b:cc:b0:82:b9:
         f6:8a:d8:5d:1d:0c:59:8d:c7:2c:35:09:03:f4:6b:1e:8d:ba:
         2c:03:87:db:b7:e4:2e:b7:b0:a0:1f:ee:80:ea:34:b5:f5:db:
         5a:b3:d6:29:4b:0d:7e:44:86:a8:26:f5:ea:6c:1a:65:d9:6e:
         7b:96:05:26:a4:d3:c9:5d:83:b6:66:1d:9e:e7:26:5f:0d:3a:
         73:af:5b:c4:6d:ab:7c:46:01:3c:a6:8b:e1:be:8a:0f:60:48:
         63:e4:d9:4c:8a:a5:24:93:00:48:e5:bf:48:6b:b6:92:4c:41:
         3b:42:63:23:de:9b:1b:91:9f:7b:85:32:8d:da:6e:d2:45:02:
         a2:ab:17:9a:dc:cb:1b:b9:c4:e5:ea:fa:a0:d8:8d:1a:ac:eb:
         13:98:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:02 2026 by rpki-client