Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa
File:                     3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (raw, json)
Hash identifier:          lRUuWcUd02IZlpdvWX9KHM1+gKLrQM+l0jBHsP+smvs=
Subject key identifier:   5B:F4:9A:26:DA:84:C6:07:67:C0:B8:42:BF:C9:AF:13:0A:AC:F9:5D
Certificate issuer:       /CN=B677F5476721449C1CB3D8F67673665A0A038595
Certificate serial:       1A1004A80B762626DEFE8CD2087AD4FF3EE08F12
Authority key identifier: B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa
Signing time:             Sun 03 May 2026 02:21:56 +0000
ROA not before:           Sun 03 May 2026 02:16:56 +0000
ROA not after:            Sun 02 May 2027 02:21:56 +0000
asID:                     138828
IP address blocks:        103.137.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl
                          rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:10:04:a8:0b:76:26:26:de:fe:8c:d2:08:7a:d4:ff:3e:e0:8f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B677F5476721449C1CB3D8F67673665A0A038595
        Validity
            Not Before: May  3 02:16:56 2026 GMT
            Not After : May  2 02:21:56 2027 GMT
        Subject: CN=5BF49A26DA84C60767C0B842BFC9AF130AACF95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:26:20:84:5f:76:b7:53:9c:e5:57:3c:bb:
                    73:f0:1f:9d:f2:9b:a4:0c:4b:76:ad:dc:9b:37:e9:
                    3a:5f:04:5e:8e:78:6c:fd:ee:84:24:79:7d:87:ae:
                    2a:90:b6:af:0c:95:0d:26:7e:01:b2:7f:aa:f9:82:
                    c7:d6:44:0a:ad:f2:80:f8:24:eb:e3:13:75:31:56:
                    8d:92:25:51:f6:59:be:2e:20:16:72:20:3a:93:de:
                    41:8a:e6:42:e5:9f:62:92:7c:c0:26:66:e9:d9:2b:
                    a1:c4:32:17:fa:71:71:d5:1d:1e:eb:de:d8:5a:dd:
                    e9:dd:6d:97:d3:95:19:da:25:ca:ac:22:23:15:97:
                    be:ce:4f:c7:b3:69:37:e9:91:14:1d:d5:19:12:77:
                    86:21:d2:53:2a:d2:dc:5b:1e:74:c1:9c:e2:0b:b4:
                    6d:63:c5:e0:51:c6:c5:4f:a2:c7:2d:58:62:fe:e8:
                    89:9b:30:a0:09:29:98:1b:87:04:ad:71:95:2e:e5:
                    8d:aa:f3:f7:93:42:10:05:32:7d:13:2f:68:c6:cc:
                    d5:0c:67:38:8f:02:9b:13:3a:f0:db:c4:ec:63:fb:
                    54:04:7d:a0:20:68:0a:f7:cf:39:c5:9f:20:d8:c6:
                    78:74:43:ff:b8:36:fc:85:37:07:48:18:b6:25:f4:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F4:9A:26:DA:84:C6:07:67:C0:B8:42:BF:C9:AF:13:0A:AC:F9:5D
            X509v3 Authority Key Identifier:
                keyid:B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:30:60:9f:0f:99:f5:9f:24:14:c1:b5:85:0e:bc:eb:c4:
         1f:54:45:57:68:21:cc:0b:1b:03:ab:4a:77:9e:5a:32:ce:8c:
         e5:4e:2b:94:ec:ed:21:70:c4:7b:8e:af:ff:4a:61:ca:f0:83:
         e6:b9:b1:d9:b0:38:95:0d:7a:11:62:35:0e:aa:75:1b:eb:c7:
         8c:e2:97:57:be:0f:aa:96:a0:11:38:a7:a5:76:4f:c2:dc:e9:
         32:b2:3b:43:c8:c2:a7:ff:c5:18:63:52:6f:0e:6c:f4:c3:84:
         c1:3e:7c:9b:37:f4:39:20:84:05:9a:16:07:1a:a2:50:7a:c5:
         56:38:83:8e:f8:7e:29:95:05:c7:71:81:ce:ba:87:5a:ac:a8:
         ef:99:05:f2:7a:d4:76:45:ee:7e:66:fe:14:a8:f1:de:73:19:
         af:30:a9:1c:94:a4:38:8f:7f:fb:b8:57:90:a9:a5:86:63:26:
         c0:aa:d1:43:70:a2:8d:8b:6c:01:85:ec:83:1e:80:b9:a7:16:
         6e:39:b6:ad:aa:20:d5:fa:19:86:53:25:8d:80:88:e7:16:b7:
         5e:1c:c4:6b:1a:9f:a2:f4:c0:81:3a:47:52:3a:b1:26:4c:9b:
         0d:30:6f:c4:ee:ff:c1:a5:fb:b4:2e:96:83:28:1d:2e:42:8c:
         9c:89:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:42 2026 by rpki-client