Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa
File:                     3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (raw, json)
Hash identifier:          ZJlUpKOWZJT4nAWuCuBDhZRS/ZCGAJEy+RmXu9xZXqc=
Subject key identifier:   84:4C:39:1C:87:B7:02:B3:5E:58:A1:17:99:D3:8C:3D:20:0A:3F:19
Certificate issuer:       /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7
Certificate serial:       03A8072960E6424489746D35D2EC83E0447E4238
Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa
Signing time:             Sun 03 May 2026 02:22:38 +0000
ROA not before:           Sun 03 May 2026 02:17:38 +0000
ROA not after:            Sun 02 May 2027 02:22:38 +0000
asID:                     137376
IP address blocks:        103.118.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl
                          rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:07:29:60:e6:42:44:89:74:6d:35:d2:ec:83:e0:44:7e:42:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7
        Validity
            Not Before: May  3 02:17:38 2026 GMT
            Not After : May  2 02:22:38 2027 GMT
        Subject: CN=844C391C87B702B35E58A11799D38C3D200A3F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:13:4a:b9:53:b3:d4:91:fe:dc:5d:f4:c4:
                    2b:fa:f9:cf:4f:a6:f1:ff:48:92:3d:87:44:4b:d3:
                    de:ef:f0:72:e7:b9:68:81:df:8c:fd:29:5e:49:fa:
                    ce:bf:7a:b1:63:27:f0:0d:a8:70:59:76:2b:9c:1a:
                    5c:13:8f:8e:5e:69:6c:23:ad:09:83:2f:21:0c:68:
                    df:b3:f7:b9:27:b5:db:b1:57:42:0c:a0:60:b4:dd:
                    23:6b:bb:f3:3d:59:eb:9e:24:6d:5a:35:ba:93:13:
                    34:27:df:8d:31:26:80:93:ee:dd:03:69:58:d8:05:
                    5d:ca:3f:65:63:c4:f3:f1:3c:0e:f7:ae:98:54:56:
                    ba:4e:a9:53:f6:e6:50:4b:df:8a:93:92:90:82:17:
                    99:88:16:91:e4:42:ad:8a:04:49:4a:ba:c5:20:a1:
                    1f:bd:98:5a:5e:c4:5d:62:53:09:5d:8f:91:4b:d0:
                    b2:50:c5:a5:75:19:6a:55:e4:cf:e6:98:15:f2:72:
                    f7:96:50:40:11:65:fa:44:46:a2:0a:04:ea:ec:2f:
                    31:6f:8d:14:ea:b1:81:81:c2:c9:ca:21:6f:78:9b:
                    cb:3b:32:f0:2a:8a:af:3f:30:34:5c:5e:60:b8:fa:
                    e0:75:e4:23:2c:95:1a:d1:20:56:5c:20:2a:38:e2:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4C:39:1C:87:B7:02:B3:5E:58:A1:17:99:D3:8C:3D:20:0A:3F:19
            X509v3 Authority Key Identifier:
                keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:38:c8:de:54:a8:a7:69:48:15:f8:76:9c:28:61:3d:ea:bd:
         1e:98:09:70:7f:21:f9:d5:34:07:77:64:b9:f7:b9:d0:49:ce:
         6b:d4:91:5f:58:46:2b:f9:14:8a:46:3f:a0:6b:d1:fd:b4:fc:
         86:d4:86:50:a5:28:00:ac:71:16:6b:22:61:e3:d0:33:08:50:
         88:a8:0f:a1:9b:6e:39:25:65:c6:bd:36:0a:e9:8a:9d:39:87:
         5d:c7:77:d7:23:96:9e:c7:a9:8c:02:c7:69:eb:7e:c8:0f:cd:
         a3:c9:39:06:7d:c7:31:e3:eb:c9:f0:20:54:87:4a:1b:70:6e:
         a8:3a:46:28:2d:c2:48:8e:28:21:45:4f:df:73:c6:a5:cd:f2:
         a4:f8:6e:d7:f8:14:73:1b:38:07:77:41:c0:9a:6d:5d:e7:aa:
         ed:a5:5d:71:fa:d9:68:28:97:2a:cc:4d:a0:52:0b:2f:29:32:
         21:14:c1:a9:a4:3f:36:b2:b4:a1:e1:a8:ca:29:e8:c5:48:ec:
         c7:3c:f6:27:a0:6e:bd:e3:11:d6:ae:59:ea:ad:37:5f:95:7a:
         9c:cb:c0:b3:36:82:97:5d:56:eb:9e:97:7f:8b:8e:90:c0:f8:
         e9:38:d4:90:d4:bd:f6:e8:fd:18:16:d0:e3:00:b4:0e:22:c2:
         a9:d6:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:16 2026 by rpki-client