Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/3130332e37362e39312e302f32342d3234203d3e20313530323432.roa
File:                     3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (raw, json)
Hash identifier:          njSBQKxaBf8FgxYd9UzVWcsd+7NkvHs45etGgjIxXxw=
Subject key identifier:   4A:DD:2E:1F:E3:36:42:0C:65:3D:8D:F8:B4:1D:8E:5D:C6:58:49:C0
Certificate issuer:       /CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF
Certificate serial:       69FDB3F55CBB4CE17E823047889177A2B02351BE
Authority key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/3130332e37362e39312e302f32342d3234203d3e20313530323432.roa
Signing time:             Sun 03 May 2026 02:25:09 +0000
ROA not before:           Sun 03 May 2026 02:20:09 +0000
ROA not after:            Sun 02 May 2027 02:25:09 +0000
asID:                     150242
IP address blocks:        103.76.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl
                          rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fd:b3:f5:5c:bb:4c:e1:7e:82:30:47:88:91:77:a2:b0:23:51:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF
        Validity
            Not Before: May  3 02:20:09 2026 GMT
            Not After : May  2 02:25:09 2027 GMT
        Subject: CN=4ADD2E1FE336420C653D8DF8B41D8E5DC65849C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:bc:e7:aa:9f:0a:15:f9:dc:41:cb:ec:6a:
                    6e:fc:58:76:45:a4:fa:00:6f:cb:70:24:ef:5e:87:
                    be:91:aa:b2:63:86:2a:e8:2e:34:d1:a4:ae:84:d6:
                    6b:b8:13:35:73:cd:2b:07:3e:27:14:01:6e:6e:ce:
                    95:d9:92:88:05:84:b1:8c:72:f6:6d:e2:7e:15:b7:
                    ab:dc:d4:36:cb:13:0f:3b:e9:c2:05:ee:ac:2a:a9:
                    1e:bb:ff:37:4b:62:6c:89:7c:a8:01:18:ec:84:a5:
                    f3:c8:8f:95:9d:6d:1d:9a:52:de:12:1c:c8:04:40:
                    e9:12:73:0c:01:56:91:be:0c:4c:73:6e:cd:40:66:
                    ae:47:0f:0c:88:38:0b:06:61:8b:f9:8d:a3:73:da:
                    b6:ec:84:5d:97:54:ec:1e:22:f9:aa:44:82:ea:41:
                    21:1e:e1:b5:1d:bb:d8:c9:67:51:85:af:c4:de:63:
                    7e:1b:9b:1d:41:4d:9a:2f:16:ea:e8:9b:88:d6:76:
                    68:09:ca:f7:ce:39:db:57:1b:7a:15:2e:eb:8d:99:
                    4d:95:f1:4b:c6:7f:d7:ff:82:a4:bf:76:ab:4f:b5:
                    7d:17:bb:8e:96:ba:bb:dc:37:4b:86:3a:36:ca:8c:
                    4e:7e:35:f0:7c:f5:98:f9:41:4d:00:fb:1c:1d:75:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DD:2E:1F:E3:36:42:0C:65:3D:8D:F8:B4:1D:8E:5D:C6:58:49:C0
            X509v3 Authority Key Identifier:
                keyid:2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/3130332e37362e39312e302f32342d3234203d3e20313530323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:42:6f:76:73:b0:2b:9d:d9:70:8e:16:cc:68:35:6c:a3:61:
         14:0c:a2:aa:b0:68:a5:d4:d9:2d:6e:ae:43:d1:88:5f:0b:13:
         b4:92:c0:f9:60:92:c4:a7:b9:5d:52:5d:89:cd:b0:62:5e:d8:
         30:1b:7c:6f:69:54:c7:fb:97:bf:01:1f:19:43:d5:6f:65:7d:
         ef:18:79:ae:a6:91:38:40:90:18:ae:a0:62:6e:92:56:3e:65:
         1e:39:70:7f:7c:c4:c4:00:8b:08:c5:65:fb:c2:bd:21:b9:66:
         ef:a7:7a:9f:6b:dd:c5:ba:59:3f:53:a6:39:fe:bb:1e:9d:b7:
         48:fa:77:37:cf:f4:75:61:49:98:89:5b:d7:f8:d6:84:19:9a:
         06:c1:f9:95:5d:ba:91:e9:77:cb:ff:5c:56:4b:49:c6:b9:45:
         06:63:a7:74:35:42:f1:ba:85:aa:3d:07:2e:52:7c:d4:f3:2d:
         85:51:7d:43:05:22:7e:cf:a7:c0:47:a3:db:43:d3:94:18:5e:
         9a:04:9d:74:86:53:13:23:e6:f6:a2:45:1d:6d:19:fa:88:05:
         ba:fc:25:b4:66:ff:f3:d8:d4:04:d9:1f:0c:ee:f5:44:3d:b2:
         16:f2:cd:63:ef:c3:88:cc:a0:43:5b:9d:51:1b:be:24:9a:a6:
         0e:9c:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:38 2026 by rpki-client