Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa
File:                     3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (raw, json)
Hash identifier:          qgoD91gK7+McaB5oJcIqhycO0nQvgEjYPEclcWIzrPE=
Subject key identifier:   55:24:BD:FE:6C:33:3F:71:C0:46:2F:91:8B:F5:C0:74:B9:A9:0F:BC
Certificate issuer:       /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D
Certificate serial:       03F1DB8ADDFC0C70314CBE8AC13D01DFFC761C63
Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa
Signing time:             Sun 03 May 2026 02:25:35 +0000
ROA not before:           Sun 03 May 2026 02:20:35 +0000
ROA not after:            Sun 02 May 2027 02:25:35 +0000
asID:                     141639
IP address blocks:        103.162.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl
                          rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f1:db:8a:dd:fc:0c:70:31:4c:be:8a:c1:3d:01:df:fc:76:1c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D
        Validity
            Not Before: May  3 02:20:35 2026 GMT
            Not After : May  2 02:25:35 2027 GMT
        Subject: CN=5524BDFE6C333F71C0462F918BF5C074B9A90FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:42:6b:aa:28:02:36:4e:af:01:db:5d:7e:
                    06:5a:cf:7e:ef:9d:70:c9:10:99:bc:8c:3c:5c:2c:
                    ca:64:d9:17:88:39:b6:d9:11:2c:e8:db:32:bc:be:
                    c1:27:11:ec:9d:75:dd:70:69:16:df:53:e6:cb:a3:
                    02:5f:61:24:ef:9b:41:03:dc:83:8a:34:24:78:dc:
                    58:08:21:2f:af:ec:d8:8b:94:b3:57:d6:0d:fa:43:
                    3b:d6:58:ab:4c:d2:e7:fe:d3:20:84:8e:0d:db:08:
                    77:8b:51:20:bc:2b:9f:9c:91:c6:a1:6f:a6:c8:25:
                    9a:43:1b:76:9d:48:fe:87:e0:f6:c4:00:7f:8e:6e:
                    af:56:3b:f6:68:51:de:66:c3:27:3c:01:fe:94:8a:
                    c1:6e:1d:22:64:b1:f8:a0:bc:c3:74:e1:e8:41:bb:
                    09:83:45:19:6f:16:99:32:ee:0e:b2:5f:5e:f1:20:
                    1c:c5:55:06:5c:e2:01:b0:b5:cf:b9:95:eb:b6:e3:
                    83:46:2c:72:96:0b:b1:73:38:d1:5c:10:ff:64:88:
                    05:ae:08:5c:4b:54:e9:ec:f4:37:ea:51:ee:c0:f6:
                    6a:ca:d2:d6:a9:33:11:59:fe:c3:a0:46:e9:dd:3a:
                    e7:c1:e8:ab:fb:4a:fa:3f:91:d5:73:18:9c:79:2b:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:24:BD:FE:6C:33:3F:71:C0:46:2F:91:8B:F5:C0:74:B9:A9:0F:BC
            X509v3 Authority Key Identifier:
                keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:e4:40:02:22:01:f4:8e:bb:fd:0f:9c:71:19:df:18:c9:
         e9:c2:fb:9c:a3:b0:ea:51:13:09:a9:32:e0:92:ef:40:95:8d:
         30:1e:cf:ba:70:fa:b1:b7:dc:c8:96:19:af:77:21:48:96:de:
         78:6b:cb:12:c2:03:09:30:78:2e:d8:0a:78:4e:c8:d9:43:1f:
         99:f3:f2:28:23:3f:8a:5f:27:ac:af:9b:8d:c3:cc:42:b6:48:
         e4:74:c0:e6:4c:3b:fb:2c:9a:9e:3f:bb:44:15:4a:e4:ff:85:
         32:73:dc:a8:4f:4c:e8:2b:3b:ae:8a:f8:e1:9b:f8:3c:8e:50:
         a4:39:bb:f7:59:36:2e:61:e2:75:3b:d0:75:47:92:8e:e0:a1:
         92:94:cd:1c:5e:28:c7:09:7b:32:a6:ca:69:2a:37:61:9f:62:
         39:d8:9b:65:24:c7:b3:6b:6c:8d:f5:71:96:10:c0:87:28:d8:
         93:81:e5:d6:12:dd:14:dc:eb:97:29:93:7c:5e:ab:68:9b:cc:
         e3:71:55:cf:18:98:8b:82:00:20:4f:cc:a3:2f:95:70:08:fb:
         00:d5:83:b1:e5:bd:95:ed:42:87:14:d9:f2:2a:58:98:f5:30:
         16:25:3d:94:e6:71:1d:cd:f9:f4:94:4f:f4:59:e2:0f:9a:a2:
         5f:e9:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:32 2026 by rpki-client