Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa
File:                     3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (raw, json)
Hash identifier:          H8aIKDmEKvaPKBbfecYKEblnH3STGcj0MkoXv4D6fxM=
Subject key identifier:   E6:01:BD:05:CD:30:E6:F7:C0:E8:20:16:23:74:C5:3D:4E:70:3F:AF
Certificate issuer:       /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D
Certificate serial:       69DF44A17A48217CE8B4657467B442D62468E336
Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa
Signing time:             Sun 03 May 2026 02:25:36 +0000
ROA not before:           Sun 03 May 2026 02:20:36 +0000
ROA not after:            Sun 02 May 2027 02:25:36 +0000
asID:                     141639
IP address blocks:        103.162.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl
                          rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:df:44:a1:7a:48:21:7c:e8:b4:65:74:67:b4:42:d6:24:68:e3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D
        Validity
            Not Before: May  3 02:20:36 2026 GMT
            Not After : May  2 02:25:36 2027 GMT
        Subject: CN=E601BD05CD30E6F7C0E820162374C53D4E703FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:93:b8:6a:85:e9:54:db:ba:8a:86:03:1e:25:
                    e5:2c:90:8c:9a:2d:a9:02:39:98:d7:ec:97:eb:4b:
                    4a:fa:04:30:bc:db:09:b7:77:e4:6e:10:60:52:2b:
                    cd:ed:06:3e:b1:5f:ee:02:da:d7:07:78:72:2f:b9:
                    60:5a:4a:2f:23:20:0c:b6:4f:7f:48:ad:86:2f:0a:
                    60:af:50:90:33:b8:db:5f:0c:4a:09:97:7f:c5:3c:
                    39:a9:33:42:4b:f3:49:3e:e9:6c:10:76:68:fb:bf:
                    ec:93:c4:d3:9c:9e:df:94:5c:1d:68:57:7d:3b:2a:
                    b1:96:5d:c8:a0:bf:73:f7:41:89:a6:69:53:91:62:
                    ed:e9:a0:4f:15:7f:57:5f:0e:1c:b0:0c:fc:fc:34:
                    fb:c2:c2:53:11:93:5c:fc:f6:21:65:2b:a9:43:10:
                    58:9a:e2:b5:04:92:f3:9f:e9:bb:bc:29:01:04:a5:
                    97:91:6d:2b:62:47:c5:84:59:52:3a:29:40:7e:3c:
                    8f:1b:fe:a5:d5:03:dc:85:f5:95:68:ab:01:11:77:
                    b1:a8:84:4c:8a:25:e4:13:b1:8b:15:82:e3:ff:33:
                    a1:ac:0f:2f:cf:48:f6:5d:4f:27:8c:f0:c6:c5:1e:
                    f6:5d:33:bf:fa:1a:73:05:91:33:2d:f4:7c:4e:e4:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:01:BD:05:CD:30:E6:F7:C0:E8:20:16:23:74:C5:3D:4E:70:3F:AF
            X509v3 Authority Key Identifier:
                keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:75:d1:e6:8f:2b:aa:f3:09:c5:84:12:ce:27:50:f8:2c:db:
         3c:3e:f2:45:f9:9f:28:20:a7:8d:67:ab:ad:7f:b3:71:d5:23:
         bf:1f:c3:d2:ca:34:2d:7e:28:ed:2f:6b:66:a7:25:64:d8:1f:
         8c:be:75:25:54:00:25:18:48:c9:07:70:ac:32:cf:a3:5e:3b:
         28:a6:0f:fa:9d:8a:3a:e0:a9:c9:d4:23:6b:c1:78:d8:bc:50:
         1c:a7:bc:aa:63:2d:60:fd:c3:87:33:0a:76:2c:ee:ca:c6:26:
         32:6c:5f:03:fb:e3:18:05:7c:0a:90:f5:c7:3c:04:ff:30:2b:
         50:65:94:e4:76:9d:c5:2a:55:f5:de:7d:b6:8a:df:22:31:bc:
         72:8f:4a:d8:b6:4b:65:c5:d9:1d:6d:b1:dd:9f:99:ba:cc:44:
         c2:29:3f:02:47:8b:30:8e:11:6d:d4:d5:19:eb:67:90:e6:2d:
         cc:00:c2:b9:da:3e:52:aa:05:18:84:dc:43:be:a3:4a:a4:35:
         de:17:e3:9b:ec:07:1b:e9:0a:51:f1:e4:a6:cb:91:e4:51:54:
         50:5c:c5:e7:2f:73:25:ba:ad:a7:4f:c3:5f:e4:21:85:f5:0b:
         c1:fb:9b:26:e3:ea:98:e9:32:38:c7:8e:1c:bb:e7:77:bd:a0:
         5f:43:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:29 2026 by rpki-client