Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa
File:                     3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (raw, json)
Hash identifier:          Acd+CNDLcrmehVnAROgrc31TunZVSjXxsQg7HAi/x2w=
Subject key identifier:   3E:05:D6:17:63:86:90:04:73:B6:A9:7C:3D:D5:B8:D6:F7:E5:A1:80
Certificate issuer:       /CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A
Certificate serial:       7E17DAE9CE9C4AD05403B5BE837E69E0B485814A
Authority key identifier: 1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa
Signing time:             Sun 03 May 2026 02:28:21 +0000
ROA not before:           Sun 03 May 2026 02:23:21 +0000
ROA not after:            Sun 02 May 2027 02:28:21 +0000
asID:                     137315
IP address blocks:        103.109.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl
                          rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:17:da:e9:ce:9c:4a:d0:54:03:b5:be:83:7e:69:e0:b4:85:81:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A
        Validity
            Not Before: May  3 02:23:21 2026 GMT
            Not After : May  2 02:28:21 2027 GMT
        Subject: CN=3E05D6176386900473B6A97C3DD5B8D6F7E5A180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4d:28:09:f6:09:85:d1:55:3e:4a:b8:38:ec:
                    0b:71:9a:fe:ac:9a:b6:65:69:5e:5c:8a:17:ad:0b:
                    ac:b3:f4:2c:68:27:6c:89:df:10:6e:e9:40:0a:4e:
                    42:22:cd:a1:23:42:68:1e:c0:a9:32:70:79:fa:18:
                    46:a3:3f:f0:44:a2:08:6d:df:d9:77:c3:fa:ec:f2:
                    2c:e9:d6:d5:62:40:6b:22:fc:d7:9d:8c:ed:17:60:
                    55:ab:02:d6:9a:4f:db:6c:88:e5:e9:d9:86:fd:ba:
                    a2:66:50:83:40:75:f9:5f:1b:a0:4c:b4:17:88:9f:
                    82:f8:a0:02:37:8c:b1:8a:3f:35:83:30:79:ec:d8:
                    d6:8b:c2:e7:1c:1d:4e:8e:55:99:fa:02:fb:de:67:
                    bc:c7:ab:df:65:28:35:aa:cf:0e:37:89:5b:9c:e3:
                    62:b1:fa:87:2b:97:6c:00:62:d9:b6:6f:b7:4d:bf:
                    cb:ff:11:54:cf:45:02:c4:54:55:5f:f6:7a:29:ef:
                    c2:3c:f9:08:fd:6b:f2:56:4e:99:55:8d:06:03:ff:
                    e8:12:9f:d8:8f:fc:48:d0:5f:53:50:40:a3:57:a0:
                    34:7a:af:a0:ce:a2:15:6f:7d:d0:96:bd:dd:39:7a:
                    f7:c1:69:16:b0:81:d7:2d:3f:2d:c7:f2:35:42:19:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:05:D6:17:63:86:90:04:73:B6:A9:7C:3D:D5:B8:D6:F7:E5:A1:80
            X509v3 Authority Key Identifier:
                keyid:1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ca:c4:ba:0f:32:0e:49:c6:e2:e3:01:6b:4c:42:e4:30:c7:
         aa:84:84:9c:bd:43:0d:cb:1f:33:51:22:17:5b:45:88:11:55:
         0a:7e:81:98:36:96:0c:05:49:ab:9c:c7:7d:ca:29:54:45:70:
         53:a1:cd:83:db:ec:f8:e2:72:d1:9e:dd:c7:7f:80:48:48:48:
         9c:e5:42:e5:44:9c:9b:ef:53:d5:33:82:54:17:73:7e:0e:fd:
         7b:6a:c0:da:f5:db:88:4d:0a:2f:a6:53:3a:c9:5d:00:59:8b:
         b8:29:d7:9c:79:d4:91:41:ab:01:a5:13:95:71:09:bb:8d:52:
         e2:66:a9:06:a1:14:cf:e0:91:2a:1d:cb:ea:92:c7:61:e1:ef:
         3d:e4:64:00:e3:88:02:bb:bf:b8:72:9a:3f:b3:18:2f:5d:b6:
         69:22:2f:6b:ec:dd:eb:c6:96:bf:e6:6c:e5:83:7b:6e:02:b4:
         43:4b:52:87:60:1f:ec:97:c1:ba:b9:62:b1:65:66:c6:a1:5c:
         a2:e1:4e:d6:a5:85:55:24:69:8e:fe:c5:bb:04:5f:a2:58:72:
         25:6e:9d:fe:86:a8:fc:d5:77:6a:f5:3e:de:fb:23:db:e0:d0:
         0b:bd:03:ba:6a:14:2a:6f:67:51:33:d8:56:80:86:83:92:0b:
         1f:14:21:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:09 2026 by rpki-client