Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32322d3234203d3e20313336313237.roa
File:                     3130332e39372e342e302f32322d3234203d3e20313336313237.roa (raw, json)
Hash identifier:          JKx5cXFJ9JwbuaKvmzbMBf7ucrHYe7PUJvHjTqORfvc=
Subject key identifier:   70:E8:5B:72:C0:F2:A3:DB:28:C4:56:E7:44:A7:DF:7D:67:67:57:6D
Certificate issuer:       /CN=509D7A005D22B25F29771D4736A9F3273A87402B
Certificate serial:       0182B63F4B6150AA28EE56750585CF960817C4E8
Authority key identifier: 50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32322d3234203d3e20313336313237.roa
Signing time:             Sun 03 May 2026 02:29:55 +0000
ROA not before:           Sun 03 May 2026 02:24:55 +0000
ROA not after:            Sun 02 May 2027 02:29:55 +0000
asID:                     136127
IP address blocks:        103.97.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl
                          rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b6:3f:4b:61:50:aa:28:ee:56:75:05:85:cf:96:08:17:c4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509D7A005D22B25F29771D4736A9F3273A87402B
        Validity
            Not Before: May  3 02:24:55 2026 GMT
            Not After : May  2 02:29:55 2027 GMT
        Subject: CN=70E85B72C0F2A3DB28C456E744A7DF7D6767576D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:bd:29:d0:18:35:db:62:7d:a4:6d:24:aa:
                    41:de:c3:13:47:e3:9f:6a:74:e0:f0:3e:15:2b:9c:
                    11:f3:f9:ef:75:6e:ef:ab:c1:a8:67:38:a3:90:1a:
                    ad:3e:6a:00:4e:7d:be:73:05:86:6a:16:a3:3b:ee:
                    5b:59:69:84:7e:8e:38:f7:07:03:2b:5e:89:c3:09:
                    c2:05:3d:b4:06:ac:ff:2c:0b:b3:95:ec:99:85:50:
                    f9:35:3f:7d:0b:5f:ee:08:d1:3d:72:8a:99:b5:bc:
                    d8:89:fb:70:9e:c3:59:31:a4:e5:76:6b:8b:d7:a1:
                    dd:e4:5e:b9:56:81:ae:ab:34:f3:cc:38:eb:84:8e:
                    b4:56:9c:1b:42:f6:cb:2a:f9:4c:d7:03:c7:2d:be:
                    31:bf:ce:78:01:aa:10:5f:e1:87:f4:90:52:4b:5b:
                    ab:5e:90:e4:3c:75:33:31:6e:c6:34:c3:4e:ae:ca:
                    12:cc:45:24:a1:51:41:f3:80:95:63:0c:b4:a0:5a:
                    69:70:8f:81:48:82:f9:17:bc:5c:6f:8e:55:d9:e3:
                    b6:5c:6c:63:3a:31:92:41:8e:58:55:0b:28:96:23:
                    ee:1e:87:06:27:5e:d0:68:4f:33:9e:fe:ba:fe:0c:
                    5d:bb:8f:14:f2:ff:e2:2c:92:86:d6:d8:ed:72:63:
                    98:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:5B:72:C0:F2:A3:DB:28:C4:56:E7:44:A7:DF:7D:67:67:57:6D
            X509v3 Authority Key Identifier:
                keyid:50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32322d3234203d3e20313336313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:d5:3c:72:29:39:c4:f6:9a:14:52:dc:66:f2:a5:f0:0d:66:
         f4:10:84:ff:55:f4:eb:18:d1:39:dd:53:d7:2b:36:b1:7b:9d:
         0b:75:ba:ba:7c:3c:73:dd:dc:46:a1:1f:d7:24:f9:80:32:95:
         08:52:8e:8d:dd:5b:1f:e9:40:72:89:c0:59:66:01:53:6e:8e:
         e2:d3:c4:43:4d:11:f6:7c:dc:d7:c9:e1:da:80:08:71:0f:ec:
         2b:da:95:16:3d:69:e2:9d:7d:ca:6a:9b:98:82:1d:de:c3:db:
         25:95:03:df:0d:0e:40:53:d6:6a:01:7d:57:3c:60:64:bd:bf:
         6c:63:58:10:01:6b:d5:f7:55:da:ec:d3:1a:e6:01:62:39:69:
         23:68:0b:9b:38:57:b0:e4:1e:bc:a3:e2:50:d1:10:b8:8c:32:
         9c:79:bf:06:3b:cd:1e:5c:11:21:39:83:93:17:58:df:8d:4d:
         42:09:31:43:37:ac:ae:ab:f8:9f:ac:0f:16:0d:4e:8b:9d:6c:
         ee:98:8b:fa:97:72:4d:13:ce:ee:6f:66:35:d4:5a:8a:08:aa:
         b3:87:34:fe:59:3e:a9:9a:4b:fe:df:a9:86:d6:2e:46:a0:38:
         af:f0:5f:33:43:d2:70:0f:81:02:07:d2:01:54:3d:57:af:bf:
         59:b4:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:55 2026 by rpki-client