Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          PJcKYesMwsoF3t1uQUrpRAB8K4UX64Wx2m7xs9OF5uY=
Subject key identifier:   A4:15:F8:E8:6B:E9:2B:E2:0F:0A:2D:14:ED:00:B2:C6:20:F8:79:7F
Certificate issuer:       /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
Certificate serial:       1AC805B6A9D1DCC6A06760464BB361D760A413C8
Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32342d3234203d3e20313336303535.roa
Signing time:             Sun 03 May 2026 02:34:30 +0000
ROA not before:           Sun 03 May 2026 02:29:30 +0000
ROA not after:            Sun 02 May 2027 02:34:30 +0000
asID:                     136055
IP address blocks:        103.81.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl
                          rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c8:05:b6:a9:d1:dc:c6:a0:67:60:46:4b:b3:61:d7:60:a4:13:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
        Validity
            Not Before: May  3 02:29:30 2026 GMT
            Not After : May  2 02:34:30 2027 GMT
        Subject: CN=A415F8E86BE92BE20F0A2D14ED00B2C620F8797F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:44:36:d6:c4:d0:13:24:88:59:f6:e6:07:
                    c3:2e:75:82:b1:04:fc:6a:dc:65:42:fc:87:ca:1f:
                    b2:39:2f:9e:28:cb:a1:63:88:aa:c2:e4:60:a9:6f:
                    0b:ea:b2:cf:b3:b0:d6:4d:78:7d:c9:57:d0:16:32:
                    3b:77:d5:2d:b3:f6:81:a3:82:17:6a:7d:5d:fd:50:
                    cc:f8:6b:2f:3a:41:79:e4:6e:5b:cd:53:b4:30:29:
                    ec:46:1a:da:ff:67:8e:1b:67:13:80:34:1b:13:71:
                    a3:ec:90:bd:67:d5:e6:f0:ae:08:8b:c8:25:78:0b:
                    fa:4c:01:75:38:45:73:e2:2f:7f:b8:cd:99:90:7a:
                    ca:7c:76:33:a9:3a:e7:e5:74:d0:c6:4d:23:53:d1:
                    59:57:bf:12:33:c0:a2:e0:d7:69:90:25:99:08:5d:
                    9b:ac:fb:9c:6d:38:67:33:90:97:3d:bb:fd:32:9e:
                    e1:74:67:76:cb:26:93:6f:e8:c9:51:f8:85:d9:c3:
                    c8:c1:16:b6:d3:e2:b3:2b:74:33:e2:7b:61:26:b9:
                    17:63:30:d0:b1:78:a0:34:b8:65:3f:73:45:18:3c:
                    f2:7e:21:21:9a:d4:3c:42:cb:06:cd:84:44:cb:d0:
                    06:5d:41:f7:b4:a3:7b:75:04:fa:64:d7:62:0e:84:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:15:F8:E8:6B:E9:2B:E2:0F:0A:2D:14:ED:00:B2:C6:20:F8:79:7F
            X509v3 Authority Key Identifier:
                keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:64:30:a6:9f:5c:a1:eb:db:14:23:e1:58:cb:b0:f2:e2:
         f0:16:6a:4d:a5:b0:cf:2e:f6:70:dd:4a:97:45:e5:d4:31:ca:
         01:e5:a4:0f:7f:e6:07:94:24:84:23:27:6b:7e:5a:d9:0c:b1:
         94:23:4f:4f:14:b5:83:77:b8:20:88:37:85:f4:44:db:d9:f1:
         5e:fe:ec:5b:8f:64:6f:be:60:a5:45:30:e1:a0:59:6c:68:ba:
         c5:bf:df:bd:03:d1:c0:d4:8a:5f:8b:42:7c:4f:bf:37:a1:d6:
         91:46:06:82:07:22:5e:73:58:ff:6a:e7:db:67:8e:4b:ca:e0:
         29:52:35:35:e5:5f:7b:2d:8e:1f:5d:99:43:c2:08:01:48:99:
         eb:ae:3f:f4:2f:26:d2:28:d9:d1:de:27:c2:dc:98:31:8c:e2:
         b0:45:a2:1c:af:46:82:e1:78:db:3e:3f:f5:a3:61:61:e2:3a:
         44:d2:04:3b:db:cf:0d:1c:70:9a:f8:a5:ac:48:14:32:74:31:
         06:9e:21:bb:8b:9d:5f:8c:cf:c6:e8:2a:a6:ae:86:6b:ad:a6:
         51:34:9d:a9:ff:56:40:7b:be:a4:e0:fb:8c:bf:5f:de:1b:1a:
         7c:d2:66:c2:c2:1c:a7:2e:92:1d:be:7b:44:90:9e:b0:7c:4b:
         38:9f:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:33 2026 by rpki-client