Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36362e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          7hDfzZUDYcz0q+XX/NuJ1o0svHceTvT04wKk+Ux25W4=
Subject key identifier:   93:AE:C4:D0:CD:5A:DA:4C:D3:9B:E9:24:C5:28:66:2F:77:6B:7F:63
Certificate issuer:       /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
Certificate serial:       5882EA509E4EC42525C2F7A7C9D860A6C8257FF2
Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36362e302f32342d3234203d3e20313336303535.roa
Signing time:             Sun 03 May 2026 02:34:31 +0000
ROA not before:           Sun 03 May 2026 02:29:31 +0000
ROA not after:            Sun 02 May 2027 02:34:31 +0000
asID:                     136055
IP address blocks:        103.81.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl
                          rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:82:ea:50:9e:4e:c4:25:25:c2:f7:a7:c9:d8:60:a6:c8:25:7f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D
        Validity
            Not Before: May  3 02:29:31 2026 GMT
            Not After : May  2 02:34:31 2027 GMT
        Subject: CN=93AEC4D0CD5ADA4CD39BE924C528662F776B7F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:d2:15:dd:a7:08:ef:64:fe:b7:2d:2a:c7:
                    b3:d3:e7:0b:55:b9:81:24:29:7a:fb:3a:2c:78:a3:
                    af:ea:d6:f8:10:8f:35:6d:54:d2:e2:c9:31:a7:04:
                    b9:3b:c9:cf:c1:53:24:14:b5:bc:3e:e2:23:08:d8:
                    13:a8:a4:be:b5:65:e0:5b:94:34:0e:ba:21:d3:ab:
                    c5:8c:0c:f4:32:cb:1e:b4:74:39:f9:91:34:e6:a4:
                    f5:00:2a:e1:c6:dc:37:59:2c:36:6e:5b:ae:1c:69:
                    4d:6e:50:17:02:46:98:73:83:0d:b2:17:c1:bd:7a:
                    53:6f:09:ec:08:52:2c:b0:77:19:23:98:fd:ea:ca:
                    00:bb:5d:62:a5:5f:4c:5a:cd:ba:df:af:9d:09:1d:
                    1b:f3:71:50:52:87:96:b2:4d:1e:4a:24:7a:53:14:
                    e4:65:12:21:bf:ed:06:5e:ac:f3:1a:c2:72:a4:08:
                    8b:e4:03:e2:73:34:8a:5c:b5:31:ac:b6:e8:b4:c3:
                    8a:1c:0e:37:08:22:fc:fc:80:d5:77:26:eb:ff:ec:
                    77:12:a3:f0:ab:18:91:2c:b1:84:f2:c7:38:d0:40:
                    77:0a:1c:ab:e8:8b:23:60:ed:04:48:9a:57:b7:8d:
                    73:19:76:85:7d:4d:ad:15:00:c8:be:2f:ff:37:10:
                    a2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AE:C4:D0:CD:5A:DA:4C:D3:9B:E9:24:C5:28:66:2F:77:6B:7F:63
            X509v3 Authority Key Identifier:
                keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36362e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:1f:37:6b:a2:88:40:b1:be:79:3f:60:07:63:e0:58:aa:52:
         26:05:c6:ab:d9:6c:9e:f0:2a:1a:16:87:04:27:2c:24:4b:36:
         77:7b:7a:72:fc:3e:4a:e5:ff:2e:a3:2f:ac:f8:ae:e6:5c:ca:
         1b:0a:e6:48:7b:9a:d9:96:c9:0c:83:86:e8:16:f1:56:ea:1c:
         4b:06:6e:83:88:cc:1e:c6:54:83:c1:0e:92:bf:1d:1f:6b:6e:
         41:12:f3:e9:ca:53:5d:e6:f4:8a:4a:08:d6:8c:5b:25:4e:4a:
         24:b8:35:04:a3:69:86:4d:3b:ee:c6:e4:61:64:70:a2:66:56:
         02:91:a9:bc:be:d6:60:21:f0:cf:12:96:75:24:55:b8:bb:62:
         47:27:33:0c:6e:40:49:72:38:36:cc:e0:5f:0f:e3:25:44:73:
         b7:6f:bd:ca:7b:20:c7:19:e3:16:eb:2c:c1:9f:7b:66:e7:f2:
         0e:d0:50:7d:5c:81:e0:74:05:c6:89:67:e3:e5:8e:0d:a0:51:
         11:9b:3e:46:1b:9c:f3:17:eb:e3:1e:9e:24:28:71:8c:cb:06:
         75:d2:50:41:03:b7:0c:32:70:db:2d:7e:d7:b0:c2:a9:84:c8:
         9a:3a:f9:1f:54:e7:9c:64:77:8e:91:af:57:c9:2d:63:a1:88:
         f3:c8:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:06 2026 by rpki-client