Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa
File:                     3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (raw, json)
Hash identifier:          SnVOuYeK/dyKwN1E/1MKTRAqaoKx5Hf44hqaGuxO+48=
Subject key identifier:   B4:3E:87:F3:0E:AD:64:E1:67:F8:83:3D:AA:AB:43:4D:51:CD:6C:44
Certificate issuer:       /CN=15253A2B5044241610CA488254A5FBDEFCA83946
Certificate serial:       16B020F21422FC17C16A234F38089AA1DDBB771B
Authority key identifier: 15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa
Signing time:             Sun 03 May 2026 02:34:47 +0000
ROA not before:           Sun 03 May 2026 02:29:47 +0000
ROA not after:            Sun 02 May 2027 02:34:47 +0000
asID:                     136128
IP address blocks:        103.94.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl
                          rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b0:20:f2:14:22:fc:17:c1:6a:23:4f:38:08:9a:a1:dd:bb:77:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15253A2B5044241610CA488254A5FBDEFCA83946
        Validity
            Not Before: May  3 02:29:47 2026 GMT
            Not After : May  2 02:34:47 2027 GMT
        Subject: CN=B43E87F30EAD64E167F8833DAAAB434D51CD6C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:69:cd:08:1b:cc:d4:ed:c2:76:3d:d9:cd:
                    f1:9d:d6:f9:bc:12:86:22:e1:1d:84:f1:07:a6:77:
                    60:d6:39:63:33:b3:72:d1:a8:7f:47:a9:a0:ae:82:
                    48:8a:5e:fc:de:f6:42:db:c5:0f:8f:4b:79:61:6f:
                    23:9f:2e:66:ba:0a:f9:e4:5c:76:57:f3:63:fe:0b:
                    a6:f5:4d:81:f4:c5:c7:41:e1:82:f9:3e:fb:f8:51:
                    6f:10:dd:77:05:e4:99:ab:29:45:57:7f:e2:f7:e5:
                    50:76:16:50:c2:85:07:83:83:09:42:a6:7e:0f:cc:
                    55:33:4f:75:1d:ec:17:79:13:74:c0:49:7b:97:b3:
                    6b:7b:aa:fa:1c:07:4f:4f:10:b9:c1:40:cd:06:cf:
                    26:f1:95:d3:ba:c3:d9:27:29:01:34:f6:f1:37:36:
                    79:d3:cb:b6:8a:2e:a5:0a:9f:17:f7:38:bb:35:56:
                    65:bd:a8:fd:86:c7:be:68:55:af:43:bf:9c:ec:4f:
                    5a:2b:69:92:c5:8e:e8:bf:cf:83:8c:7e:eb:f3:88:
                    2e:fb:cc:33:1e:4b:70:9f:0c:7c:b0:4c:c1:24:f2:
                    55:b8:11:90:96:e9:b9:39:e4:d6:ca:d0:8e:b7:50:
                    d6:c2:d5:ca:1f:24:6d:db:f6:50:20:30:b5:41:6f:
                    00:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3E:87:F3:0E:AD:64:E1:67:F8:83:3D:AA:AB:43:4D:51:CD:6C:44
            X509v3 Authority Key Identifier:
                keyid:15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:28:99:c4:15:d6:01:46:82:0a:98:bb:cc:2b:a3:45:37:
         fc:b9:8d:14:6d:34:6d:b2:b7:c7:c5:db:3e:79:ec:d4:1f:32:
         61:86:41:e9:c3:08:2a:56:26:d8:3b:14:c2:d9:81:e1:22:80:
         c3:36:9d:bb:b8:ce:dc:6c:aa:0a:d8:88:4d:1f:a0:80:b4:24:
         d3:a4:b3:9f:42:ec:2a:69:27:bc:d4:14:84:ea:ba:8a:86:9e:
         6a:94:d9:5c:98:9a:44:28:55:ad:61:a7:f4:06:35:63:9b:11:
         e1:a1:01:35:be:27:26:5c:8b:4e:64:53:11:8d:e4:c1:4d:36:
         7f:0d:5f:1c:2b:3a:bb:87:50:fd:23:f9:ec:60:70:c0:85:5a:
         42:67:99:08:bb:59:b5:09:46:72:0a:f4:e4:74:02:7f:f4:9f:
         37:78:55:82:6d:b0:a0:9c:5d:73:f7:b3:8b:58:f6:37:db:3a:
         17:40:3d:99:28:0d:13:30:65:03:11:33:70:61:58:ec:25:9c:
         0e:95:a5:2e:df:ec:b6:5c:f0:28:4e:61:ec:d0:8c:92:28:70:
         a9:9f:f1:94:67:a8:53:40:b0:c0:8a:2b:c5:28:d2:20:95:72:
         2a:5d:e4:1b:d5:7c:60:f4:5d:6c:86:40:e0:ec:9e:b0:a1:25:
         77:59:eb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:13 2026 by rpki-client