Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132302e302f32322d3232203d3e203536323436.roa
File:                     3130332e31302e3132302e302f32322d3232203d3e203536323436.roa (raw, json)
Hash identifier:          qzwlvuYjyUCDjqoZCEOWELAIJi07tRUfQOLpwzmg2eg=
Subject key identifier:   67:F8:E8:A0:CB:96:A2:C8:D8:1B:65:98:51:8B:72:E3:70:26:05:CF
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       65D2DF24650345001FB66F6A1B648AEDB03D02B9
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132302e302f32322d3232203d3e203536323436.roa
Signing time:             Sun 03 May 2026 02:36:40 +0000
ROA not before:           Sun 03 May 2026 02:31:40 +0000
ROA not after:            Sun 02 May 2027 02:36:40 +0000
asID:                     56246
IP address blocks:        103.10.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d2:df:24:65:03:45:00:1f:b6:6f:6a:1b:64:8a:ed:b0:3d:02:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:40 2026 GMT
            Not After : May  2 02:36:40 2027 GMT
        Subject: CN=67F8E8A0CB96A2C8D81B6598518B72E3702605CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:ab:9d:9b:a2:c9:8c:d5:56:73:e0:b9:ab:
                    48:b5:08:f3:92:ff:ed:70:86:6d:6d:59:d0:f1:7a:
                    46:3e:3c:84:4d:d2:64:40:04:2e:00:d6:4e:96:b5:
                    01:a3:71:8f:dd:92:8b:0e:6f:53:9c:b3:4c:c6:6b:
                    d5:d9:f0:3c:74:e0:7d:ec:19:a5:22:41:b8:32:5c:
                    93:39:5b:5d:aa:f9:0c:3f:74:f3:5d:34:87:fc:00:
                    f2:fe:ec:e0:f1:0a:f5:cf:c6:83:eb:37:b1:7f:ee:
                    6c:06:de:a3:fa:43:7c:d5:67:f1:6f:54:d7:c2:36:
                    6a:f7:79:a0:8b:5f:53:ee:ee:90:6a:0c:18:76:57:
                    ec:fc:2a:2a:7a:12:cc:56:53:95:4f:de:9a:f6:31:
                    e3:15:b9:61:8a:86:a9:8d:3b:25:65:70:a8:d1:8e:
                    d5:e2:2b:88:bb:57:db:7b:2a:5a:a2:b2:54:43:3d:
                    1b:3a:d3:88:d4:38:91:44:81:57:9f:d1:aa:f4:4c:
                    ea:e0:94:9b:df:d1:9e:79:c3:4c:bc:1d:af:3c:d5:
                    ce:d7:28:ed:34:82:7e:51:a7:54:a8:3f:aa:fa:2a:
                    26:31:4c:15:f4:cf:f9:9a:e6:d6:49:0a:fe:7c:28:
                    47:de:18:bb:68:ea:e3:de:3d:f2:72:f3:1a:f6:31:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F8:E8:A0:CB:96:A2:C8:D8:1B:65:98:51:8B:72:E3:70:26:05:CF
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132302e302f32322d3232203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:68:c9:fa:77:72:5b:38:24:d7:0c:6f:4a:f6:97:65:76:43:
         aa:16:a7:81:4e:bb:e9:7a:8c:f4:f7:79:f0:23:d1:46:4d:0f:
         d5:8f:b8:86:27:b0:64:8c:df:60:95:ac:10:61:06:56:cf:40:
         25:0c:bb:99:fa:bf:74:98:07:73:81:23:63:61:34:1e:f5:77:
         6d:b9:d1:53:84:dc:5e:79:63:4c:9f:b5:3f:c8:16:f8:b5:7e:
         3b:9c:45:76:e7:c3:ab:6a:4d:9c:1f:e8:97:a1:42:2b:9c:51:
         35:b4:84:26:cb:4f:52:5c:f9:73:6a:98:4d:ce:40:ec:74:c2:
         b6:12:d9:f7:85:e1:c9:6d:64:76:3c:d3:e5:36:22:ed:b7:d3:
         fe:c6:2c:d7:bb:44:8a:58:ce:52:fc:73:b4:ef:05:e8:ee:a6:
         f0:1d:0f:ad:2f:15:b4:8c:2f:4c:44:ac:03:ef:70:3b:ad:26:
         3e:31:c9:2d:87:0f:2a:ff:a6:bc:92:73:38:22:25:3f:43:27:
         03:07:35:66:3a:3b:c7:49:95:8d:b8:6b:9b:2f:69:93:77:a5:
         8c:45:92:27:7b:77:96:c8:d0:fb:c8:17:d3:39:8d:5f:60:00:
         e8:83:d9:7e:c6:b5:5e:66:d2:68:e6:5c:44:42:9d:bc:7d:f5:
         8c:b8:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:36 2026 by rpki-client