Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa
File:                     3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (raw, json)
Hash identifier:          YTCmCer361lbPyWorpFl5d+Z6lvA+nitAm63kpLBrjA=
Subject key identifier:   44:68:4B:3E:86:03:2D:28:B1:18:86:E1:DF:AC:7C:A2:EA:42:5F:C4
Certificate issuer:       /CN=3C38CDC785C4C8B22E60377271E55409582CCE11
Certificate serial:       476545926970C91E8348513E91EA69C9E4A3804E
Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa
Signing time:             Sun 03 May 2026 02:36:49 +0000
ROA not before:           Sun 03 May 2026 02:31:49 +0000
ROA not after:            Sun 02 May 2027 02:36:49 +0000
asID:                     138143
IP address blocks:        103.134.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl
                          rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:65:45:92:69:70:c9:1e:83:48:51:3e:91:ea:69:c9:e4:a3:80:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11
        Validity
            Not Before: May  3 02:31:49 2026 GMT
            Not After : May  2 02:36:49 2027 GMT
        Subject: CN=44684B3E86032D28B11886E1DFAC7CA2EA425FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:1d:96:2e:83:eb:3a:d8:1d:02:70:ef:18:
                    c5:1b:df:a7:d8:b7:df:b8:98:58:c3:87:d4:50:8e:
                    86:23:33:e5:ac:6a:3b:50:89:a0:18:27:bc:bd:24:
                    01:45:b1:ce:69:f6:87:a6:ea:88:aa:c9:0f:9f:21:
                    35:78:07:d5:a9:ae:86:93:ad:0f:3e:0c:3b:fb:ba:
                    b4:23:8c:f8:ee:30:3c:55:59:8c:20:7e:a0:19:7c:
                    83:82:cb:f0:2f:4d:7e:fd:88:13:b3:e9:f6:4b:9a:
                    c2:42:24:81:a7:80:f7:20:aa:1e:d5:62:5b:70:59:
                    46:ee:84:c2:b1:ed:61:cf:16:69:e2:f2:8f:f0:79:
                    6f:07:a4:fa:6e:bf:22:9d:b4:59:db:78:6d:d4:2a:
                    65:06:14:fd:52:28:f4:75:c1:9f:ed:de:e1:9c:54:
                    11:c1:9f:54:14:78:3a:c7:93:82:1d:e3:e8:b2:21:
                    c0:fa:a2:2f:42:eb:14:8b:4a:e8:e0:e1:f7:13:51:
                    7b:15:a8:4a:27:42:d2:21:05:8d:13:18:71:85:25:
                    f8:5b:01:12:f9:43:a3:1a:85:1e:8d:db:b0:1e:41:
                    fe:ec:8c:98:27:34:be:ac:a6:ac:5b:d1:5e:7c:5d:
                    01:8a:93:38:c1:da:c4:94:96:72:2e:c7:38:f6:c7:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:68:4B:3E:86:03:2D:28:B1:18:86:E1:DF:AC:7C:A2:EA:42:5F:C4
            X509v3 Authority Key Identifier:
                keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:7c:47:1a:f0:a9:1e:f5:46:e3:f5:2b:cb:53:44:ae:0f:ab:
         3b:1d:e7:bb:d1:45:1a:4e:51:14:bb:ed:69:c0:e1:b1:e2:9d:
         ec:9c:f2:d2:14:ce:75:31:62:a3:25:44:0d:c6:5b:f9:a4:6b:
         32:36:11:21:16:99:10:27:6d:b4:01:fe:d3:34:03:c7:62:ae:
         0f:45:5b:c2:b7:84:13:79:8c:3e:1c:6a:bd:46:a4:ac:77:b8:
         a4:8c:8a:d7:b7:4b:b5:bb:0e:45:dd:d4:e6:86:3f:bc:b8:cc:
         da:78:e6:dc:fd:10:07:55:6a:95:ba:74:ca:45:b3:9f:85:d5:
         55:c2:8e:ff:5c:51:bf:73:4a:b9:f9:b4:d4:58:c7:bb:15:91:
         55:73:26:c2:a9:0f:61:28:a0:c5:f2:7c:36:01:d5:8d:e3:3e:
         d3:fa:0f:a4:83:47:bc:c8:1e:fa:d8:a8:93:92:76:f6:5c:09:
         2a:61:e3:a3:6b:93:fc:e9:7d:4f:75:32:3d:bf:e3:39:fa:27:
         60:cf:6e:57:24:ae:79:70:8b:e8:77:6d:d3:8b:a7:48:e7:70:
         d3:3d:bf:8e:36:1f:e0:02:fa:1c:a9:14:df:ee:3c:06:5f:b3:
         13:43:96:9e:0b:6a:24:98:27:a6:b7:14:a6:5d:6c:d0:8e:25:
         7a:21:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:59 2026 by rpki-client