Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          A0dq7gCpUZizRlTZxmyyhDpzPzM9JT/yiUa6QfFC4Os=
Subject key identifier:   B6:8B:D9:42:58:44:0D:59:44:2D:16:46:45:24:38:26:0E:0A:C1:B3
Certificate issuer:       /CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
Certificate serial:       0B6E625B8C169D16D0DF40344D63BDE8CBF44F35
Authority key identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa
Signing time:             Sun 03 May 2026 02:36:57 +0000
ROA not before:           Sun 03 May 2026 02:31:57 +0000
ROA not after:            Sun 02 May 2027 02:36:57 +0000
asID:                     38320
IP address blocks:        103.135.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl
                          rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6e:62:5b:8c:16:9d:16:d0:df:40:34:4d:63:bd:e8:cb:f4:4f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
        Validity
            Not Before: May  3 02:31:57 2026 GMT
            Not After : May  2 02:36:57 2027 GMT
        Subject: CN=B68BD94258440D59442D1646452438260E0AC1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:b6:f5:34:d8:56:9d:0f:d4:7f:6b:b8:5e:
                    43:07:6e:b9:79:dd:2d:79:97:c2:c2:44:03:4d:38:
                    e5:74:f4:33:3b:7c:13:8f:9e:a5:43:25:30:e4:c7:
                    98:56:74:82:d6:5b:ef:e6:0d:a5:19:ed:7a:83:b4:
                    81:7e:38:5a:d6:a0:88:f8:98:25:78:8b:39:98:fa:
                    88:78:dc:2f:83:e9:4f:63:a2:d5:7e:f1:f8:ae:48:
                    f7:23:fe:c6:19:c3:bb:86:47:de:92:cf:f4:d3:28:
                    ca:e1:34:89:e5:cf:d4:90:1b:26:33:71:72:d8:cf:
                    0f:55:9f:75:ea:5c:02:56:4f:d0:c7:0c:5c:2b:a9:
                    69:14:2f:0d:56:1a:62:1c:d7:66:b6:30:3f:29:da:
                    f3:78:43:31:4b:e0:92:97:13:c7:19:15:4e:58:06:
                    48:05:9f:1d:32:69:f3:a5:d5:3a:db:ef:2d:2a:ce:
                    2d:1c:44:5d:8d:5e:df:06:32:78:9d:a6:b4:0a:e0:
                    73:c5:c2:7e:a6:b9:86:79:aa:d1:2a:b5:b5:8c:96:
                    90:fd:2f:7f:0e:02:6a:1d:46:7a:eb:43:c9:70:5d:
                    0e:53:0f:4d:5a:13:0d:87:1c:49:24:b4:4b:e6:d8:
                    78:ef:f2:c0:51:f3:c9:95:79:63:70:2b:0d:5b:6f:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8B:D9:42:58:44:0D:59:44:2D:16:46:45:24:38:26:0E:0A:C1:B3
            X509v3 Authority Key Identifier:
                keyid:A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:9f:cb:fe:97:bb:ef:3a:c1:0c:4c:82:38:86:9e:6f:88:62:
         4d:60:70:66:04:41:34:6c:a1:b5:ca:fb:68:e6:ec:30:a7:41:
         70:ca:6d:a7:94:7e:c1:5f:d9:6c:29:0a:65:57:26:ea:0d:63:
         13:9f:29:f9:bf:45:1b:a0:75:af:0b:10:0c:98:01:3e:fa:5f:
         2d:cf:2f:9b:95:32:68:92:07:4a:e2:a0:01:ad:09:e8:79:45:
         40:17:3a:9b:b2:e2:90:21:c1:96:d5:b2:18:6b:19:8c:4b:25:
         08:2a:97:89:9c:fb:6d:84:d7:c9:1c:4d:08:3f:85:af:71:1c:
         a4:01:23:a6:aa:38:82:fd:d2:89:d1:a6:01:50:3b:e0:70:47:
         bc:27:cf:b2:55:7a:24:45:87:51:01:ab:8f:ca:03:ca:b3:47:
         23:15:9c:7f:e6:75:48:54:27:11:c6:f1:4b:9f:b7:0c:1a:d2:
         0c:fb:1f:7f:d9:f1:0f:6d:ac:c3:3a:ae:64:cf:32:85:af:80:
         cf:d0:23:3f:b9:d3:73:36:d9:88:81:11:19:e2:4a:42:9d:49:
         d9:3b:58:4e:f9:c7:20:5b:f9:0a:fc:89:d3:95:4d:c9:a8:d0:
         14:13:8c:98:27:ee:5e:05:e6:13:5c:9c:ed:f8:16:bb:69:14:
         3c:c5:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:27 2026 by rpki-client