Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133352e342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          YqWGfe897PjmJKmuh4iPhAooCf8xQK7zjY5edkVpneA=
Subject key identifier:   50:1E:72:2E:89:25:30:91:13:BC:5A:77:68:6C:31:F0:D4:83:B8:F4
Certificate issuer:       /CN=B3243760262DFCFB318CB7BD106063FABC13BAA1
Certificate serial:       0646429CA7A54CF3AE70B7444872ECE21D3F4C59
Authority key identifier: B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa
Signing time:             Sun 03 May 2026 02:37:03 +0000
ROA not before:           Sun 03 May 2026 02:32:03 +0000
ROA not after:            Sun 02 May 2027 02:37:03 +0000
asID:                     38320
IP address blocks:        103.135.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.crl
                          rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:46:42:9c:a7:a5:4c:f3:ae:70:b7:44:48:72:ec:e2:1d:3f:4c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3243760262DFCFB318CB7BD106063FABC13BAA1
        Validity
            Not Before: May  3 02:32:03 2026 GMT
            Not After : May  2 02:37:03 2027 GMT
        Subject: CN=501E722E8925309113BC5A77686C31F0D483B8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:a8:ab:e9:c9:a9:ea:d4:15:00:2d:1c:bc:
                    cc:0f:1d:3b:c6:14:f1:c6:86:7c:d2:d3:bf:fd:10:
                    7f:7f:9c:f2:3f:d3:2a:96:18:9c:80:4b:ac:16:c7:
                    2a:7b:da:f0:90:11:e2:fb:b0:cf:24:63:2c:b3:bc:
                    9f:a4:24:a7:c3:bc:1b:33:db:6c:83:b9:ec:f6:7d:
                    63:3e:1a:14:9c:0a:08:11:48:dc:2e:f3:1a:23:e3:
                    0b:e8:78:63:f0:96:ac:a2:b8:da:f7:1e:c7:64:27:
                    bf:c1:fe:17:e5:ed:b6:d2:79:63:d6:8f:93:ca:9b:
                    60:eb:e3:0b:5f:4f:9b:b7:87:3a:2b:2a:e1:15:0f:
                    dd:58:ff:fb:76:a1:5f:6d:07:65:75:b8:45:db:09:
                    59:48:18:7d:59:26:87:f6:58:8f:f3:fa:f5:5a:ea:
                    3b:ba:9f:c1:e9:a4:83:cc:73:78:18:d3:a6:2e:56:
                    20:3e:e7:31:90:54:12:6b:0b:30:aa:27:f4:79:c1:
                    84:0b:7f:40:82:32:e9:39:0b:b5:e8:b1:05:75:79:
                    b3:ea:7a:33:0e:5d:d5:87:90:2e:e2:3b:fb:1b:a3:
                    97:1e:46:a0:5d:f1:6b:15:f1:d7:db:49:09:e4:f4:
                    84:f5:e9:ed:53:01:24:cc:9a:1c:3d:9d:cd:c0:7d:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1E:72:2E:89:25:30:91:13:BC:5A:77:68:6C:31:F0:D4:83:B8:F4
            X509v3 Authority Key Identifier:
                keyid:B3:24:37:60:26:2D:FC:FB:31:8C:B7:BD:10:60:63:FA:BC:13:BA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/B3243760262DFCFB318CB7BD106063FABC13BAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3243760262DFCFB318CB7BD106063FABC13BAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:e7:9d:89:49:0e:78:f7:45:ae:47:1a:9c:c9:74:36:6a:da:
         37:54:86:5e:37:6d:46:c7:1e:a5:3b:49:bb:e2:dc:3c:c1:26:
         9c:65:d9:3d:1b:8c:fb:7c:56:b2:2f:ab:2e:31:2d:35:51:53:
         1a:e7:0f:a4:28:69:83:95:96:87:dd:74:ec:3e:26:78:4b:48:
         0b:1d:0e:ce:07:a7:95:7e:78:ab:bf:97:0a:f1:af:42:7b:84:
         6d:04:5e:95:1a:11:cf:a7:b9:fc:71:ca:51:fd:5c:d3:18:2f:
         05:5d:21:5d:d6:0a:d2:a2:dd:c0:45:d6:4c:48:f5:e5:e9:4f:
         bc:7e:77:84:b4:44:b4:df:e8:26:41:5b:65:63:b2:4d:3e:92:
         16:4c:a6:f2:67:f9:53:f4:bf:e6:67:b5:13:56:35:a5:8f:0e:
         70:f2:b0:b9:9d:39:7a:95:58:c6:9a:32:68:cf:4d:b3:ab:88:
         d4:3e:ab:f5:d6:ee:38:d9:df:91:c9:6b:99:9f:6d:79:49:29:
         08:aa:fd:1f:a2:00:f1:8a:de:64:e5:af:e5:c2:9c:7b:35:3d:
         c3:ea:c6:06:2c:d9:50:d3:fc:de:2b:71:5e:e6:85:92:7a:f7:
         0e:61:23:ae:b6:78:fd:d9:29:46:e6:96:69:d4:cb:de:16:0e:
         3c:93:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:32 2026 by rpki-client