Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa
File:                     3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier:          jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=
Subject key identifier:   48:29:98:F9:8C:93:EA:E7:91:47:50:C5:6B:61:57:6A:89:68:8A:D0
Certificate issuer:       /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A
Certificate serial:       72675FA1735991768F756EF59A2567F50A5757B7
Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa
Signing time:             Sun 03 May 2026 02:37:09 +0000
ROA not before:           Sun 03 May 2026 02:32:09 +0000
ROA not after:            Sun 02 May 2027 02:37:09 +0000
asID:                     135636
IP address blocks:        103.103.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl
                          rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:67:5f:a1:73:59:91:76:8f:75:6e:f5:9a:25:67:f5:0a:57:57:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A
        Validity
            Not Before: May  3 02:32:09 2026 GMT
            Not After : May  2 02:37:09 2027 GMT
        Subject: CN=482998F98C93EAE7914750C56B61576A89688AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:23:3f:5b:ec:5e:db:4d:e3:98:44:5a:73:1e:
                    9a:b1:8f:b9:82:1c:48:94:8a:c3:5e:ac:fa:70:c5:
                    2e:07:82:49:37:78:83:e3:b6:a0:77:eb:c5:6d:a0:
                    fa:f1:7f:39:79:f8:a5:b7:60:d2:3c:65:35:97:69:
                    df:05:4f:1a:71:71:b4:1c:ab:cb:a2:f8:8e:11:ce:
                    09:f4:06:1c:f5:bc:32:5b:f8:31:90:ef:cf:b6:e5:
                    3f:4d:ad:26:7c:37:05:52:04:4a:48:74:f1:02:69:
                    cf:74:70:07:a4:e5:2c:3c:45:32:c5:1d:cc:d2:60:
                    62:27:75:20:bc:c5:78:7e:13:71:2d:a4:76:97:7b:
                    d3:65:40:88:1b:37:d8:2e:ac:d6:5a:27:24:2d:06:
                    6b:ba:a8:73:e5:39:bb:6c:02:49:5a:77:e4:f1:de:
                    63:1c:b7:15:0f:2b:39:45:1a:c8:70:9a:c4:74:08:
                    b8:36:bd:d1:f3:bf:02:55:c6:24:1d:98:e5:a8:4e:
                    24:03:b6:8d:47:3c:59:d7:1b:32:84:74:66:a7:38:
                    e6:64:28:99:e5:e2:a7:53:59:28:72:c0:77:07:b4:
                    8e:27:1b:cd:21:35:41:d5:0d:5c:3f:91:19:90:9e:
                    88:ae:b2:e2:fc:9b:c0:37:d6:d0:ea:81:54:2c:61:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:29:98:F9:8C:93:EA:E7:91:47:50:C5:6B:61:57:6A:89:68:8A:D0
            X509v3 Authority Key Identifier:
                keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:e6:f3:a8:01:b8:3b:37:3e:91:13:ea:ea:06:6c:c6:b6:
         1b:18:54:fe:92:a1:3a:6d:e9:70:51:55:9d:80:06:d7:a5:90:
         6e:91:0a:3c:96:2d:b4:92:92:08:65:de:17:5a:15:1a:59:78:
         19:a0:df:fc:24:e3:b2:7b:6e:c9:68:24:3e:3d:3e:45:7e:76:
         e1:97:e5:31:61:2f:0c:bc:4e:3e:f9:00:8b:59:d8:72:13:59:
         9d:58:b4:c7:3c:b8:43:e9:ad:67:32:ac:21:60:4f:4b:b4:14:
         0c:c8:e9:d1:6f:be:8c:c8:9c:e3:70:cb:06:ff:d7:41:bc:b2:
         61:10:3d:4a:90:f5:0d:c7:73:9b:37:05:6a:15:77:52:d7:6b:
         c5:43:01:70:8d:f6:51:25:5f:a6:a9:a4:f3:85:22:b1:55:ff:
         b6:12:65:55:e9:d9:85:47:b5:10:55:fd:85:50:4b:bd:d2:b4:
         e5:5b:14:fe:52:e9:3d:e8:21:c0:d7:56:74:8d:aa:9a:43:0f:
         1b:c7:0f:95:e8:2f:ee:6c:2f:9c:75:ec:e1:0b:59:11:b1:d3:
         28:f8:ee:05:66:7a:df:5f:26:fd:2c:ce:a2:18:05:d5:1c:7b:
         44:73:d3:02:ac:a3:21:72:4e:61:24:6e:af:f6:0b:b8:29:af:
         14:28:d0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:58 2026 by rpki-client