Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa
File:                     3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier:          zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=
Subject key identifier:   57:D4:E1:DE:F1:9F:67:76:83:4D:55:E2:2F:16:64:1F:EB:74:DD:31
Certificate issuer:       /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A
Certificate serial:       297E78D22604FFF9F0B6EED93798043D5FBC4452
Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa
Signing time:             Sun 03 May 2026 02:37:08 +0000
ROA not before:           Sun 03 May 2026 02:32:08 +0000
ROA not after:            Sun 02 May 2027 02:37:08 +0000
asID:                     135636
IP address blocks:        103.103.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl
                          rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7e:78:d2:26:04:ff:f9:f0:b6:ee:d9:37:98:04:3d:5f:bc:44:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A
        Validity
            Not Before: May  3 02:32:08 2026 GMT
            Not After : May  2 02:37:08 2027 GMT
        Subject: CN=57D4E1DEF19F6776834D55E22F16641FEB74DD31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:dc:b7:b1:e7:67:88:a4:b4:bd:1a:32:d0:
                    c5:ff:56:65:af:b0:a1:7f:32:59:31:12:a9:04:b7:
                    d4:e8:99:f2:04:4b:fd:2e:4e:b8:61:3a:e5:56:44:
                    0e:13:67:d1:61:17:12:f4:d0:9c:a9:b2:9f:48:bb:
                    ce:74:33:e3:ea:87:97:6f:f8:15:66:fe:25:81:bf:
                    03:26:1a:5a:b3:34:0f:8e:2f:b5:b5:c3:21:20:80:
                    24:3c:f0:f5:40:7d:28:3a:06:23:a6:e1:40:df:25:
                    dc:37:33:f9:fb:47:ab:d3:c1:51:14:55:c2:8a:9f:
                    c6:a4:2b:1e:51:72:60:7c:14:83:04:b2:1c:08:9f:
                    34:98:22:6c:86:44:e8:04:77:03:4d:9b:66:4d:d1:
                    38:a0:fd:21:bb:08:a6:3f:c5:f5:fb:02:00:a8:94:
                    a1:d3:93:02:9c:59:7f:3b:c8:80:9e:c6:eb:cc:e5:
                    b0:42:31:01:95:bf:52:a1:39:42:41:a9:7f:67:3b:
                    8a:01:f2:d0:fd:1a:79:7b:fa:b2:25:c6:b6:bc:14:
                    25:4b:de:88:64:ba:eb:37:d0:81:3c:18:99:fc:b5:
                    18:b2:71:c9:90:8a:af:4b:91:97:62:f4:fd:a9:a1:
                    ba:02:d8:64:c1:5e:7c:ec:5c:75:76:03:b1:2b:c6:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:E1:DE:F1:9F:67:76:83:4D:55:E2:2F:16:64:1F:EB:74:DD:31
            X509v3 Authority Key Identifier:
                keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:19:ac:3a:06:28:b1:3b:04:3f:06:a2:52:98:e4:15:90:d5:
         89:7f:42:9a:e5:e0:b4:b6:a3:2a:12:dd:d9:53:d5:4b:a0:18:
         27:ad:cb:de:0e:92:8f:24:7d:8b:92:ef:a2:53:6b:31:46:34:
         e5:95:34:8e:5d:4f:53:29:c5:4e:af:e7:d4:c3:eb:2d:6f:ac:
         b2:1a:52:85:8c:49:b3:5e:69:6b:23:a7:3d:02:f8:69:0a:03:
         3c:c4:94:16:64:3f:df:ee:c0:7f:1f:9a:de:40:9d:e4:9a:68:
         e2:c6:02:e0:02:d3:d3:8f:8a:d1:04:68:df:86:2a:1b:d8:5a:
         ed:15:81:79:0a:22:3b:f3:90:18:b6:0b:dc:89:e4:9a:ea:a4:
         fb:f6:21:1c:f0:5b:ef:49:5a:22:f1:c1:17:23:c5:ed:b2:2b:
         cf:2b:14:e7:6a:d4:2b:9d:4d:b1:d3:4f:d1:bb:59:6d:ff:a3:
         a9:a0:26:c6:50:1e:bf:82:85:0d:3c:06:28:63:bc:b2:e3:35:
         94:13:0d:b3:1d:3a:58:89:86:8b:55:37:b5:86:60:d5:f4:84:
         d6:d9:21:0e:eb:ba:8e:87:7b:48:d2:6e:ca:10:32:ff:9a:1e:
         f2:d3:8c:71:7b:a4:c8:1d:d1:ef:56:d6:b1:7a:8a:9b:73:be:
         72:ff:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:10 2026 by rpki-client