Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa
File:                     3130332e342e37362e302f32332d3234203d3e20313530323136.roa (raw, json)
Hash identifier:          c+KUo8TFmpYvXN2s1ke+47mTsR9VcfHnhRHeUDJKQe4=
Subject key identifier:   E2:B7:94:70:82:4B:6C:BE:09:04:24:5E:F2:ED:9E:70:61:A1:3F:A7
Certificate issuer:       /CN=AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC
Certificate serial:       7735117FB4048764CEA40D03D531B2EE258F2BA7
Authority key identifier: AD:82:FC:BA:68:C1:F9:FD:FD:5C:AC:0E:4B:60:47:09:90:AF:EF:AC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa
Signing time:             Sun 03 May 2026 02:42:45 +0000
ROA not before:           Sun 03 May 2026 02:37:45 +0000
ROA not after:            Sun 02 May 2027 02:42:45 +0000
asID:                     150216
IP address blocks:        103.4.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.crl
                          rsync://rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:35:11:7f:b4:04:87:64:ce:a4:0d:03:d5:31:b2:ee:25:8f:2b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC
        Validity
            Not Before: May  3 02:37:45 2026 GMT
            Not After : May  2 02:42:45 2027 GMT
        Subject: CN=E2B79470824B6CBE0904245EF2ED9E7061A13FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:5a:d7:02:0d:29:5c:77:6c:fd:aa:59:82:
                    88:41:66:22:27:c8:17:95:04:55:de:fd:3b:87:c4:
                    6f:37:4c:a6:4b:5a:8b:7e:e2:de:56:af:2c:33:85:
                    d4:30:fc:4a:75:3a:40:71:4c:4a:12:21:56:95:78:
                    79:3f:f2:5e:3c:a5:0f:26:06:bf:b6:ae:1b:95:eb:
                    65:df:36:73:62:b3:64:13:b8:ee:96:6b:a2:27:d1:
                    33:8f:50:37:11:92:91:8c:a0:e9:d7:b3:26:1b:2d:
                    a6:31:28:d6:c1:f9:ed:53:e0:6e:e2:b4:a6:2e:85:
                    bc:38:a3:cc:f4:e0:11:05:c3:82:8d:57:7f:ec:02:
                    d3:3c:1d:f5:3c:ee:fc:37:0c:46:bc:d3:de:93:65:
                    1d:e8:f9:cb:fd:a5:43:06:6c:da:ef:df:61:16:21:
                    85:89:b9:c8:b5:1b:09:21:41:d8:17:d8:b3:3f:19:
                    3d:28:5e:11:21:79:1a:28:c1:aa:e7:22:3b:90:a9:
                    fb:49:9e:51:8b:51:71:3f:f7:e2:03:00:f8:ae:94:
                    6c:8c:c7:cb:96:00:1e:d2:98:ae:7b:71:f1:20:1a:
                    40:d3:a0:3a:c4:af:48:3f:36:fa:28:ab:cf:79:c8:
                    08:4d:c2:b0:7d:0c:c6:02:a0:20:f1:88:ff:2d:99:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B7:94:70:82:4B:6C:BE:09:04:24:5E:F2:ED:9E:70:61:A1:3F:A7
            X509v3 Authority Key Identifier:
                keyid:AD:82:FC:BA:68:C1:F9:FD:FD:5C:AC:0E:4B:60:47:09:90:AF:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD82FCBA68C1F9FDFD5CAC0E4B60470990AFEFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:d7:6c:60:4f:4e:90:e7:d4:93:e5:9d:06:82:bc:4b:30:3a:
         7f:f5:df:40:74:91:b5:a1:9a:7d:ef:d4:d4:83:b0:b9:fa:77:
         e8:94:88:cf:af:8f:4f:04:37:0d:1e:18:ea:b9:7c:d6:c8:d2:
         85:ae:0d:16:77:5f:bf:92:d0:c9:e6:8b:9c:8c:3f:27:a9:e1:
         e2:d1:03:8e:99:70:b2:54:c6:61:ca:40:74:95:2c:48:1a:61:
         a8:2b:c7:f9:d2:d4:46:3f:97:68:35:04:9c:22:7b:32:67:f8:
         10:b9:3f:81:f0:92:32:50:c9:d3:b7:d8:28:41:da:66:1a:a4:
         77:87:6a:b2:4b:ee:10:54:5e:cb:0b:34:41:7e:31:10:30:bd:
         7e:0f:c3:3e:63:f8:65:63:4d:f1:5d:fe:9a:03:b7:62:aa:de:
         bb:86:24:c4:7f:3b:f5:40:52:83:23:50:a1:4e:08:4d:64:90:
         61:f2:0e:e7:4b:d8:40:7c:98:19:44:84:0a:0f:75:84:a0:8e:
         fc:5b:2e:38:fc:be:1c:9a:19:3b:81:77:a0:26:da:f0:86:3c:
         f2:87:af:a8:63:5e:b6:c6:03:95:fe:73:15:b9:1a:af:1b:b0:
         fc:04:bc:e2:a1:46:4e:4f:6b:39:f8:0b:31:39:a3:88:ae:84:
         bb:ca:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:13 2026 by rpki-client