Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa
File:                     3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (raw, json)
Hash identifier:          FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=
Subject key identifier:   FB:45:C7:1B:6D:B6:F7:89:E0:DE:2A:2C:53:C8:F7:E7:B0:F5:70:9F
Certificate issuer:       /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37
Certificate serial:       36084E7A30C57758B9686D504617C484DCA70440
Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa
Signing time:             Sun 03 May 2026 02:43:52 +0000
ROA not before:           Sun 03 May 2026 02:38:52 +0000
ROA not after:            Sun 02 May 2027 02:43:52 +0000
asID:                     56256
IP address blocks:        103.41.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl
                          rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:08:4e:7a:30:c5:77:58:b9:68:6d:50:46:17:c4:84:dc:a7:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37
        Validity
            Not Before: May  3 02:38:52 2026 GMT
            Not After : May  2 02:43:52 2027 GMT
        Subject: CN=FB45C71B6DB6F789E0DE2A2C53C8F7E7B0F5709F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:1f:63:a4:e1:28:f0:e2:28:8b:b3:06:15:
                    e7:fb:5f:1f:d6:e0:41:53:4e:c0:00:a3:94:2e:e8:
                    ad:76:34:26:a5:91:9e:ce:49:b4:e0:01:bf:60:4d:
                    6e:96:a0:e8:0c:5b:3b:f6:39:53:56:ec:8e:ea:6c:
                    da:0a:23:e9:4d:d2:f2:87:87:30:b9:d4:50:78:a0:
                    88:7c:5e:36:db:21:12:4c:7d:2d:1c:a8:fb:74:23:
                    be:a2:3b:28:74:15:39:69:ad:da:11:4c:e6:f4:40:
                    75:10:c6:54:34:34:80:1e:d2:73:af:fa:1e:d2:89:
                    60:0e:14:6e:60:7c:6f:24:b8:a9:47:30:21:db:f9:
                    31:8e:ea:68:9d:a2:d0:87:41:f9:3b:61:54:33:66:
                    05:68:6d:8a:b5:9a:91:8b:4a:60:40:1e:cc:20:09:
                    3c:91:6d:54:97:56:0a:6e:d0:c7:f4:50:c4:3c:d3:
                    31:9e:64:10:e7:82:be:ce:2d:0d:7d:6f:19:00:dd:
                    e1:48:e0:16:b1:3b:56:22:21:ac:61:0d:6e:83:a6:
                    25:c5:55:60:4c:f5:24:46:62:fc:44:d1:59:e5:99:
                    36:c5:3b:fc:f2:20:f1:bd:0f:06:16:09:50:1d:4c:
                    bb:bd:99:ce:fa:33:3c:df:aa:44:3a:9b:5c:e8:89:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:C7:1B:6D:B6:F7:89:E0:DE:2A:2C:53:C8:F7:E7:B0:F5:70:9F
            X509v3 Authority Key Identifier:
                keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:76:24:91:e7:4f:9a:ff:44:a7:f5:d8:17:68:3f:ac:ae:54:
         33:b4:06:48:51:79:d2:12:7e:fc:f7:a9:86:a4:4c:94:2d:52:
         8e:9c:6a:89:f7:60:40:e4:b2:f5:d7:d4:44:4a:90:c3:50:2e:
         5c:09:37:51:a4:18:36:07:f2:62:4a:82:d5:54:81:5c:3c:ff:
         42:bc:93:db:a9:5b:f3:3f:e9:fc:d1:f4:57:68:58:8e:60:c6:
         6c:19:05:9f:9f:e4:54:2b:c8:d8:c6:bd:1f:8e:20:c7:23:5a:
         5d:6c:d4:d8:7f:da:67:e3:bb:17:b9:a7:7a:94:4e:65:f0:cf:
         46:4f:af:d2:65:ee:c2:dc:b8:2a:cf:cf:73:88:eb:ba:0c:f4:
         ed:e8:6d:2f:05:8b:9e:9d:d5:10:1b:b6:87:75:61:3d:f3:ac:
         ae:8e:c9:cf:5f:bd:42:43:52:d6:e9:a8:52:53:ab:40:81:ee:
         c2:9b:a8:93:79:db:52:b6:40:32:88:12:c0:cc:9f:f9:38:dc:
         f8:a3:f3:93:61:45:f2:d8:5a:fc:2d:3c:a2:ea:00:3d:3b:00:
         5a:22:71:06:c4:ea:34:9b:31:db:21:b1:32:a2:16:9b:7e:33:
         27:c3:cb:26:70:4f:21:48:9d:67:b2:61:b4:9c:47:8a:3c:e4:
         32:53:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:17 2026 by rpki-client