Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa
File:                     3130332e31382e32382e302f32322d3234203d3e203435373036.roa (raw, json)
Hash identifier:          Pn0Z404yzeHHtXmdQ9DEjG8okFo36OY3UkZiEWBYoXE=
Subject key identifier:   30:4E:06:56:C2:08:55:F9:51:AF:34:67:59:98:CA:F8:63:E4:24:40
Certificate issuer:       /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial:       3D15299974194C99D26F7B5843D4010B7D998911
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa
Signing time:             Sun 03 May 2026 02:44:07 +0000
ROA not before:           Sun 03 May 2026 02:39:07 +0000
ROA not after:            Sun 02 May 2027 02:44:07 +0000
asID:                     45706
IP address blocks:        103.18.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
                          rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:15:29:99:74:19:4c:99:d2:6f:7b:58:43:d4:01:0b:7d:99:89:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
        Validity
            Not Before: May  3 02:39:07 2026 GMT
            Not After : May  2 02:44:07 2027 GMT
        Subject: CN=304E0656C20855F951AF34675998CAF863E42440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:94:3e:2a:9e:ac:da:a5:0f:e5:14:72:2c:21:
                    0f:83:8f:33:b7:95:a3:f2:7b:ae:d1:a1:9b:28:3e:
                    85:47:dc:31:c8:44:94:80:c9:fd:56:a0:50:a8:b4:
                    94:03:ed:68:c4:35:8d:90:30:26:7c:29:6d:1f:d6:
                    db:e2:c5:de:3a:a4:71:63:04:8c:89:97:4b:2b:c5:
                    9c:aa:fe:cc:b8:ab:10:b2:82:d7:4a:13:6c:cf:bf:
                    d4:a3:ed:fe:40:ed:73:74:56:2e:ba:50:2c:0c:68:
                    6e:21:33:6e:43:41:43:ce:22:02:48:60:b2:9a:72:
                    49:a7:82:ae:65:94:1a:b7:4d:8b:e6:ac:f9:55:3d:
                    e6:b2:ac:2c:1a:9c:3b:58:ac:a6:02:80:66:92:d1:
                    9e:5c:d2:e9:9b:56:70:ce:18:34:46:15:f0:50:01:
                    50:6a:47:cf:b7:0d:52:54:6c:89:82:65:c7:eb:24:
                    c3:7e:e5:71:c3:b1:e8:b9:d9:0d:d7:8c:9f:e5:1e:
                    c2:a8:c7:4a:31:a7:15:69:2b:af:f9:70:0d:67:67:
                    cd:f6:b3:1e:32:39:7b:ed:80:f8:16:57:7a:39:8a:
                    fc:61:35:68:e9:4f:bd:70:0a:e9:38:88:18:57:05:
                    73:b9:1d:39:98:b8:f4:06:da:5d:bb:9f:b5:fa:a2:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4E:06:56:C2:08:55:F9:51:AF:34:67:59:98:CA:F8:63:E4:24:40
            X509v3 Authority Key Identifier:
                keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:35:bf:7c:51:8e:d2:72:2c:5c:9c:63:9a:0e:c3:0a:27:0a:
         3c:60:00:9b:a7:03:33:d4:3b:7d:17:6a:04:59:a8:ab:85:4c:
         24:9e:9a:03:d1:fe:e1:26:2d:5d:88:f4:b4:f3:16:61:7f:1e:
         31:12:e4:ae:df:47:97:11:df:14:95:c3:84:99:52:51:dd:ce:
         cb:7b:d5:84:bf:7b:61:f2:35:c6:ec:0f:11:83:4c:99:87:6c:
         94:5e:fd:91:da:5b:a6:02:6b:c4:9c:9c:fd:1a:be:50:01:ae:
         77:6a:a9:70:65:29:16:6b:65:69:ab:01:17:c5:be:96:6e:a9:
         df:ae:81:02:4c:8a:20:8d:cb:47:94:ab:db:90:c6:c2:c1:d5:
         78:8f:67:83:42:b8:43:d1:d5:6e:35:55:32:11:3b:d7:a4:ec:
         79:7c:36:fe:92:df:88:52:6c:32:bc:ae:ce:40:6a:ab:91:26:
         cf:61:c0:16:6d:85:3f:de:5d:fd:23:96:b1:6d:cf:ba:b8:cd:
         ed:f5:27:07:28:a6:49:66:1b:c5:18:37:dc:e0:ec:b5:3e:e5:
         5f:43:4d:26:f6:8d:ac:ec:5e:3c:57:89:d7:d2:dd:a8:bb:26:
         3f:76:7d:cd:46:34:31:7c:53:eb:ac:b0:5b:89:73:6a:d9:7d:
         ea:9a:35:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:17 2026 by rpki-client