Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20313534343130.roa
File:                     3130332e39362e35322e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          1ThuN5znJDyBHXMDEeUc73QYCJg2P4WsNNUGGs+3coA=
Subject key identifier:   78:2E:6A:08:F2:8A:4D:78:98:2F:26:4C:D5:A2:F8:CB:F5:67:45:F6
Certificate issuer:       /CN=95C2241DAF3580597A730032BDD8356019AA8598
Certificate serial:       3594584EF993AFE33412CF729096B9CCD9C62ABA
Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 02:44:48 +0000
ROA not before:           Sun 03 May 2026 02:39:48 +0000
ROA not after:            Sun 02 May 2027 02:44:48 +0000
asID:                     154410
IP address blocks:        103.96.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl
                          rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:94:58:4e:f9:93:af:e3:34:12:cf:72:90:96:b9:cc:d9:c6:2a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598
        Validity
            Not Before: May  3 02:39:48 2026 GMT
            Not After : May  2 02:44:48 2027 GMT
        Subject: CN=782E6A08F28A4D78982F264CD5A2F8CBF56745F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f0:94:94:11:a2:d5:41:65:01:4b:f1:aa:0c:
                    8f:e1:8f:1d:16:a9:39:21:8d:0e:0a:c6:a6:33:18:
                    96:57:b7:ae:b2:dd:8f:d6:a7:cc:0f:d0:cb:7c:ec:
                    9a:f3:48:e3:73:5e:2b:1c:8e:f3:97:74:23:89:19:
                    7f:a6:f7:09:74:53:4d:6e:55:75:6c:c0:71:0a:e4:
                    5f:74:08:b6:09:1d:21:2e:58:36:fb:28:62:9d:bf:
                    d5:70:ca:8c:17:28:82:46:c0:e3:19:16:1c:bc:37:
                    64:fc:91:b8:22:06:e0:4d:de:08:6d:bf:2b:74:eb:
                    4b:a2:07:24:54:83:52:50:08:84:f0:6f:c7:f6:9d:
                    d8:95:00:f7:6e:b1:6e:c9:f3:18:8b:8d:48:af:56:
                    b6:2d:1c:64:6e:9d:87:90:75:46:e4:44:da:85:5a:
                    ef:53:ae:90:64:6b:45:4e:2e:4a:e5:df:c6:0b:66:
                    de:de:62:69:d0:68:8e:5a:9a:47:c1:88:6b:6f:d3:
                    c3:7a:5e:43:5b:52:f0:b5:0a:b1:f2:0a:ee:c0:9d:
                    e0:2a:d6:01:53:f6:69:41:9b:6f:4e:66:c4:d4:94:
                    94:d1:5b:67:e2:a1:81:07:1a:e8:e1:5a:4e:8e:63:
                    c8:83:01:1f:64:ad:f0:98:d6:8c:8b:8d:fe:b5:a9:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2E:6A:08:F2:8A:4D:78:98:2F:26:4C:D5:A2:F8:CB:F5:67:45:F6
            X509v3 Authority Key Identifier:
                keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35322e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:77:d5:94:29:f1:2e:0c:49:8d:13:2b:90:6d:a5:c6:67:
         5a:da:b7:c1:6e:80:5a:53:8c:c1:3b:12:93:31:f2:bb:7a:af:
         12:93:a4:0a:e5:e5:5e:ec:eb:ff:73:b8:97:9a:e5:c4:4b:70:
         f2:19:8e:02:bc:a5:2c:92:02:13:8e:4d:7a:7d:3d:9a:31:60:
         e6:5d:07:2e:6f:cb:4e:e3:39:27:aa:6b:1a:e6:f9:27:5e:91:
         6b:ff:c8:fe:50:da:33:da:5a:6a:67:e3:d2:8d:df:27:ac:4d:
         95:54:23:10:79:1e:fa:9f:0f:57:79:81:a1:ac:2c:67:c7:55:
         e4:9a:81:dd:4e:fa:22:da:d7:2b:fb:df:3e:d6:b1:65:77:04:
         c4:8a:34:be:1c:9e:a6:01:3d:62:cc:6b:22:70:99:d1:10:d4:
         09:c7:1f:71:3a:ee:b9:da:c0:b9:a9:b7:fb:d4:fd:f1:c8:bf:
         31:a0:08:98:f0:15:3a:db:db:05:38:68:59:ad:6a:68:15:8a:
         1e:05:02:51:b1:61:0c:df:bd:89:15:c5:09:b0:6b:3f:46:76:
         17:a1:3b:f5:77:cf:8f:c0:11:9d:cd:26:1e:bf:eb:c7:a4:30:
         79:8d:00:5c:61:e4:70:9f:ea:5f:55:16:56:81:d3:8b:27:05:
         79:ff:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:10 2026 by rpki-client