Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35332e302f32342d3234203d3e20313530393232.roa
File:                     3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (raw, json)
Hash identifier:          HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=
Subject key identifier:   A2:26:09:E9:A2:CC:68:D6:2B:95:A0:41:7E:6D:CC:13:51:0B:69:B5
Certificate issuer:       /CN=95C2241DAF3580597A730032BDD8356019AA8598
Certificate serial:       69B04E5294C6DC1FCC6D6F9397FEA9549BF24817
Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35332e302f32342d3234203d3e20313530393232.roa
Signing time:             Sun 03 May 2026 02:44:50 +0000
ROA not before:           Sun 03 May 2026 02:39:50 +0000
ROA not after:            Sun 02 May 2027 02:44:50 +0000
asID:                     150922
IP address blocks:        103.96.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl
                          rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b0:4e:52:94:c6:dc:1f:cc:6d:6f:93:97:fe:a9:54:9b:f2:48:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598
        Validity
            Not Before: May  3 02:39:50 2026 GMT
            Not After : May  2 02:44:50 2027 GMT
        Subject: CN=A22609E9A2CC68D62B95A0417E6DCC13510B69B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:6e:05:cd:46:a8:7c:37:ff:30:d7:90:d7:
                    28:47:8a:cf:61:e2:9c:78:93:f5:ce:82:b5:5a:f3:
                    ee:59:54:e7:ec:97:df:c3:99:fb:f5:14:cd:34:bf:
                    c3:7d:a8:18:93:68:48:62:82:73:d4:d5:9c:c8:c5:
                    a7:0a:5c:08:b1:ba:25:25:67:3f:ad:ca:83:e2:82:
                    ef:e3:49:ac:ef:52:cd:e0:53:82:b9:76:92:4c:af:
                    e1:d7:94:77:4f:a5:1e:fc:77:3e:4c:ff:a8:ce:8c:
                    ec:38:db:33:80:86:c0:31:d3:1a:06:ca:0d:60:45:
                    80:01:8a:06:83:a2:f6:6c:2c:d1:91:bb:6b:8e:35:
                    61:30:51:72:ee:93:9a:a5:5c:bd:df:a3:af:35:a7:
                    5b:6d:99:05:fe:a1:02:26:32:ca:54:5c:91:60:d9:
                    1d:f6:e8:37:de:7b:c7:1d:d4:fd:3c:55:de:74:b0:
                    51:5e:42:6c:77:c2:16:42:0a:7a:d1:89:fd:7e:2c:
                    13:21:f0:75:3f:ba:af:c9:35:d0:9d:c4:4d:9f:52:
                    de:f8:a7:de:a3:5e:1e:b9:ec:33:18:ee:73:31:17:
                    22:b9:13:59:2f:32:3d:83:09:ac:26:75:6d:db:44:
                    0a:b1:ba:cb:ad:75:02:dd:d8:7e:3f:02:fb:6f:d3:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:26:09:E9:A2:CC:68:D6:2B:95:A0:41:7E:6D:CC:13:51:0B:69:B5
            X509v3 Authority Key Identifier:
                keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/3130332e39362e35332e302f32342d3234203d3e20313530393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:95:71:22:35:61:6c:c1:57:6c:9c:3d:b8:e0:91:fd:92:42:
         34:d3:77:de:ff:5e:66:32:6f:8b:91:c6:aa:71:0e:00:26:6d:
         ff:80:22:64:68:a8:a6:8a:4f:2e:7a:f1:c2:de:91:14:c0:d6:
         c0:76:96:1b:85:eb:2a:ba:6d:5c:74:bc:37:8b:f1:ac:17:67:
         e8:2e:45:92:ba:b1:5a:91:b9:fe:c7:ee:2a:88:32:28:0e:9f:
         7a:19:a6:03:9d:19:6c:16:65:55:cf:66:b1:1b:c4:d7:54:70:
         7b:a1:e4:9d:54:ad:07:f5:02:53:b8:c3:49:be:0c:05:26:a2:
         eb:a1:d8:99:09:28:2f:a4:d8:1a:15:4e:d6:a9:49:b2:58:a5:
         b6:73:bb:74:66:b3:bf:b4:a1:2b:0a:1a:14:88:24:14:85:ad:
         91:06:24:d8:52:29:49:cb:3c:37:b8:3e:79:ae:85:e9:76:b1:
         a5:44:78:ee:a5:43:77:11:12:fa:0e:4a:b4:f1:f5:b3:eb:6f:
         7e:06:74:d8:70:3e:5b:d9:b5:05:4f:c5:84:bb:14:a1:be:4b:
         ee:aa:62:bf:5a:13:a9:99:44:43:4b:d6:6b:53:63:f2:a6:46:
         55:ad:9c:a1:e0:4b:fa:44:22:d5:63:29:9e:26:f4:b3:a4:f3:
         29:d3:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:02 2026 by rpki-client