Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
File:                     3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (raw, json)
Hash identifier:          K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=
Subject key identifier:   9D:A6:EC:B6:0B:D1:F2:DC:C8:69:6F:F3:1B:56:A3:79:A4:96:10:49
Certificate issuer:       /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740
Certificate serial:       68713CB98D129EC62141AF3DB240909E4EFE1F1F
Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
Signing time:             Sun 03 May 2026 02:44:55 +0000
ROA not before:           Sun 03 May 2026 02:39:55 +0000
ROA not after:            Sun 02 May 2027 02:44:55 +0000
asID:                     150232
IP address blocks:        103.13.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl
                          rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:71:3c:b9:8d:12:9e:c6:21:41:af:3d:b2:40:90:9e:4e:fe:1f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740
        Validity
            Not Before: May  3 02:39:55 2026 GMT
            Not After : May  2 02:44:55 2027 GMT
        Subject: CN=9DA6ECB60BD1F2DCC8696FF31B56A379A4961049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:f9:60:0f:32:d8:6f:a1:29:db:12:54:42:
                    e9:84:1a:0d:e9:b4:7b:fe:8c:8b:1f:1d:e6:fa:58:
                    4e:a5:61:89:3f:fe:ad:8b:5c:a7:9a:39:e7:83:e6:
                    0e:b1:90:fa:d9:59:62:81:3b:37:21:4a:c0:9b:34:
                    bf:5d:0e:59:0b:47:d9:ea:5d:1b:15:8e:10:17:e1:
                    d4:11:b9:2c:34:e7:be:b4:dd:7d:43:6c:2e:53:f5:
                    b3:13:ee:4d:b4:11:0a:7b:d9:d4:00:f6:3f:d2:27:
                    92:b5:bb:11:d1:be:e1:75:28:69:ec:81:a7:5b:a2:
                    1f:0b:e0:1b:58:81:17:f4:ae:72:36:83:99:1c:40:
                    c7:d1:51:3f:42:ed:49:ec:89:42:27:d7:01:ab:15:
                    8a:6d:0a:89:c3:ef:f6:be:82:47:ee:5e:0c:da:87:
                    a5:6d:68:3f:bf:34:52:31:8a:fb:d0:c8:4e:1a:44:
                    48:72:77:90:45:d8:fd:58:6c:e5:c3:78:7f:bf:26:
                    95:1c:e3:8c:82:63:9f:30:79:7c:8c:1e:d2:b6:e7:
                    a4:76:eb:60:2b:93:83:d8:4f:32:01:d5:50:c2:e4:
                    39:63:1a:d6:b7:72:6f:94:0c:6c:9a:fd:62:7c:5a:
                    78:3b:82:8b:37:15:c8:bc:2a:db:c8:ed:cb:75:a7:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A6:EC:B6:0B:D1:F2:DC:C8:69:6F:F3:1B:56:A3:79:A4:96:10:49
            X509v3 Authority Key Identifier:
                keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:47:cb:ac:2f:a7:ba:09:2b:40:63:bd:72:2e:da:9e:0a:02:
         3c:75:0f:82:50:15:b7:bf:23:77:13:33:30:36:62:a2:a3:6b:
         d0:b7:f1:1a:8a:b1:5a:77:c7:fb:a3:4b:6f:a3:fe:de:fa:3d:
         80:18:6d:bb:cc:a9:6f:29:72:0d:45:29:b7:5a:f2:c2:2d:76:
         41:8e:81:46:63:55:73:de:ca:58:df:b4:41:e0:2a:6a:10:44:
         b4:84:ff:f6:bb:e2:5e:55:43:57:2e:81:2a:53:3d:93:c9:89:
         b5:50:49:8b:31:2a:c5:9b:26:f1:ac:a9:8e:7f:9c:6d:86:be:
         18:e5:08:ed:b0:37:2a:21:20:19:1f:2e:b8:2c:37:6d:81:29:
         f7:0e:6e:bc:d6:1b:2c:f9:79:a6:6a:f3:7b:a2:df:bf:63:b3:
         0d:3c:31:60:43:e9:91:ac:c4:70:72:ae:03:00:18:1f:05:94:
         39:06:ec:6e:dc:69:c5:b5:c2:d1:ba:a7:85:4a:25:51:9e:ac:
         fd:d7:27:d3:4f:af:91:9f:1b:9c:2e:3a:b2:b3:1f:dd:e1:09:
         01:8e:db:24:b8:11:fe:02:59:63:ec:ed:ed:a4:f9:cb:ad:55:
         eb:01:59:78:88:21:d2:33:36:ed:e6:b6:f1:f1:9d:5e:91:2e:
         3e:9a:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:11 2026 by rpki-client