Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          WqTCn5j59dOFJUOOhy3KFyXF/4R8dQGK4UV0a5vcULQ=
Subject key identifier:   05:7A:AD:9A:88:6B:3F:99:6D:58:90:8A:5C:E4:58:BD:51:FD:BE:F4
Certificate issuer:       /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
Certificate serial:       4BF81901E64CA72ABA6684617D66E54265E8ABC0
Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa
Signing time:             Sun 03 May 2026 02:44:56 +0000
ROA not before:           Sun 03 May 2026 02:39:56 +0000
ROA not after:            Sun 02 May 2027 02:44:56 +0000
asID:                     138131
IP address blocks:        103.115.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl
                          rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f8:19:01:e6:4c:a7:2a:ba:66:84:61:7d:66:e5:42:65:e8:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
        Validity
            Not Before: May  3 02:39:56 2026 GMT
            Not After : May  2 02:44:56 2027 GMT
        Subject: CN=057AAD9A886B3F996D58908A5CE458BD51FDBEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:54:6b:e9:23:7a:06:44:c7:df:ea:de:b0:
                    ed:99:b4:6f:d9:2c:7a:76:90:71:b2:e0:ab:a7:ad:
                    80:94:2b:80:55:5d:1f:19:84:1e:0f:2f:0e:c5:ae:
                    29:4d:90:e3:12:3f:e1:28:d7:13:23:3e:1f:90:f8:
                    b8:b4:23:70:ed:16:97:1c:62:a6:60:f3:51:fa:36:
                    44:6c:86:1e:63:02:05:83:13:9c:62:16:0d:a8:da:
                    33:7e:48:ce:5f:d3:d6:13:3e:1b:fb:df:44:40:47:
                    63:89:63:78:c4:dc:87:b1:74:84:37:39:18:96:58:
                    c6:1c:47:d4:d5:54:4d:34:5e:d8:61:7d:d0:73:4b:
                    8b:72:4f:2d:25:ef:84:be:d3:0b:05:b5:1d:f3:ef:
                    f3:42:f4:80:f2:3f:96:f8:c5:ac:ca:ce:80:d9:08:
                    44:f4:a7:08:80:94:30:4c:24:8a:8b:18:cc:30:7d:
                    19:90:be:3e:bc:ca:31:da:cb:fa:c9:bf:d1:a7:5e:
                    67:ef:e9:0e:ae:2b:65:1d:e8:ca:46:dc:e1:44:0e:
                    1f:7d:59:5e:33:ca:84:eb:ca:3e:20:57:58:1b:aa:
                    31:9d:01:09:6a:6c:2c:c4:a0:b4:db:01:40:84:82:
                    6b:17:c9:f9:60:7c:d4:e2:3f:1d:b0:0f:a7:58:30:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7A:AD:9A:88:6B:3F:99:6D:58:90:8A:5C:E4:58:BD:51:FD:BE:F4
            X509v3 Authority Key Identifier:
                keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:99:25:cb:08:c8:e9:17:23:9f:7d:83:43:a5:41:9d:de:
         d0:da:3b:5a:60:35:47:f9:11:02:c9:e3:93:4d:4c:97:6d:c5:
         59:fa:77:19:25:b8:82:88:70:4d:d3:d9:59:a5:76:f8:00:84:
         4a:fa:06:4c:29:16:1d:55:1c:91:f0:53:88:41:a2:c5:97:e1:
         77:b0:66:8b:f4:89:ea:36:47:06:9b:52:7f:fa:5a:9e:de:99:
         b2:ce:cf:38:66:06:98:94:ca:18:57:35:ca:c4:27:24:2b:fb:
         42:e8:50:ca:e1:ae:01:d5:6d:17:10:b4:c7:39:0d:66:ae:1f:
         04:90:dc:fa:38:84:90:b4:b9:1f:1c:01:af:b8:2a:d1:98:19:
         8c:4e:6a:81:fa:c8:99:ec:c1:90:6f:29:49:3f:64:d4:3e:cd:
         95:51:0b:37:0e:92:97:7c:90:4d:7d:2e:b1:4a:d3:82:86:23:
         65:a7:6a:a0:33:ff:c2:d6:31:b7:1d:1e:cc:7c:d4:74:6c:38:
         3b:e5:11:d3:eb:e6:e0:0c:a0:cf:c1:c7:62:e9:e3:75:d1:5a:
         ca:83:d2:95:2b:6e:0f:bf:33:27:94:a3:a7:26:39:ca:61:c7:
         1f:fc:c6:e6:bd:f5:98:98:5d:e4:9b:fd:23:bd:fc:b5:d4:f2:
         52:e7:b9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:23 2026 by rpki-client