Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3130332e362e35322e302f32322d3234203d3e203435373331.roa
File:                     3130332e362e35322e302f32322d3234203d3e203435373331.roa (raw, json)
Hash identifier:          I1bsWI7DvPSBQ9/yo42Yu8NJ60GXC0aRajit4q85Uec=
Subject key identifier:   8A:8F:60:6A:63:65:3B:29:B5:2D:B4:D9:0E:C5:DF:A5:A4:A9:D1:F4
Certificate issuer:       /CN=34B29E7722E2B5DD7C273585E39574B57B896900
Certificate serial:       6D4B28884B0784F0CD8313F4A16B7A50480D168B
Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3130332e362e35322e302f32322d3234203d3e203435373331.roa
Signing time:             Sun 03 May 2026 02:45:14 +0000
ROA not before:           Sun 03 May 2026 02:40:14 +0000
ROA not after:            Sun 02 May 2027 02:45:14 +0000
asID:                     45731
IP address blocks:        103.6.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl
                          rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4b:28:88:4b:07:84:f0:cd:83:13:f4:a1:6b:7a:50:48:0d:16:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900
        Validity
            Not Before: May  3 02:40:14 2026 GMT
            Not After : May  2 02:45:14 2027 GMT
        Subject: CN=8A8F606A63653B29B52DB4D90EC5DFA5A4A9D1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:d1:41:97:66:ad:f2:cc:e7:41:97:d4:98:
                    00:fb:f0:d7:dd:ae:77:96:5d:ff:e4:b7:e6:4d:5c:
                    8c:50:d8:90:99:8d:d1:ed:29:e5:96:ff:22:b7:96:
                    6f:83:d6:28:6e:0f:52:f4:3a:02:6d:c4:26:3c:be:
                    71:a7:55:26:dd:4c:31:08:63:f9:0e:c2:de:c0:8f:
                    f2:32:9e:2d:d0:0a:53:57:8a:50:58:a5:26:7f:65:
                    74:4c:fb:f4:71:ec:58:66:6e:7d:0a:ba:6e:f7:40:
                    9c:56:6b:9d:41:95:07:db:be:6e:5a:14:e5:8b:83:
                    ed:3f:fb:ab:13:e0:94:46:f0:8f:44:ed:c6:da:dd:
                    33:2f:01:94:97:f0:fb:2e:c0:49:ee:55:b1:a2:6a:
                    13:52:ac:62:a2:86:c0:15:65:72:fa:db:d0:cf:f5:
                    3a:b0:0a:d4:64:b0:48:ed:43:99:45:44:5c:bf:08:
                    fb:3c:b6:00:19:57:06:99:9b:99:9b:42:c3:9f:36:
                    85:1a:17:90:b7:7d:9d:fd:17:f9:0b:d3:9f:0f:a4:
                    b1:7c:fb:61:51:77:39:59:bb:34:ea:01:e5:60:b1:
                    89:01:64:06:7c:a1:2d:94:f6:a4:0d:0d:59:5d:8f:
                    41:06:b1:3e:8a:58:82:98:1c:73:48:61:cb:3a:4c:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8F:60:6A:63:65:3B:29:B5:2D:B4:D9:0E:C5:DF:A5:A4:A9:D1:F4
            X509v3 Authority Key Identifier:
                keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3130332e362e35322e302f32322d3234203d3e203435373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:c0:37:c6:9b:1c:52:2e:7b:21:4f:9c:16:2d:b6:68:ef:90:
         e6:51:92:f0:de:41:75:5f:cc:d8:10:e3:75:cd:5d:31:d7:64:
         eb:3a:7b:89:6e:53:41:26:0e:77:ad:04:5c:2f:44:84:b9:20:
         af:6e:fd:f4:81:c9:34:5f:b3:29:de:2c:42:f6:1e:90:9e:6d:
         cd:be:31:3a:5d:d9:f0:2b:1a:73:40:a3:9d:ac:e5:10:de:a0:
         df:d4:6d:76:50:3a:28:9b:a1:e6:75:bc:ac:24:3f:48:de:62:
         6f:43:f0:99:4f:8c:74:1e:37:7b:46:fb:45:53:fa:94:af:a7:
         4e:57:42:23:60:3b:6d:44:be:0e:a8:33:fb:c1:4f:7c:56:23:
         ec:42:b4:0a:20:20:c3:8b:f9:bd:24:05:fe:51:7f:fe:2e:9b:
         52:e7:66:74:5f:e4:74:d7:62:7d:3c:6b:3b:76:fe:73:fb:c4:
         f8:17:5e:ab:c2:d9:78:d8:13:08:69:2b:f6:a6:85:86:59:90:
         4d:0e:bd:18:5b:b9:84:bd:c5:3c:d9:66:16:e7:63:3c:6e:f2:
         50:be:61:33:76:cc:be:62:44:e2:0b:b9:98:37:78:f7:60:5f:
         f9:6a:b9:e5:c3:ac:0c:92:46:f4:a7:20:9b:45:d0:66:a6:08:
         3f:ba:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:38:16 2026 by rpki-client