Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          P/nt1L//IhgyeaORzkAIxhjNcIWMOJwXfCUtgtI0mH0=
Subject key identifier:   E2:28:BB:8D:4F:CB:14:51:09:FA:56:66:08:E1:92:43:98:6B:96:ED
Certificate issuer:       /CN=76349EBC1654E6903E60A473DF6E8CE5B84C2592
Certificate serial:       71897B544CE3BBDCFE5E9BE1ED4C3B077CC991
Authority key identifier: 76:34:9E:BC:16:54:E6:90:3E:60:A4:73:DF:6E:8C:E5:B8:4C:25:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:46:08 +0000
ROA not before:           Sun 03 May 2026 02:41:08 +0000
ROA not after:            Sun 02 May 2027 02:46:08 +0000
asID:                     135478
IP address blocks:        103.129.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.crl
                          rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:89:7b:54:4c:e3:bb:dc:fe:5e:9b:e1:ed:4c:3b:07:7c:c9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76349EBC1654E6903E60A473DF6E8CE5B84C2592
        Validity
            Not Before: May  3 02:41:08 2026 GMT
            Not After : May  2 02:46:08 2027 GMT
        Subject: CN=E228BB8D4FCB145109FA566608E19243986B96ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:c8:c8:1a:e9:88:0c:28:7c:a8:1d:c7:d8:
                    32:96:3a:e9:e3:93:ea:31:3c:d0:37:ac:2e:b5:16:
                    dc:42:bd:a2:9d:cf:73:4f:26:7e:e5:1c:60:27:46:
                    24:e6:4a:df:96:30:7f:db:b8:e0:33:f2:85:32:b3:
                    7f:ae:58:94:45:6c:af:7d:55:67:50:41:9c:f7:9f:
                    cd:b4:24:6a:c3:ce:de:27:b3:84:a0:d7:ac:8e:c9:
                    66:95:c4:8d:3f:39:8c:cb:5f:53:f8:51:2e:b5:f6:
                    8d:ad:19:18:e8:f0:f3:6e:f1:44:dd:a0:89:72:23:
                    b5:65:ff:39:16:ab:50:5c:7c:b7:21:81:6a:ed:63:
                    b5:39:4c:ea:3e:65:60:2f:5c:95:eb:af:5b:d1:16:
                    b1:f6:61:bd:1e:7c:a2:ec:f4:e1:1e:22:1c:9d:54:
                    52:84:12:33:d7:42:c5:a2:8f:f9:19:5c:9b:56:b4:
                    3b:5d:40:65:a3:f8:b8:77:7c:f1:20:87:1a:7f:b0:
                    99:9b:0b:e2:1b:6f:fa:bf:2b:6a:0c:c9:05:fd:9e:
                    cb:8e:3a:94:56:95:4b:06:59:db:0b:12:98:ea:1b:
                    3e:6f:a6:86:21:b1:a3:71:18:74:c9:03:85:96:f8:
                    c4:1c:ed:b2:04:e4:1c:bc:90:00:93:71:e3:42:23:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:BB:8D:4F:CB:14:51:09:FA:56:66:08:E1:92:43:98:6B:96:ED
            X509v3 Authority Key Identifier:
                keyid:76:34:9E:BC:16:54:E6:90:3E:60:A4:73:DF:6E:8C:E5:B8:4C:25:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:29:38:17:84:42:81:e1:59:fc:d8:51:eb:a7:0d:64:9d:
         55:9e:31:0c:71:a4:00:85:c3:f7:98:d9:bb:51:93:0e:f2:00:
         de:86:34:c9:b1:84:5f:c0:f1:71:0b:d8:f5:74:b1:ff:a8:9f:
         53:d3:20:58:8b:de:b4:7b:da:62:2a:dd:d4:2e:56:f1:10:e2:
         5f:dc:82:00:e8:86:84:54:f8:2b:00:38:84:9a:83:58:d3:4e:
         66:16:37:48:05:60:99:c5:b8:c2:4a:6b:dc:86:e2:91:9a:73:
         2e:d6:7c:69:a9:97:f6:a2:47:c8:9d:e5:1f:15:b3:4b:5d:01:
         92:ea:46:fd:6b:dc:67:ba:e1:7c:47:af:3e:95:59:bf:a6:e2:
         58:e7:f7:49:e6:46:4e:a3:72:3e:d9:c0:42:e6:46:27:90:0c:
         3d:54:78:05:06:6d:c6:1c:08:58:2d:d5:a9:d2:80:2d:b0:5c:
         7b:72:2c:d0:85:90:b2:64:7a:fc:f6:3b:00:25:9b:02:49:75:
         12:65:7e:24:90:3b:6c:4d:15:e4:62:2a:f2:73:3b:da:c4:5d:
         29:5a:9c:1e:61:3c:f6:75:7b:44:b1:e7:50:00:67:01:ea:cf:
         52:7a:10:c7:52:43:6f:0b:06:d1:2e:02:73:bb:74:2a:61:4c:
         69:b6:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:56 2026 by rpki-client