Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32322d3232203d3e203338353234.roa
File:                     3130332e33382e3130302e302f32322d3232203d3e203338353234.roa (raw, json)
Hash identifier:          MiyKMCf36IQsfZ+v97Z0C+pNB4tqCrzvw15xDY76lpI=
Subject key identifier:   A6:AA:55:A7:0C:2F:F8:A9:13:6A:35:8F:75:03:C4:45:F7:C7:E0:7B
Certificate issuer:       /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Certificate serial:       65B6871A5EA242E6793C05B2AC425C8E905C3816
Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32322d3232203d3e203338353234.roa
Signing time:             Sun 03 May 2026 02:46:30 +0000
ROA not before:           Sun 03 May 2026 02:41:30 +0000
ROA not after:            Sun 02 May 2027 02:46:30 +0000
asID:                     38524
IP address blocks:        103.38.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
                          rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b6:87:1a:5e:a2:42:e6:79:3c:05:b2:ac:42:5c:8e:90:5c:38:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
        Validity
            Not Before: May  3 02:41:30 2026 GMT
            Not After : May  2 02:46:30 2027 GMT
        Subject: CN=A6AA55A70C2FF8A9136A358F7503C445F7C7E07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:08:27:73:3e:8a:5c:54:1b:6d:69:39:f3:
                    5a:65:a1:f1:03:f9:64:8a:9e:e0:7d:34:ff:45:d3:
                    56:09:32:22:2f:c6:81:fe:c5:d8:0a:b9:00:e1:7c:
                    2e:e0:bf:1a:16:28:5b:48:52:ef:5d:d0:2b:7b:1c:
                    cd:a7:ae:f7:0a:50:32:ec:43:bc:33:d7:da:9f:f0:
                    e5:db:af:83:dd:c1:e6:cb:e1:4a:a7:21:2a:49:44:
                    23:dd:14:04:3e:38:c4:a8:58:67:a0:7a:26:ae:0c:
                    77:93:4f:f7:d8:46:25:48:5b:e0:6e:3d:16:25:65:
                    bb:e8:24:b5:0f:4e:e4:08:d6:b8:7e:30:08:ac:5d:
                    1c:bb:d5:aa:3f:51:22:09:20:22:5c:09:d6:f8:f3:
                    cb:9d:60:6f:c0:7d:bb:6b:7b:61:58:b1:a6:59:1c:
                    88:c7:f1:df:0a:ce:1b:3c:9f:12:06:89:75:fd:5d:
                    4f:42:3b:8d:88:31:0d:4f:9e:06:e8:80:68:ad:45:
                    9a:49:f2:f5:02:b7:db:81:36:12:fa:9f:90:e7:d4:
                    f5:8f:4f:f1:45:9f:95:d4:a8:9f:5c:b3:13:76:c6:
                    89:e9:48:74:0f:cc:4f:02:21:eb:bf:c8:77:a9:7c:
                    86:5a:e1:25:20:88:aa:0c:09:fa:c4:3c:33:69:fd:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AA:55:A7:0C:2F:F8:A9:13:6A:35:8F:75:03:C4:45:F7:C7:E0:7B
            X509v3 Authority Key Identifier:
                keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32322d3232203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:ae:75:d7:a2:a1:6f:bb:70:28:c0:54:4a:40:e7:b3:2e:17:
         08:b3:e4:4e:c8:83:65:d9:64:d1:44:c0:55:2a:80:3e:27:7f:
         29:5a:61:aa:58:8c:38:f7:5b:b9:ea:1b:a5:eb:d6:6e:43:31:
         d2:dc:30:2b:99:ab:ce:b3:d7:8d:65:ad:01:1b:db:56:23:c1:
         7e:0a:67:20:90:0c:3f:f9:c6:3d:96:38:46:af:d4:75:88:2a:
         58:db:f5:89:72:ab:a5:dc:19:74:2f:6c:8a:a6:1d:47:5b:00:
         94:93:e7:81:4d:79:56:c6:fb:f2:16:01:6e:69:9e:b3:3d:b0:
         69:2b:32:4c:8e:48:c6:30:e4:1f:9b:13:a8:9b:d1:75:84:3c:
         44:09:13:05:c6:54:fd:14:fd:7f:f2:8b:15:71:0b:c3:b0:0d:
         b3:41:79:cf:a6:12:6c:48:37:1a:c5:e4:3e:30:4b:c6:31:12:
         e2:e8:7f:a7:54:ac:be:08:16:b1:47:f2:f0:24:2e:7c:fb:2b:
         e3:54:48:3e:87:77:54:36:5f:22:e1:b1:30:b4:db:92:a6:8a:
         d4:ce:28:42:27:a0:36:22:e7:4e:ed:29:61:fa:16:48:ce:ec:
         63:8a:e1:0f:fe:1e:e9:18:46:3a:a4:75:07:e5:0f:a0:3f:4d:
         05:cf:cf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:02 2026 by rpki-client