Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32322d3234203d3e203137363731.roa
File:                     3130332e31302e3133362e302f32322d3234203d3e203137363731.roa (raw, json)
Hash identifier:          TFiKpPKW0lrVxnlybrX3ooPdmtYK5nRcE/VuGWaeQj0=
Subject key identifier:   3E:98:7D:37:2D:E4:1F:3B:D7:70:52:5C:D9:10:9A:02:F6:D6:3D:C2
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       18AAAB517BD24728E24217C857D99986FE0FF879
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32322d3234203d3e203137363731.roa
Signing time:             Sun 03 May 2026 02:50:04 +0000
ROA not before:           Sun 03 May 2026 02:45:04 +0000
ROA not after:            Sun 02 May 2027 02:50:04 +0000
asID:                     17671
IP address blocks:        103.10.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:aa:ab:51:7b:d2:47:28:e2:42:17:c8:57:d9:99:86:fe:0f:f8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: May  3 02:45:04 2026 GMT
            Not After : May  2 02:50:04 2027 GMT
        Subject: CN=3E987D372DE41F3BD770525CD9109A02F6D63DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:8e:42:e3:76:85:1b:b2:68:30:c5:20:42:
                    08:45:f7:c9:43:5c:e8:e0:71:66:15:1d:53:e8:c7:
                    93:90:82:17:2c:21:6c:7c:41:44:ec:dc:d2:75:b5:
                    4a:76:9a:88:c5:a0:c3:34:67:ea:e4:49:42:e7:78:
                    48:92:17:8a:fa:ae:b0:31:c2:ca:ae:2e:66:b0:d2:
                    9c:e8:48:af:5e:94:da:69:da:70:10:97:2a:bf:3e:
                    9c:bc:cb:51:14:07:0a:aa:7f:5a:88:f4:63:d0:03:
                    25:d6:35:f7:24:e4:68:5a:53:c4:b8:3d:ea:ac:76:
                    ed:8c:80:47:76:d7:3b:39:b3:fd:ff:ac:54:03:f7:
                    e7:3d:e7:9e:f2:39:98:6f:f3:89:5a:cb:88:d8:99:
                    f6:65:14:18:8f:49:f4:32:88:c6:5a:f0:68:0d:df:
                    08:a6:30:32:3b:e3:be:3e:e4:7c:76:9f:42:65:f3:
                    b5:00:5b:20:04:b9:f9:8b:54:5e:f3:4c:c2:90:96:
                    b1:44:12:51:9b:2d:b4:a7:00:3d:78:1d:8f:74:f9:
                    73:cb:21:38:ac:05:10:6c:24:3e:c1:28:1e:38:6a:
                    99:d5:c0:05:35:9f:9e:fe:21:4e:8f:77:1b:5c:d0:
                    e9:a5:6d:d2:53:db:6a:b2:2a:ac:d3:79:54:e8:6c:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:98:7D:37:2D:E4:1F:3B:D7:70:52:5C:D9:10:9A:02:F6:D6:3D:C2
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32322d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:4e:42:d6:b6:22:57:8e:5f:ba:5d:bc:52:c6:89:12:57:3d:
         f5:aa:e6:db:cb:38:a6:d6:5c:e2:ab:ac:7b:e3:7f:6f:2b:68:
         fe:2f:1d:5c:ac:61:17:a7:69:a9:d8:12:ed:6d:f9:fd:88:f5:
         88:1e:1c:83:b5:f6:15:3f:3c:61:89:d9:44:e4:81:d4:37:66:
         41:d7:1d:bf:3a:cb:e5:38:67:15:11:c1:e3:3d:7d:97:c3:13:
         b8:94:c4:89:e4:bd:90:3d:37:34:8c:b0:ce:a7:11:48:4e:d2:
         7c:eb:b5:55:16:7e:ec:43:e4:07:b0:e3:4c:3d:f0:a4:f5:06:
         0a:55:e4:7e:b2:6b:27:14:e8:76:88:f7:72:4e:22:b2:42:ad:
         aa:24:4c:4f:50:78:92:dc:0d:1d:ec:63:3a:70:d9:1e:78:b7:
         ff:23:40:27:f4:95:27:77:e7:bc:77:9a:b1:dd:00:d7:d0:03:
         20:ea:7e:04:d7:e5:4c:c1:47:27:e4:c3:72:96:74:8b:a8:d0:
         c9:03:20:07:f1:2d:3f:24:56:64:42:d6:f0:c1:88:c4:ea:9b:
         e7:9c:0c:b3:30:03:84:68:d3:38:01:62:44:d5:f9:bb:3a:a0:
         af:1f:8d:68:c1:e3:8f:8b:32:b7:ab:60:94:5e:4f:c4:34:9b:
         99:35:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:13 2026 by rpki-client