Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa
File:                     3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (raw, json)
Hash identifier:          /kAtttFbe36wHQ930SSRc642mBWubZeea+be7w2XSf8=
Subject key identifier:   07:0D:4C:70:D8:19:21:29:90:D1:E9:9E:71:F6:DD:6E:57:31:CB:2D
Certificate issuer:       /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF
Certificate serial:       4FE85BCC6AC3CC73EE106900A716BD00D37A5C6C
Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa
Signing time:             Sun 03 May 2026 02:51:01 +0000
ROA not before:           Sun 03 May 2026 02:46:01 +0000
ROA not after:            Sun 02 May 2027 02:51:01 +0000
asID:                     134620
IP address blocks:        103.203.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl
                          rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e8:5b:cc:6a:c3:cc:73:ee:10:69:00:a7:16:bd:00:d3:7a:5c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF
        Validity
            Not Before: May  3 02:46:01 2026 GMT
            Not After : May  2 02:51:01 2027 GMT
        Subject: CN=070D4C70D819212990D1E99E71F6DD6E5731CB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:62:27:0f:e0:8a:3f:f3:83:f6:f3:b3:29:
                    74:85:0e:08:9f:b2:d1:2a:41:ac:02:4b:fe:a4:79:
                    04:ab:ca:9d:ba:cb:e2:c0:64:92:61:c9:11:3d:cb:
                    5f:e4:3b:41:ae:58:4d:33:43:b5:76:d8:43:dd:18:
                    7f:b2:3a:ca:77:65:84:cd:68:7a:f0:c5:9c:0f:8d:
                    15:8f:77:21:5e:28:9a:1f:6c:3b:c5:57:b6:e0:6b:
                    b7:92:65:48:3b:cc:12:27:8d:81:e3:02:de:7c:2b:
                    6f:8c:37:8c:d5:a3:f3:66:96:42:e1:86:eb:5d:04:
                    f4:f0:30:da:de:dd:8b:9a:8d:be:a8:2c:14:16:b4:
                    d3:5d:b6:ed:b7:32:06:20:80:73:a2:dc:72:3a:98:
                    0a:59:34:72:14:e6:29:ea:68:ba:ea:18:65:56:a3:
                    c7:e1:de:76:ca:d7:72:71:04:b6:24:ca:e3:2f:17:
                    3b:e6:93:60:98:d4:45:47:b9:48:52:ac:b3:e1:72:
                    75:15:50:7f:b2:31:98:b6:7a:26:c6:93:0c:1b:2e:
                    5f:ab:28:02:47:b9:b3:c7:f8:21:dd:70:74:c8:63:
                    af:67:ab:d3:ab:cc:12:5a:47:04:32:13:ce:80:9f:
                    2c:1e:3a:ec:be:a5:0c:6a:21:84:e9:c7:b2:2d:d2:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0D:4C:70:D8:19:21:29:90:D1:E9:9E:71:F6:DD:6E:57:31:CB:2D
            X509v3 Authority Key Identifier:
                keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:b5:c2:c3:c6:f8:ac:ab:9f:7a:32:6f:19:a0:3c:d9:b2:67:
         35:f0:4f:61:4b:09:ee:29:97:22:77:cf:47:d4:37:60:10:b3:
         62:0b:43:68:e7:ae:5d:45:2b:b7:0e:72:4e:9d:f7:05:7d:e9:
         ab:05:15:50:8b:82:3d:f1:fe:29:f2:f4:7a:b3:36:55:ec:6a:
         86:a2:e1:f6:74:36:63:fb:4b:2a:3d:67:58:39:24:28:4d:be:
         f7:ce:50:6a:7d:f6:f8:6d:4d:88:e9:00:5a:37:e1:dd:b8:66:
         c2:62:e0:a2:27:43:3a:f2:b2:4f:33:82:c6:aa:28:8d:47:ea:
         e7:c6:12:8c:db:a7:6b:9e:0d:95:85:fe:48:03:d0:57:da:09:
         50:fa:94:65:55:32:ee:21:e8:af:5a:59:f1:9e:29:40:bb:85:
         96:ad:f2:67:1a:ad:33:c3:1a:49:31:53:55:25:12:53:57:96:
         6f:c4:db:e2:aa:c4:7d:bc:fe:b0:f4:b4:c6:1a:54:c1:db:7f:
         10:0d:ff:a7:a0:f8:ae:19:b7:c4:81:fa:d8:52:a9:09:5f:ae:
         42:d5:a1:0b:ae:e2:39:ff:fa:d1:7a:f2:c8:6d:68:f8:6b:6c:
         eb:ec:23:97:c7:ca:46:fe:15:13:23:39:2a:ca:d1:bb:ec:87:
         76:3e:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:31 2026 by rpki-client