Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa
File:                     3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (raw, json)
Hash identifier:          a9SdeOZSphcGVgljZg1tnbLWdBiFIVD0GygHfLT2ZLs=
Subject key identifier:   53:E6:4B:33:A9:07:AF:8F:46:7A:08:75:16:12:16:27:FE:19:BA:D6
Certificate issuer:       /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
Certificate serial:       31634EBDD8F58C8E1F97EFFAE6C385ED85F0238F
Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa
Signing time:             Sun 03 May 2026 02:52:38 +0000
ROA not before:           Sun 03 May 2026 02:47:38 +0000
ROA not after:            Sun 02 May 2027 02:52:38 +0000
asID:                     135455
IP address blocks:        103.68.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl
                          rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:63:4e:bd:d8:f5:8c:8e:1f:97:ef:fa:e6:c3:85:ed:85:f0:23:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
        Validity
            Not Before: May  3 02:47:38 2026 GMT
            Not After : May  2 02:52:38 2027 GMT
        Subject: CN=53E64B33A907AF8F467A087516121627FE19BAD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:85:3b:28:60:12:9c:49:d6:23:1b:f1:d9:
                    ad:c9:c4:a5:00:c2:11:3f:f0:53:a6:df:93:8d:82:
                    de:0a:0c:f6:96:c8:6a:df:b9:b7:0b:9a:39:83:44:
                    b2:d7:79:a6:95:ca:07:e5:fd:47:61:4f:79:63:c6:
                    48:a0:b6:6c:7b:78:06:dc:02:09:8c:d9:85:b0:3c:
                    08:fc:f0:74:5b:ca:52:c3:22:57:58:97:8f:bc:4c:
                    72:47:20:f8:fd:d5:84:58:1b:ff:5a:19:f4:c5:0b:
                    49:80:45:97:49:47:60:36:80:76:51:ec:10:b7:fb:
                    64:52:8b:27:10:8d:97:28:ab:8d:e2:44:b8:86:e1:
                    0b:5c:82:11:ad:33:ba:87:64:82:b8:1b:46:fc:50:
                    5c:d0:f3:58:ea:f7:36:70:16:a7:f0:87:46:24:b8:
                    82:16:3f:6a:c1:02:c2:37:af:a3:61:9e:98:16:8c:
                    89:ff:97:c6:f4:68:b2:07:0d:ec:53:e4:27:26:b5:
                    d4:6c:a5:bd:ab:d9:bc:6d:0a:53:d2:20:86:e1:a9:
                    a4:96:43:5d:f5:a0:fb:51:f1:df:b7:18:a3:39:a2:
                    bf:00:40:e2:a9:8c:a8:13:27:f7:7b:ab:e8:55:3e:
                    cc:2f:1a:2d:06:4a:3d:e5:31:b7:13:f9:2e:3a:f4:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E6:4B:33:A9:07:AF:8F:46:7A:08:75:16:12:16:27:FE:19:BA:D6
            X509v3 Authority Key Identifier:
                keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:b0:14:01:ec:32:59:e3:58:b8:9a:46:15:3e:89:de:94:
         bc:39:76:96:96:cc:35:dd:24:2d:a2:e6:a3:a3:23:ed:d0:72:
         cd:30:8e:9f:f3:33:88:04:ee:b3:0e:b4:5b:c1:dc:1a:68:b6:
         e2:ec:34:4d:b8:9d:24:97:40:c8:7f:b9:a0:ce:92:f6:d1:a4:
         34:6f:51:e1:c9:32:59:f3:80:10:5f:de:fb:9a:c0:af:14:26:
         c4:51:1b:e1:03:42:21:67:70:00:4e:46:54:4c:21:25:2c:3c:
         d3:e5:bb:0c:e4:76:75:d4:1c:31:6a:8e:63:2d:be:96:ec:a2:
         a9:08:61:30:e9:9d:96:a8:34:0e:a1:55:20:26:4d:2f:b9:5e:
         91:8a:ac:7d:c9:dc:a9:d7:c6:59:35:1f:3b:c6:30:ca:25:56:
         9a:fc:06:c1:1b:99:9c:ce:4e:76:7b:bb:e5:4c:fc:99:cc:0c:
         34:3f:df:c2:5f:a9:b3:62:a9:4d:06:c1:4d:7d:e2:61:fc:93:
         20:71:02:c1:31:33:26:9b:74:a3:19:e0:bd:d2:fe:0c:c7:76:
         ff:6d:dd:a8:a4:1a:4d:08:2d:7c:c9:c8:4d:2e:0d:11:eb:aa:
         d8:60:20:87:3d:00:9c:fb:ee:80:89:bd:71:d0:d6:eb:c1:90:
         d4:5c:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:09 2026 by rpki-client