Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa
File:                     3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (raw, json)
Hash identifier:          TRWIrQgMw0vzFT1wo/XHCGKpEBnDNIIUVSSE+rxC05I=
Subject key identifier:   49:DD:82:63:1D:48:FD:6E:E0:2E:FD:72:70:65:5D:2B:45:4F:3F:A6
Certificate issuer:       /CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
Certificate serial:       64BC66EF46FE3487E21F5EC469DFFDDF4A8FB91E
Authority key identifier: 18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa
Signing time:             Sun 03 May 2026 02:52:44 +0000
ROA not before:           Sun 03 May 2026 02:47:44 +0000
ROA not after:            Sun 02 May 2027 02:52:44 +0000
asID:                     138129
IP address blocks:        103.132.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl
                          rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bc:66:ef:46:fe:34:87:e2:1f:5e:c4:69:df:fd:df:4a:8f:b9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182BF87982E8CCFFF878A12F60C3610A27EB6374
        Validity
            Not Before: May  3 02:47:44 2026 GMT
            Not After : May  2 02:52:44 2027 GMT
        Subject: CN=49DD82631D48FD6EE02EFD7270655D2B454F3FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:b9:e7:6b:68:f7:1f:27:66:bb:18:44:80:
                    49:37:b3:f0:c4:bd:0f:63:cf:f4:80:6a:1b:90:c5:
                    78:36:24:d6:3b:04:bd:ef:2a:9f:32:c9:8f:94:0e:
                    17:dd:06:e2:d0:ff:e4:e2:0b:d8:1f:6f:bc:74:72:
                    0a:fc:63:f5:30:26:3d:9b:0e:f0:2f:4c:e2:b7:10:
                    95:53:af:0d:17:20:eb:f9:2f:cc:95:08:9d:6e:ff:
                    94:96:96:e6:8d:c7:65:92:69:50:2d:8f:84:4c:ac:
                    cb:3c:13:75:94:58:db:87:02:62:8b:13:a7:cf:32:
                    b5:3b:2b:1b:95:56:c2:c5:d3:45:aa:76:a2:20:ea:
                    ed:b2:59:17:1f:ba:be:5b:f5:82:e4:ad:74:a7:41:
                    b5:f8:72:e9:38:0b:02:6f:26:b7:42:8e:ea:dc:17:
                    bb:22:42:50:d7:f8:e6:b0:92:cc:2a:6a:4a:5f:69:
                    1d:5f:c2:98:1b:02:30:38:e4:7b:5f:ea:78:97:ad:
                    b1:77:7b:d8:75:8c:12:21:fa:09:87:51:9d:56:3a:
                    e0:7b:4b:7a:c2:ce:d9:68:c0:57:40:c6:14:cb:4c:
                    30:f7:65:86:83:e6:23:bc:d0:13:26:7c:30:b8:06:
                    14:11:3d:64:ee:c7:74:17:55:3e:33:48:59:76:d7:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DD:82:63:1D:48:FD:6E:E0:2E:FD:72:70:65:5D:2B:45:4F:3F:A6
            X509v3 Authority Key Identifier:
                keyid:18:2B:F8:79:82:E8:CC:FF:F8:78:A1:2F:60:C3:61:0A:27:EB:63:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/182BF87982E8CCFFF878A12F60C3610A27EB6374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/182BF87982E8CCFFF878A12F60C3610A27EB6374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:10:9f:be:6c:03:49:d4:c7:3d:6b:1e:ba:99:ef:2e:86:46:
         2d:c2:8b:41:b7:14:05:62:da:cd:27:11:35:39:b9:1e:0d:e4:
         7d:bc:fc:c9:6a:1b:48:2e:ca:ec:91:85:78:c7:5a:8d:e8:59:
         4a:d0:6c:a5:5f:0a:91:a4:15:ba:fd:c9:76:3e:6a:6e:e4:e9:
         64:51:2a:04:6a:96:12:06:ef:01:8d:de:08:b9:14:79:ba:f8:
         3d:c2:18:ea:f0:5e:0a:7a:a4:36:ce:55:2e:3a:8d:5d:e6:1d:
         47:f0:71:43:61:6c:ba:17:55:a2:e6:13:8d:d8:a5:ea:fe:ff:
         70:33:61:94:2a:a5:3a:92:d8:3b:a5:8e:4e:fa:a6:7b:39:16:
         f3:ba:58:0a:d8:3e:03:f6:f0:d2:ca:95:8c:d1:86:c0:28:f3:
         9a:b7:a3:f8:4e:29:51:af:9b:83:4e:32:6b:af:9c:fd:60:b5:
         a9:9b:c5:00:36:d3:a3:10:0e:73:2e:d5:8f:37:1d:fb:ba:c4:
         74:2c:72:d6:a5:e4:52:52:33:71:f6:2f:4b:ad:7e:67:71:bc:
         32:43:26:7f:f1:a3:fb:66:cd:01:45:33:e4:a0:d3:c3:ba:f3:
         51:82:10:2b:c7:06:75:dc:24:fa:e5:31:a2:39:00:07:a6:c3:
         e0:62:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:25 2026 by rpki-client