Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa
File:                     3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (raw, json)
Hash identifier:          G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=
Subject key identifier:   6A:53:1C:D9:58:38:8C:6B:DB:23:23:A9:3B:61:64:4E:93:31:BF:58
Certificate issuer:       /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Certificate serial:       1D672E5FE86DB0A6720B072F885EF520AFFEAB70
Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa
Signing time:             Sun 03 May 2026 02:54:30 +0000
ROA not before:           Sun 03 May 2026 02:49:30 +0000
ROA not after:            Sun 02 May 2027 02:54:30 +0000
asID:                     135480
IP address blocks:        103.76.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
                          rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:67:2e:5f:e8:6d:b0:a6:72:0b:07:2f:88:5e:f5:20:af:fe:ab:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
        Validity
            Not Before: May  3 02:49:30 2026 GMT
            Not After : May  2 02:54:30 2027 GMT
        Subject: CN=6A531CD958388C6BDB2323A93B61644E9331BF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:57:9d:62:bf:52:b1:1a:bd:f6:50:9d:43:
                    fb:de:86:5d:62:0b:a0:40:39:b0:cf:36:ce:96:4d:
                    61:b2:c4:47:81:c8:94:1e:86:d0:0e:7d:52:08:a4:
                    10:49:4f:73:d9:fa:af:16:58:13:79:23:5f:00:57:
                    24:1b:ee:4a:c1:9c:5f:35:00:41:a3:95:1d:79:ba:
                    5a:44:19:78:e8:52:d2:12:f0:91:ee:b0:e7:a5:96:
                    86:8c:20:e9:09:a4:1a:a7:d4:59:e5:2b:5d:d4:43:
                    48:7a:89:b9:1c:6b:54:a7:97:ff:15:04:3b:41:83:
                    73:63:22:cc:98:33:73:97:b7:87:10:63:e5:bf:3f:
                    43:cd:b1:ef:10:0a:7f:af:ee:59:97:cd:99:fe:cd:
                    b2:f3:3d:e2:9c:42:50:d2:2c:5c:f1:c0:20:1b:74:
                    7c:36:bb:03:09:12:c1:3b:92:7d:93:e6:0e:91:4b:
                    18:e4:1f:51:22:85:cd:6d:d2:78:99:36:9f:36:06:
                    af:70:21:c8:5a:54:2a:a4:d1:2e:3d:2d:97:77:f9:
                    79:0e:91:90:76:df:75:39:a2:5e:f4:11:1f:6a:8f:
                    14:08:65:06:9b:d9:1b:3e:8c:c8:cb:4e:37:0c:cd:
                    b7:72:07:8d:08:70:61:70:5b:82:f6:4a:87:73:60:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:1C:D9:58:38:8C:6B:DB:23:23:A9:3B:61:64:4E:93:31:BF:58
            X509v3 Authority Key Identifier:
                keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:a7:37:e4:55:b6:12:bb:a3:0a:8f:24:c2:80:9e:21:09:0e:
         33:7a:75:13:69:76:44:7a:2c:63:85:ef:2c:f9:47:11:f4:c2:
         dd:df:59:76:e3:ec:6a:8d:2f:ea:eb:db:86:19:97:64:70:d4:
         b3:e6:f4:11:a6:10:ad:e5:97:3f:bf:3a:fb:e7:84:28:45:0d:
         b8:26:7d:07:d7:87:05:d4:fa:ba:3b:e3:17:bd:46:4d:6b:a9:
         40:3e:71:63:fe:49:f6:fc:ab:01:d0:be:74:30:7e:92:45:51:
         2e:f9:66:9f:ab:c2:7e:5c:98:de:76:51:8a:1f:8e:bf:a7:99:
         78:b5:1d:f0:a5:67:4b:6a:d4:0e:a3:9b:1b:f3:05:3d:d9:60:
         4c:99:75:21:1a:27:d9:bc:48:02:2a:0d:0e:84:ac:81:96:86:
         e5:e1:8c:bc:03:03:f6:86:f5:7f:bb:96:37:0b:f1:8c:35:e5:
         77:e3:39:30:a0:50:5b:8e:b5:e8:12:15:c6:e3:ea:c4:65:60:
         f9:77:3b:30:2b:78:d9:a1:c0:32:04:be:a5:6f:fa:6d:5f:f2:
         6c:f4:26:df:b3:33:00:d3:5b:62:db:8b:21:1b:03:ea:bc:96:
         43:19:e6:3b:d1:f9:2a:ac:4f:ef:ea:c3:78:fa:41:92:95:fe:
         45:6f:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:56 2026 by rpki-client