Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa
File:                     3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (raw, json)
Hash identifier:          0MhXXslaEXPjPEoKctkP/woYNX7tt+w1I2c/UK/MryM=
Subject key identifier:   F7:07:21:49:E0:20:5E:D6:DF:BE:5D:28:F7:95:FC:F8:9E:09:5F:92
Certificate issuer:       /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Certificate serial:       1267922C81F606906683CC39A39F24F758285B2E
Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa
Signing time:             Sun 03 May 2026 02:54:38 +0000
ROA not before:           Sun 03 May 2026 02:49:38 +0000
ROA not after:            Sun 02 May 2027 02:54:38 +0000
asID:                     138598
IP address blocks:        103.134.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
                          rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:67:92:2c:81:f6:06:90:66:83:cc:39:a3:9f:24:f7:58:28:5b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
        Validity
            Not Before: May  3 02:49:38 2026 GMT
            Not After : May  2 02:54:38 2027 GMT
        Subject: CN=F7072149E0205ED6DFBE5D28F795FCF89E095F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:8c:03:4a:c2:93:64:5e:68:a5:fa:5f:8f:
                    16:ac:15:00:8d:08:a4:b2:0f:d6:eb:1c:42:c5:a5:
                    74:84:f8:18:97:63:08:47:27:84:af:25:f2:5e:00:
                    a8:85:ec:23:98:7b:0f:bd:43:4e:b2:3a:64:c6:fa:
                    66:7c:01:19:37:58:44:69:7f:fb:e8:1d:73:18:62:
                    2d:91:cf:f6:25:ea:9a:8e:8e:18:79:6d:6b:6e:ef:
                    07:41:8d:db:dc:8a:4d:8f:1a:22:b8:34:86:4b:e4:
                    70:9f:27:ba:8a:16:e8:f0:81:b3:22:5a:dc:ac:ed:
                    87:81:96:c0:76:e3:f0:2a:fc:9a:b0:f2:d5:db:1e:
                    31:9d:df:76:d9:d2:0d:39:a7:51:69:f9:0a:75:28:
                    d2:d9:45:bd:ca:32:3e:19:e3:a7:c0:3e:51:e2:68:
                    a7:85:4a:aa:eb:49:2b:bc:60:5f:9e:f0:c1:50:7b:
                    c2:84:c0:79:51:8c:ef:69:1b:06:c1:4e:8b:b1:16:
                    9c:fc:ca:2d:5f:8a:57:57:15:97:e5:f5:88:a7:88:
                    cf:9f:e3:78:5f:8e:51:56:f9:db:c7:6b:15:dc:8d:
                    ef:c7:06:e6:68:90:66:a9:dd:71:83:8d:44:99:52:
                    8d:bf:29:65:7d:1f:b8:73:08:0d:67:43:c0:43:ee:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:07:21:49:E0:20:5E:D6:DF:BE:5D:28:F7:95:FC:F8:9E:09:5F:92
            X509v3 Authority Key Identifier:
                keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:3b:43:c5:63:e9:4b:1f:d9:ce:42:4a:66:f9:e6:bf:29:32:
         0e:ee:6f:f0:32:7a:61:cc:f6:9d:56:63:dc:a9:4d:4f:30:a6:
         3b:9c:e7:e1:f6:3e:eb:8e:37:6f:f2:3b:90:54:2d:27:c7:9d:
         7b:b0:c1:e3:88:b3:60:71:8d:7c:86:ea:cc:ea:a2:4b:af:2e:
         47:7b:00:f9:0c:fb:5e:8b:b3:1c:46:2c:95:ea:06:1b:8f:02:
         ef:95:47:d7:5f:af:ea:81:60:fc:0f:1a:4f:70:57:c5:a1:8c:
         32:61:32:67:19:c8:f0:a7:f8:00:3a:0f:ec:63:df:02:2a:36:
         34:36:f4:64:10:23:c6:7e:63:ed:27:1f:41:25:4a:4d:7a:1a:
         d4:2a:b4:2a:1c:b0:bc:76:f3:8d:7b:09:7c:0a:4e:64:44:c8:
         1e:b2:30:98:6a:7c:52:ec:70:b9:63:13:4d:56:ef:be:e3:a2:
         d3:55:75:5a:ad:4d:58:38:fd:c0:68:6d:c5:f9:e6:3f:20:a5:
         03:5e:17:63:af:ce:28:6f:3f:b3:8b:5d:d9:c2:aa:11:aa:ad:
         08:21:95:3a:dd:7c:c5:15:f5:92:45:d1:43:4c:c3:0f:a1:db:
         0e:03:ba:04:db:8d:15:95:3b:2c:9c:15:f5:c9:f1:ac:18:fe:
         49:0a:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:14 2026 by rpki-client