Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45318.roa
File:                     AS45318.roa (raw, json)
Hash identifier:          YzxM2pX3GPHI/7LeOfacbUoXlpsBYg/iihMmo+uwWDo=
Subject key identifier:   64:C3:D4:C5:E7:BC:E3:97:A7:64:32:55:22:6A:5F:56:07:AA:E3:50
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       7AEFC3211163D5960A6853EC5097D76CBA4DC5ED
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45318.roa
Signing time:             Wed 13 May 2026 02:45:03 +0000
ROA not before:           Wed 13 May 2026 02:40:03 +0000
ROA not after:            Wed 12 May 2027 02:45:03 +0000
asID:                     45318
IP address blocks:        103.213.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ef:c3:21:11:63:d5:96:0a:68:53:ec:50:97:d7:6c:ba:4d:c5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May 13 02:40:03 2026 GMT
            Not After : May 12 02:45:03 2027 GMT
        Subject: CN=64C3D4C5E7BCE397A7643255226A5F5607AAE350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:74:4f:88:2e:e5:03:68:17:d7:9a:63:29:
                    d0:6f:2c:92:7c:ed:c4:bf:80:7b:5d:46:5e:6a:02:
                    b6:0a:a9:4c:a2:a0:44:91:3d:a5:05:b3:49:2f:27:
                    c3:9f:fd:ce:a9:ba:e5:1e:1b:38:70:45:e1:43:4a:
                    df:8c:dc:4f:80:82:b7:fa:e8:7b:5c:1f:b5:66:95:
                    92:9e:14:d4:cd:5c:1d:6c:17:b8:41:41:ec:9e:98:
                    65:dc:c7:1e:d1:9e:23:f2:36:2a:44:04:ff:e6:c1:
                    11:db:ac:c3:d0:95:dc:55:22:ce:26:d3:66:8e:7a:
                    36:8a:ab:68:a1:eb:a1:e1:85:0b:25:04:c1:99:af:
                    26:9e:3a:48:cd:82:33:0e:41:dd:4a:eb:2a:90:e1:
                    69:d2:86:ef:6b:71:e5:c1:61:d5:bc:29:4d:54:5c:
                    03:8c:e7:6b:ce:d6:d2:e1:61:7a:9b:bf:2b:00:d0:
                    44:70:e2:c7:da:62:2f:dc:65:9c:97:60:06:96:1e:
                    16:f6:d4:f6:bb:f8:0c:49:91:be:e6:3c:7f:6a:3a:
                    35:07:df:fa:32:19:95:ee:68:e2:be:69:ec:56:94:
                    ff:68:dd:65:2e:f0:4b:51:2c:0d:49:ca:52:7e:f4:
                    71:3a:98:22:e9:d9:5e:e9:01:a0:86:c8:bc:eb:30:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C3:D4:C5:E7:BC:E3:97:A7:64:32:55:22:6A:5F:56:07:AA:E3:50
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:e9:81:ab:bc:24:c8:1e:d5:76:33:be:cc:b6:63:03:5d:0b:
         e7:db:88:4f:a8:95:34:22:6a:5f:08:16:a2:d5:1e:55:21:e4:
         0e:13:95:6b:5d:d4:b1:71:ca:61:cc:3e:b8:2c:89:49:5a:ab:
         b2:90:73:d2:ee:56:04:91:60:e6:41:cc:f8:8d:3b:0b:d2:96:
         3d:74:d7:e0:ac:a4:5c:d6:e5:ce:17:5c:30:64:f5:7a:d6:90:
         46:68:a8:57:1e:54:f2:91:ab:e4:7f:58:f9:c7:68:ff:ec:5a:
         65:1b:1f:9e:dc:0f:0a:4b:5f:88:ee:b9:1d:83:7d:4a:3e:bc:
         f0:f0:39:de:07:ba:fc:b4:3e:42:81:cb:d3:42:6a:7e:34:07:
         09:2c:17:ff:80:6b:5a:25:69:92:ba:85:aa:53:8e:48:07:c5:
         08:94:bd:85:a1:95:da:4b:1a:b1:77:62:08:34:a6:f2:5f:7b:
         0b:3a:3a:d4:74:fd:37:c7:a1:ef:42:19:81:7a:7f:41:df:a4:
         2e:7a:22:33:33:9d:39:c7:ae:16:54:93:92:9f:82:83:5a:2b:
         37:4e:01:86:71:26:4d:94:37:23:5d:14:2f:8d:93:46:e5:70:
         a7:da:9e:62:fb:d5:2b:3a:e8:b2:0f:0b:60:5c:65:45:b4:62:
         2c:79:73:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:44 2026 by rpki-client