Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa
File:                     3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (raw, json)
Hash identifier:          CMIcy7X5aCAauqTlERIV8khM7hpSoP3FOk5Ar2k00es=
Subject key identifier:   9F:6A:F0:49:2D:E6:21:95:CA:B8:D1:4D:A8:15:CD:38:BB:9C:85:23
Certificate issuer:       /CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B
Certificate serial:       1D476890B2619A014B3EC1F6B342C3E7EDF6B9E3
Authority key identifier: 45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa
Signing time:             Sun 03 May 2026 02:55:41 +0000
ROA not before:           Sun 03 May 2026 02:50:41 +0000
ROA not after:            Sun 02 May 2027 02:55:41 +0000
asID:                     136868
IP address blocks:        103.105.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl
                          rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:47:68:90:b2:61:9a:01:4b:3e:c1:f6:b3:42:c3:e7:ed:f6:b9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45F4EB37AA178A242B8D8DD723B5E9B5502B327B
        Validity
            Not Before: May  3 02:50:41 2026 GMT
            Not After : May  2 02:55:41 2027 GMT
        Subject: CN=9F6AF0492DE62195CAB8D14DA815CD38BB9C8523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:51:97:c9:e5:f9:da:e3:f3:6c:10:e4:58:
                    15:9e:a5:8f:76:41:26:0b:ae:f0:6d:22:7d:4b:f5:
                    9f:9e:32:19:14:b9:6b:ae:1d:43:30:97:d5:c1:d6:
                    2f:8d:79:62:6d:f9:26:8f:79:04:0d:71:c4:4d:d2:
                    66:07:36:c9:ad:81:d1:68:d3:74:6a:a6:26:be:da:
                    6b:29:fb:3a:50:76:6e:03:62:e7:88:82:ac:05:ad:
                    6d:19:bc:60:2c:f2:eb:a2:d1:5f:fd:cd:c6:dd:20:
                    47:eb:d3:d8:4d:f6:cb:b8:b0:e3:61:88:fd:ce:0e:
                    9f:a9:54:ec:e9:b2:f9:63:05:c4:ef:27:c8:53:8b:
                    a2:fd:78:62:2f:53:82:f8:73:f5:34:5f:55:3e:a6:
                    5d:cb:ce:52:d0:bc:38:21:a0:55:f0:ab:16:e4:a4:
                    f6:b6:7b:82:c2:ba:45:7b:fc:f5:14:00:a5:67:98:
                    fc:55:f4:8a:d4:47:bb:f0:e1:a5:0d:5f:84:47:ae:
                    73:ec:70:d0:5a:e2:ed:77:88:90:0e:d0:08:ab:21:
                    1f:91:46:b0:2d:cb:14:6e:16:80:e8:44:56:90:d0:
                    d6:5c:24:1f:c0:15:b6:d3:19:62:2d:92:3f:83:f3:
                    33:a7:1b:73:17:a9:75:cb:5e:dc:0f:52:71:b3:54:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6A:F0:49:2D:E6:21:95:CA:B8:D1:4D:A8:15:CD:38:BB:9C:85:23
            X509v3 Authority Key Identifier:
                keyid:45:F4:EB:37:AA:17:8A:24:2B:8D:8D:D7:23:B5:E9:B5:50:2B:32:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45F4EB37AA178A242B8D8DD723B5E9B5502B327B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:68:3b:a7:ff:9b:d1:83:56:f1:87:6d:3e:01:31:7f:cf:72:
         14:04:66:aa:f3:ed:8d:bd:dc:cb:a8:3c:3b:65:61:22:ce:f7:
         2e:72:60:06:27:37:36:87:3a:2c:df:c4:6f:04:5e:b8:92:59:
         bb:40:98:de:8b:e8:91:03:e4:e7:d5:bd:1d:44:69:a5:d0:c7:
         a8:ea:42:b9:8a:5b:f5:d4:ae:de:b8:f4:57:44:03:f4:73:81:
         b9:9e:79:4c:ea:03:11:3a:37:95:6e:a2:2e:7b:d1:46:0b:14:
         38:3d:6a:51:a6:34:ed:c8:62:b7:01:32:ac:d3:90:06:ff:7c:
         2a:3c:bd:7d:39:8c:3e:4c:5b:df:11:a6:32:8c:83:60:46:e1:
         94:a7:51:f0:6e:e2:22:47:da:cc:93:14:f2:8e:44:93:37:78:
         e7:81:f5:88:a5:24:bf:06:58:30:5a:4f:2b:47:ad:72:80:f3:
         d3:fb:ce:f7:ed:98:72:e6:23:c1:55:62:1d:96:86:d3:b9:76:
         59:27:08:e1:50:2a:c7:05:1e:72:ed:5b:2b:36:01:cc:04:72:
         60:e9:1b:0c:ab:21:c0:d1:d1:3b:1a:42:33:16:8e:3e:0f:14:
         31:16:5b:2e:1f:65:91:15:76:09:f8:8b:45:8a:06:22:b2:13:
         a8:86:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:21 2026 by rpki-client