Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32342d3234203d3e20313335343838.roa
File:                     3130332e39352e382e302f32342d3234203d3e20313335343838.roa (raw, json)
Hash identifier:          6xX5hpFI3vfAbJBKIH+olFnqZn+fECnqjvCv45mqV+0=
Subject key identifier:   75:BF:4F:92:34:AE:41:E1:F5:84:FF:9D:C1:F6:02:99:F7:1F:F3:3D
Certificate issuer:       /CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F
Certificate serial:       2EDE2411689ED058FFFD9B285E8CDCB5CA970D0E
Authority key identifier: EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32342d3234203d3e20313335343838.roa
Signing time:             Sun 03 May 2026 02:56:11 +0000
ROA not before:           Sun 03 May 2026 02:51:11 +0000
ROA not after:            Sun 02 May 2027 02:56:11 +0000
asID:                     135488
IP address blocks:        103.95.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl
                          rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:de:24:11:68:9e:d0:58:ff:fd:9b:28:5e:8c:dc:b5:ca:97:0d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F
        Validity
            Not Before: May  3 02:51:11 2026 GMT
            Not After : May  2 02:56:11 2027 GMT
        Subject: CN=75BF4F9234AE41E1F584FF9DC1F60299F71FF33D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:a2:d5:0b:cb:5f:29:10:de:9f:64:b4:94:
                    97:36:a3:c2:cb:69:cd:bb:a2:20:bb:b8:af:ba:63:
                    18:27:5c:57:49:59:2b:08:e5:f5:6f:9d:b5:62:89:
                    73:63:1b:9e:ab:60:69:57:0b:55:a8:5f:29:8d:bd:
                    36:1e:cb:79:bf:19:e8:6c:05:bc:3b:cf:04:97:c3:
                    b5:ed:ff:85:07:76:ed:7a:c7:e3:b1:26:21:d8:7d:
                    4e:3c:6f:a2:09:e6:9b:0d:99:73:74:dc:f8:eb:9e:
                    a5:75:75:8b:27:73:d9:59:c9:6f:35:ac:79:ae:f2:
                    ce:d2:3d:1c:0d:bc:87:8f:19:de:0d:13:91:da:84:
                    c9:ed:2b:38:0e:6c:48:72:73:f2:11:e0:60:2f:fd:
                    65:4d:b8:f7:6f:45:bc:b0:a1:26:24:6b:cd:4c:6e:
                    11:78:c6:fe:59:14:5d:79:9a:33:db:e1:73:e1:b0:
                    c6:48:d8:35:34:a4:19:ec:00:97:0e:05:2d:6e:83:
                    ff:16:9a:a1:84:69:21:b9:06:d5:5b:48:6a:dc:4a:
                    d7:b0:3a:0f:17:71:1a:84:71:71:38:4e:a5:65:46:
                    59:d7:4a:06:35:7c:55:ce:a5:a2:71:6a:a2:fa:49:
                    d3:f1:e6:19:d1:9e:02:85:6b:77:9e:0b:87:2f:4b:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BF:4F:92:34:AE:41:E1:F5:84:FF:9D:C1:F6:02:99:F7:1F:F3:3D
            X509v3 Authority Key Identifier:
                keyid:EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32342d3234203d3e20313335343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f8:61:c6:23:ad:fa:b3:ae:ad:5f:c2:02:87:6f:90:02:dc:
         e7:39:1e:48:31:5a:a5:9c:83:56:8b:ca:72:77:39:45:e3:f2:
         30:5e:8c:32:7e:67:31:54:0f:ac:50:82:cc:2f:8c:1f:a6:42:
         f4:1f:fa:a1:ca:72:69:79:b8:f3:55:7f:1b:01:ad:7c:63:c8:
         ca:d7:d8:05:47:62:f1:6e:7d:b9:6b:40:1e:1a:d4:6c:f1:83:
         e7:f8:4d:8f:16:33:54:6c:e7:2a:e7:4a:f9:6c:b5:ea:ce:28:
         0a:90:be:c6:25:ee:51:89:bd:ac:eb:c3:57:f5:38:81:87:ee:
         32:e3:2a:83:f9:3d:4a:5a:af:23:93:3c:74:e0:45:90:49:07:
         c4:03:43:97:f5:83:34:cd:cd:f1:b7:e2:ef:4c:93:1b:ef:f3:
         52:15:71:d2:f0:2c:82:75:98:81:fa:01:55:12:be:a6:8c:2c:
         7e:46:0b:8b:d9:42:21:14:49:b6:e9:fd:3e:e1:ec:78:1f:fb:
         02:50:31:1a:0e:2b:7c:7d:0d:45:22:dd:fc:9d:9c:3b:d6:56:
         1f:b9:c5:10:86:79:ad:74:05:2a:38:85:03:45:97:ce:f0:3b:
         1a:32:08:03:01:73:f8:6a:80:e9:c3:87:61:f6:05:0d:d2:e6:
         ef:80:72:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:25 2026 by rpki-client