Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e392e302f32342d3234203d3e20313335343838.roa
File:                     3130332e39352e392e302f32342d3234203d3e20313335343838.roa (raw, json)
Hash identifier:          cCW7eYSWOx2HeGcwXRHzekDYmrW8hp1mJ3VwAjVNaok=
Subject key identifier:   CB:2C:80:73:6A:67:3A:4C:6C:EF:1F:65:63:66:3C:05:E2:05:0E:49
Certificate issuer:       /CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F
Certificate serial:       12FEB0D137DB8368427572406167C517C5417BD5
Authority key identifier: EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e392e302f32342d3234203d3e20313335343838.roa
Signing time:             Sun 03 May 2026 02:56:11 +0000
ROA not before:           Sun 03 May 2026 02:51:11 +0000
ROA not after:            Sun 02 May 2027 02:56:11 +0000
asID:                     135488
IP address blocks:        103.95.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl
                          rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fe:b0:d1:37:db:83:68:42:75:72:40:61:67:c5:17:c5:41:7b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F
        Validity
            Not Before: May  3 02:51:11 2026 GMT
            Not After : May  2 02:56:11 2027 GMT
        Subject: CN=CB2C80736A673A4C6CEF1F6563663C05E2050E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:7d:b2:c2:db:3f:35:31:51:9b:62:af:89:
                    62:ee:23:de:2b:11:39:e0:92:8d:ae:9d:66:01:bb:
                    a5:85:5c:09:de:e3:d2:27:56:2d:4b:c0:cd:94:e9:
                    fe:28:f8:9c:cb:0d:61:0a:98:85:78:7f:d4:5a:bd:
                    51:64:a7:91:75:16:fb:8c:54:a5:2a:3a:ab:3f:e1:
                    c7:1d:45:13:7b:25:87:86:79:fc:f2:89:23:7f:ec:
                    7b:fe:82:a9:ad:8a:37:30:2c:5c:cc:e5:b1:d8:ff:
                    e6:ac:2b:8d:54:e5:b9:a2:4b:e4:3b:b4:f9:66:5d:
                    0e:7a:5e:31:af:fc:a1:aa:b0:18:b1:d5:55:1c:d3:
                    ce:c4:8a:8a:41:42:93:22:cf:40:5f:89:9a:b3:a5:
                    71:02:1d:41:e5:af:10:71:54:fd:c7:4f:f9:6e:78:
                    25:f6:a7:8b:67:07:28:84:da:fa:ab:62:bb:87:85:
                    fd:d2:72:ba:33:92:2d:d2:2a:78:44:8e:29:6f:9b:
                    3c:0b:cd:81:07:96:ef:5f:21:65:e2:cc:8d:01:50:
                    6f:2d:cf:63:d7:4d:b1:0f:bc:94:41:45:72:18:f0:
                    9b:26:3e:d9:88:a0:46:4e:24:c5:5b:32:eb:0a:05:
                    3a:96:e5:aa:71:91:19:6a:b1:6c:21:dd:be:d1:3c:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2C:80:73:6A:67:3A:4C:6C:EF:1F:65:63:66:3C:05:E2:05:0E:49
            X509v3 Authority Key Identifier:
                keyid:EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e392e302f32342d3234203d3e20313335343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:9c:7c:80:19:85:8a:ae:66:ed:e4:3a:3c:86:fc:eb:83:2e:
         55:f1:7d:b8:9b:b7:5d:ef:55:35:d3:ba:69:95:c4:15:1a:6a:
         f0:91:bf:71:de:94:6f:08:f9:47:0c:0d:ab:99:5c:cb:18:7d:
         36:8e:0a:f3:d4:db:bf:a7:55:6b:db:66:9b:a3:dd:6e:66:27:
         5f:23:9c:bd:7d:65:c0:f1:5c:5d:19:9f:ec:b3:85:4d:6d:60:
         fc:ba:a5:13:7a:38:74:2b:c0:12:24:f4:4c:e8:b5:7f:ff:0f:
         17:59:11:e3:42:06:61:78:07:b5:aa:9c:05:73:01:a3:da:96:
         71:8d:69:18:d4:fb:b3:c2:83:e5:8e:b8:78:d9:ca:1b:1b:21:
         f6:1b:93:c5:ab:20:a9:25:ab:b8:6e:ab:41:76:dd:1f:73:6d:
         68:08:56:e8:db:f5:9b:b1:4a:b4:af:95:78:9f:8e:d2:f2:c2:
         9d:ba:2d:a4:ba:85:6e:15:c5:f2:78:2d:dd:74:06:bd:ea:e7:
         6e:41:63:7e:a2:a6:26:b5:74:c6:da:1c:29:1f:25:69:74:6f:
         2f:cd:26:a7:ba:fe:da:ec:9b:49:cd:e6:65:63:47:9f:8e:39:
         40:26:ef:cb:b3:7a:3e:b6:5e:2a:40:c5:d1:10:e9:45:f8:07:
         77:58:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:40 2026 by rpki-client