Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa
File:                     3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier:          Rzam6PvLZ+xrmgagrwXwqhMp9MJWOtcAhOVQGce0u+k=
Subject key identifier:   8B:F1:A4:3F:89:69:3F:9E:A7:4C:84:23:D2:A5:47:BD:91:39:F3:3C
Certificate issuer:       /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial:       37F9DC908FDA3FE21318B2CE1A19D93838580138
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa
Signing time:             Sun 03 May 2026 02:56:15 +0000
ROA not before:           Sun 03 May 2026 02:51:15 +0000
ROA not after:            Sun 02 May 2027 02:56:15 +0000
asID:                     141968
IP address blocks:        103.167.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
                          rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f9:dc:90:8f:da:3f:e2:13:18:b2:ce:1a:19:d9:38:38:58:01:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
        Validity
            Not Before: May  3 02:51:15 2026 GMT
            Not After : May  2 02:56:15 2027 GMT
        Subject: CN=8BF1A43F89693F9EA74C8423D2A547BD9139F33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:4b:ed:50:87:c8:e0:7a:6f:fe:53:4a:3e:
                    f1:ff:1c:9f:03:b6:70:c7:ca:ae:4a:cc:df:b9:ce:
                    a2:61:bc:8f:9e:fc:5e:d4:23:b6:e5:08:35:74:4e:
                    e2:4c:ee:96:01:30:a3:7a:5b:c9:4f:b1:09:57:8c:
                    a4:a0:4a:e5:67:51:ac:d4:64:c3:e5:eb:0f:5a:4c:
                    67:db:32:23:f2:2c:ed:8f:0f:49:c4:85:a0:a6:bb:
                    79:15:f3:7f:51:68:e8:fd:5c:b3:03:00:0d:23:b5:
                    ee:f6:c6:c8:24:54:8f:e3:78:29:ba:a1:fc:ef:cd:
                    d0:02:60:5f:ec:7a:9c:75:59:a6:ea:87:64:84:49:
                    b8:2e:8a:17:01:8a:f9:0c:5d:0b:a2:ff:65:6e:ad:
                    5e:63:f6:ec:9d:4b:76:b2:9f:4e:e7:70:63:94:4c:
                    3f:6e:61:fc:4a:ec:f1:84:cf:0d:19:3b:f6:b1:9a:
                    b8:fb:fb:48:25:0a:c5:f1:fb:a5:12:25:69:73:91:
                    be:87:d3:da:da:98:c4:4f:18:c2:09:8a:7c:51:40:
                    5d:ef:05:0e:6b:b2:b0:47:d6:0b:f0:35:d9:e4:0e:
                    4a:1c:e8:49:b4:62:b1:03:4d:20:59:43:e3:fb:44:
                    45:03:ad:1b:ef:fa:b2:cf:f8:da:c0:11:35:04:1e:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F1:A4:3F:89:69:3F:9E:A7:4C:84:23:D2:A5:47:BD:91:39:F3:3C
            X509v3 Authority Key Identifier:
                keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:15:64:62:c6:48:a0:53:2c:45:24:b8:a5:4c:f4:af:fe:3d:
         ef:ae:40:e1:43:1e:e4:15:2a:32:7b:4e:17:bb:f6:a7:02:7c:
         91:73:a9:af:52:9c:86:2d:52:23:36:60:74:f2:01:2d:f2:fb:
         07:54:4a:89:61:76:d2:fe:df:86:db:13:e3:0b:13:d3:06:b6:
         e8:35:b7:68:6b:1c:31:92:d8:c8:af:06:1f:4a:f1:c1:83:6f:
         f2:68:fc:72:ce:6a:11:4e:8f:48:3a:9d:fd:2a:97:f6:b8:33:
         b1:ec:f1:be:b2:f4:bb:61:e1:b0:61:58:74:67:86:93:0f:a8:
         f3:51:1b:13:f4:5e:38:0f:aa:8a:2f:57:03:36:29:99:5c:52:
         3e:77:79:1b:4b:46:6c:0e:9c:b5:33:10:8d:35:aa:85:49:f3:
         91:c6:be:70:1c:29:90:e3:e1:b5:9d:0a:14:0c:48:2c:8e:3e:
         cb:42:55:76:d0:9e:4f:bb:18:09:59:e8:e8:1e:15:83:e4:fc:
         f7:e6:79:6a:c3:fb:7c:0d:0c:d8:be:55:77:0a:b8:25:98:e0:
         43:de:78:80:8e:60:41:0f:6d:38:e5:93:a1:94:c5:59:e3:87:
         f2:e2:7f:2b:08:19:99:21:f4:48:cd:a8:74:cb:96:ca:bd:e2:
         1a:f6:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:54 2026 by rpki-client