Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa
File:                     3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (raw, json)
Hash identifier:          eM4zTeT5x8zRTCedGRk54XligMqqPoDVVW+mAmQIEvQ=
Subject key identifier:   7A:94:6E:93:26:C8:F9:63:3A:2E:16:5E:5C:9A:A5:72:0C:40:F1:9E
Certificate issuer:       /CN=B68C761C821AA1629C9F6105D99B85E34433B478
Certificate serial:       1A08C036E881535B753582EBA7954DE62944B676
Authority key identifier: B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa
Signing time:             Sun 03 May 2026 02:56:30 +0000
ROA not before:           Sun 03 May 2026 02:51:30 +0000
ROA not after:            Sun 02 May 2027 02:56:30 +0000
asID:                     136058
IP address blocks:        103.82.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl
                          rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:08:c0:36:e8:81:53:5b:75:35:82:eb:a7:95:4d:e6:29:44:b6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B68C761C821AA1629C9F6105D99B85E34433B478
        Validity
            Not Before: May  3 02:51:30 2026 GMT
            Not After : May  2 02:56:30 2027 GMT
        Subject: CN=7A946E9326C8F9633A2E165E5C9AA5720C40F19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:c4:c8:46:bb:5e:db:97:b0:2a:c1:32:a4:
                    dd:7d:ad:a7:1a:ca:c4:d3:80:79:51:86:59:57:a3:
                    e5:3f:95:fa:7b:cf:04:67:b5:01:f0:f0:71:83:c7:
                    29:70:29:6f:cb:d1:1b:b4:ab:d3:0b:e1:6e:a2:68:
                    f5:63:35:f3:7e:b4:a0:31:aa:89:88:bc:63:d8:9b:
                    17:34:1f:71:2d:0f:e1:a2:dc:47:52:26:a1:7c:48:
                    b9:cf:73:b6:ba:fc:3c:91:d7:36:4e:36:65:78:e2:
                    1e:87:8e:6b:0c:39:64:7d:3e:c5:97:48:16:3d:c1:
                    fd:dd:50:28:15:61:e8:55:db:bb:09:09:b6:ec:ae:
                    a2:b1:1d:bc:63:73:6c:34:cc:49:5b:b5:32:4e:02:
                    68:c9:fb:b9:f3:28:3f:14:d2:c0:1a:81:a4:6c:17:
                    9c:09:56:08:1c:60:40:20:c8:21:f8:c6:ba:9d:ec:
                    28:86:7e:8e:66:ff:65:42:bb:c8:b3:d4:8e:f6:75:
                    1c:b6:a4:14:89:e9:26:b3:de:a0:76:b9:57:cc:77:
                    d9:f6:f0:fa:00:cd:55:b8:15:72:c5:d7:55:73:58:
                    d4:3b:53:c5:75:6f:7e:47:e5:a6:6c:ff:e2:42:c2:
                    50:b1:20:a3:3c:e0:c3:a5:d7:31:14:5f:62:19:88:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:94:6E:93:26:C8:F9:63:3A:2E:16:5E:5C:9A:A5:72:0C:40:F1:9E
            X509v3 Authority Key Identifier:
                keyid:B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ca:a6:e2:42:97:81:fe:55:cf:a5:04:25:a5:01:56:cf:19:
         36:fa:7a:c8:ed:12:18:35:87:29:a5:b6:f7:28:60:f2:11:8d:
         50:d7:d9:f7:6c:d7:4c:f6:0d:e3:01:1d:1d:b8:5f:49:17:2b:
         d9:a3:81:24:b2:76:28:ca:b8:2d:3f:69:5b:27:19:18:2f:b3:
         6b:2e:25:5a:f1:0b:47:93:c8:b0:78:ef:12:de:b8:ce:7a:25:
         f0:36:2b:20:12:f2:b6:3e:38:25:a3:4b:1d:f1:3d:9e:b1:da:
         a2:ad:87:97:b9:1f:cb:de:41:30:86:5f:b7:b6:aa:f8:64:e2:
         a6:2c:95:96:c5:1a:cf:ee:ea:e7:5c:8f:bd:5f:ca:23:76:3c:
         32:9f:04:a7:51:71:5c:e2:ac:9d:24:3c:2c:55:c7:85:ab:2c:
         6e:b8:49:3b:7c:61:77:6c:93:cf:23:c3:fe:28:be:2f:c0:f3:
         e0:ee:06:8f:8c:3c:e6:3f:da:8b:1a:88:e5:35:6c:19:ac:be:
         ce:7f:f1:1a:da:9b:6d:ca:34:86:05:7d:b2:e1:ae:eb:18:d8:
         92:30:4c:89:33:a7:41:be:75:aa:fe:5e:7d:98:d3:b4:17:9c:
         b9:7e:7e:35:1d:a5:ff:b8:3e:cd:f9:fb:cf:70:a2:c3:dd:f6:
         0c:04:81:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:34 2026 by rpki-client