Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa
File:                     3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (raw, json)
Hash identifier:          ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=
Subject key identifier:   52:BB:AD:F6:67:BE:9B:87:B0:CD:F7:06:BA:95:46:2F:E1:8F:F2:83
Certificate issuer:       /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D
Certificate serial:       1D57CDE50D527CCE5DA727890FC90D907C2206E1
Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa
Signing time:             Sun 03 May 2026 02:59:10 +0000
ROA not before:           Sun 03 May 2026 02:54:10 +0000
ROA not after:            Sun 02 May 2027 02:59:10 +0000
asID:                     136879
IP address blocks:        103.107.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl
                          rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:57:cd:e5:0d:52:7c:ce:5d:a7:27:89:0f:c9:0d:90:7c:22:06:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D
        Validity
            Not Before: May  3 02:54:10 2026 GMT
            Not After : May  2 02:59:10 2027 GMT
        Subject: CN=52BBADF667BE9B87B0CDF706BA95462FE18FF283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:14:64:5a:7b:e9:6c:42:85:d0:0f:fa:d4:
                    2e:d6:8c:d3:72:f4:6b:a1:52:07:6d:37:91:5a:9c:
                    78:0c:38:c4:97:8d:8e:5a:35:91:f8:2f:e3:fb:83:
                    79:c5:b4:3f:da:9f:a5:0e:b4:4a:dd:2a:b9:eb:22:
                    29:0f:65:ca:cc:9a:54:6b:41:cb:78:56:dc:bf:16:
                    58:5d:58:fb:bf:a4:6e:87:16:53:30:a7:68:91:e9:
                    55:31:bb:56:4f:5d:70:08:79:1a:cc:6e:50:11:10:
                    cc:05:b6:f6:6f:d5:22:c8:77:d4:3a:c4:9d:ac:3c:
                    d2:1f:9b:60:d3:87:b6:df:d7:92:36:43:66:e2:bd:
                    e1:7d:a2:e7:10:02:d8:36:66:37:5a:c8:59:62:e0:
                    db:81:87:c2:a9:9e:f0:6d:2b:76:d8:e7:d3:03:a5:
                    7c:fe:e6:66:bd:4d:5e:f1:6e:19:91:83:48:5e:c6:
                    c7:11:07:93:b3:62:2f:49:7e:99:f0:f0:08:b2:aa:
                    b3:5b:29:e5:ab:21:98:99:54:e6:07:39:60:51:54:
                    ab:f0:b6:08:f5:61:eb:69:4f:75:80:f1:c7:ca:15:
                    f0:1f:1f:b0:95:33:40:69:47:55:6f:57:64:5b:65:
                    96:b4:19:4f:d4:37:54:62:6e:2f:35:c9:05:3d:32:
                    a2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BB:AD:F6:67:BE:9B:87:B0:CD:F7:06:BA:95:46:2F:E1:8F:F2:83
            X509v3 Authority Key Identifier:
                keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:38:91:8a:de:36:92:de:bd:32:3d:04:35:8d:07:d8:5a:9f:
         3f:9b:56:1a:c5:27:b8:8d:15:6b:bc:2a:42:53:7f:fc:86:79:
         67:e5:42:f7:e9:f9:6f:31:3b:75:3e:ec:b9:e3:56:61:86:a8:
         7a:c3:1c:66:33:3b:51:a6:34:59:c9:67:7b:6f:85:a2:0f:26:
         c0:53:1c:39:04:8a:24:f1:0f:c4:71:50:ba:c8:4e:0d:10:4d:
         50:59:e8:61:96:26:88:38:4c:ad:44:ce:37:e6:20:8f:01:79:
         a7:4c:35:7e:af:23:09:00:4f:85:7c:5b:73:9b:b9:fe:83:66:
         39:bf:98:8e:f2:80:0e:42:f1:af:d4:83:cb:94:a0:95:b2:fd:
         7f:2e:2e:e9:88:2b:47:5b:56:1b:05:58:8f:3c:2e:60:52:f6:
         fc:4c:fd:de:9b:f9:84:64:f4:c8:e8:40:46:ca:02:40:57:47:
         f4:bc:f7:f1:99:79:91:c6:2e:49:03:a1:63:47:15:b1:ad:60:
         5d:69:78:d9:5d:15:de:11:10:ec:5f:5f:b8:6f:c5:0e:bb:fd:
         9a:95:20:9f:3c:5d:58:af:0f:ad:57:de:66:aa:df:e8:1f:d2:
         97:fc:27:ca:e0:e6:71:c6:22:d4:89:a6:ef:bb:d2:8f:28:8f:
         69:eb:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:33:52 2026 by rpki-client