Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa
File:                     3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (raw, json)
Hash identifier:          9xIqyd7FqC7E5vM/2yM7xmyBSmnXPGROKdDFsYB3t7A=
Subject key identifier:   1B:38:EF:76:3A:DB:B0:17:BF:75:F6:CD:2E:7F:AE:B4:70:EC:3D:F3
Certificate issuer:       /CN=34A5DE28FDBC6F27C998277F953439F66D10A75E
Certificate serial:       308C75C6402B200552DE8764ED4E6516D1BFCB8A
Authority key identifier: 34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa
Signing time:             Sun 03 May 2026 02:59:26 +0000
ROA not before:           Sun 03 May 2026 02:54:26 +0000
ROA not after:            Sun 02 May 2027 02:59:26 +0000
asID:                     139374
IP address blocks:        103.142.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl
                          rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8c:75:c6:40:2b:20:05:52:de:87:64:ed:4e:65:16:d1:bf:cb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A5DE28FDBC6F27C998277F953439F66D10A75E
        Validity
            Not Before: May  3 02:54:26 2026 GMT
            Not After : May  2 02:59:26 2027 GMT
        Subject: CN=1B38EF763ADBB017BF75F6CD2E7FAEB470EC3DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:fd:83:70:74:9f:95:e6:5b:70:95:8b:17:
                    be:80:51:69:4c:8d:85:94:5d:ac:06:87:e9:ce:b5:
                    6c:61:1b:ce:4b:1d:e3:ae:3c:e6:1d:82:9f:df:c7:
                    cf:0d:65:eb:80:1b:9b:b4:2e:67:3a:b8:05:2c:cd:
                    4f:be:2a:c3:86:57:99:07:79:b9:3c:a8:fe:6c:a3:
                    aa:7c:6e:0f:fd:a5:3d:b2:ce:90:60:6e:4b:05:85:
                    ea:c8:f2:0b:12:3b:a4:e2:e7:65:db:0a:a9:aa:fe:
                    29:5e:29:a1:a7:13:01:50:fd:72:ec:08:0b:35:66:
                    d8:08:83:be:13:0a:60:0e:ff:0d:32:d5:82:77:97:
                    8c:13:cb:89:6e:a1:ed:fd:0b:c9:92:ef:4b:9d:28:
                    3b:f2:c0:a2:51:8e:1e:9d:f7:93:b1:23:ff:1f:5d:
                    ea:24:c1:bc:12:02:f9:c0:d7:3c:91:5d:aa:78:54:
                    4d:94:c5:81:69:01:52:d7:35:24:12:3f:4c:c6:3c:
                    3b:6f:c4:1f:36:89:d7:b7:9d:84:c8:9b:ca:a0:2f:
                    36:ec:ce:4f:c8:71:71:e5:86:ee:de:d0:4a:41:3b:
                    28:6b:be:ad:79:81:c2:d0:74:9e:84:89:11:2b:05:
                    f2:29:b0:03:61:97:64:6d:21:97:63:4c:2d:39:59:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:38:EF:76:3A:DB:B0:17:BF:75:F6:CD:2E:7F:AE:B4:70:EC:3D:F3
            X509v3 Authority Key Identifier:
                keyid:34:A5:DE:28:FD:BC:6F:27:C9:98:27:7F:95:34:39:F6:6D:10:A7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/34A5DE28FDBC6F27C998277F953439F66D10A75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34A5DE28FDBC6F27C998277F953439F66D10A75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:c5:33:af:4b:a7:83:a8:2b:7f:c9:4a:45:7c:a4:35:d0:
         2a:b6:30:44:f5:bd:1c:e1:24:b4:f1:e3:cd:0e:82:9d:0c:d2:
         79:6d:a5:2d:d5:bb:a9:5f:ab:5b:7a:06:26:85:d4:d7:34:42:
         1c:a7:26:66:89:98:f8:c6:e3:6c:c2:1a:55:c0:5d:ee:0f:69:
         6b:9a:17:fa:05:6a:0a:2d:a2:8d:17:73:7c:1d:ef:8b:9d:49:
         eb:11:02:7d:cd:44:de:64:74:46:71:38:b3:71:74:d2:b5:07:
         49:87:a4:a3:57:ad:65:38:0c:1c:43:35:16:f7:06:c2:fd:3d:
         3b:b4:4a:0e:b2:ad:b4:d5:8b:9a:89:18:c6:5f:48:2a:b1:71:
         79:e7:0e:af:89:af:da:b5:fc:6e:8a:6d:9f:e7:96:f6:af:bd:
         30:e4:bf:2f:9f:87:8c:60:27:69:66:f4:e2:82:6a:c0:0c:46:
         13:fb:80:19:67:b9:82:bf:67:b5:88:9d:bc:28:e6:70:86:2f:
         16:8d:f7:d2:ea:67:5a:d8:96:4a:77:74:5c:40:0c:b9:aa:51:
         3b:2e:7f:9e:ee:5b:d7:22:2e:a8:4d:13:e4:38:80:bd:f1:c5:
         16:0e:35:32:8d:7b:dc:7e:19:13:ff:40:8e:ea:d9:e1:7d:ff:
         cf:ea:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:56:46 2026 by rpki-client