Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          m7uPNuZw3t1vASN7WpScOi7UugEIi5WgXEeUkw1LbeE=
Subject key identifier:   32:83:7B:80:77:33:B0:1F:4C:88:BC:EE:98:DF:84:75:70:2D:C8:F2
Certificate issuer:       /CN=EAC36BE8959CA224F62797D3331900441E4C9AA0
Certificate serial:       49D1D942D479A7C9747A1314FDEAD52D258AC0FA
Authority key identifier: EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 03:00:49 +0000
ROA not before:           Sun 03 May 2026 02:55:49 +0000
ROA not after:            Sun 02 May 2027 03:00:49 +0000
asID:                     135478
IP address blocks:        103.121.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.crl
                          rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d1:d9:42:d4:79:a7:c9:74:7a:13:14:fd:ea:d5:2d:25:8a:c0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC36BE8959CA224F62797D3331900441E4C9AA0
        Validity
            Not Before: May  3 02:55:49 2026 GMT
            Not After : May  2 03:00:49 2027 GMT
        Subject: CN=32837B807733B01F4C88BCEE98DF8475702DC8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:57:32:7d:ef:cb:8b:de:e4:6f:9c:c6:5a:
                    81:d2:3e:d6:40:b8:50:9f:0c:42:e5:72:81:a3:d5:
                    a6:d7:16:7f:55:27:bf:f6:11:c4:94:0f:91:cd:94:
                    ad:0a:a8:63:ee:70:2b:c9:99:ec:9d:76:a8:97:d6:
                    8d:e2:a3:c2:bf:f1:76:75:61:63:50:64:4f:f4:8e:
                    60:20:d6:a6:cb:ed:60:05:59:61:2c:68:8e:51:40:
                    e2:2d:ee:67:46:65:04:00:f0:27:3a:09:13:98:c3:
                    5f:41:55:09:b7:47:52:58:51:14:37:e7:7f:bf:71:
                    c6:f0:c2:e8:ef:41:4e:55:b7:21:45:37:ab:a2:6c:
                    0d:80:62:d4:1c:59:2a:0c:87:9b:a3:da:62:d2:db:
                    34:37:76:7c:7d:f5:6c:c2:ab:fa:d9:07:a6:80:b4:
                    49:45:8c:94:8b:ed:d7:b7:f5:e2:82:e9:2b:5c:57:
                    79:04:6a:78:19:5b:50:59:0a:fe:8c:7b:c2:f8:0f:
                    3b:fc:ef:e5:db:c2:47:7e:31:16:99:6b:e7:79:11:
                    ff:37:94:76:ef:c6:b7:1d:be:07:73:c6:c9:21:c0:
                    19:c6:44:55:11:1c:15:c4:22:4b:3a:cf:6a:90:d5:
                    fe:c0:b0:d4:09:1a:16:60:16:56:a0:65:82:b3:80:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:83:7B:80:77:33:B0:1F:4C:88:BC:EE:98:DF:84:75:70:2D:C8:F2
            X509v3 Authority Key Identifier:
                keyid:EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:c1:ee:c5:77:a7:8e:56:09:93:c7:e3:3b:7f:fc:8e:c0:
         b2:1f:f3:a1:2f:3d:03:4b:05:8c:76:9a:58:eb:5c:b7:28:c4:
         5a:28:cb:6c:7d:1a:d7:6a:49:bc:2c:5b:ae:34:21:ad:ea:d0:
         78:18:18:f7:88:ff:60:c5:fa:ea:42:a6:54:33:da:3a:c7:b4:
         81:67:13:65:25:24:48:76:d9:51:fd:e4:c9:a6:23:e1:a5:1d:
         77:7d:35:d5:5b:f2:c9:3b:b4:c9:46:5d:9c:4c:1a:c7:fd:a4:
         3a:c7:b0:1c:a5:31:f3:e4:43:b6:62:b3:7b:54:b7:ba:f3:94:
         16:bf:33:73:bd:39:c0:f7:0d:b6:b4:cc:08:45:d2:69:73:cf:
         02:6a:d1:c9:d0:78:08:c8:02:88:1d:be:75:4b:e1:7d:a9:ee:
         43:d4:63:ae:d6:33:09:e6:f2:bd:b1:ef:93:60:0b:f7:54:b2:
         c3:6c:34:c4:77:6a:d5:8d:a4:24:10:6f:99:fb:0a:b4:dd:6e:
         e1:fc:e3:ab:91:87:55:a2:c7:eb:25:3c:2b:fb:bc:94:87:bc:
         c7:34:4a:f7:30:9b:ac:d7:3b:42:e2:54:71:07:a6:47:42:dc:
         1d:1c:9c:17:8d:0b:bf:74:8a:1e:93:8e:cd:6f:51:04:14:aa:
         42:8f:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:43 2026 by rpki-client